Location sensitive solid state drive

• US 9,229,880 B2
• Filed: 09/04/2013
• Issued: 01/05/2016
• Est. Priority Date: 06/12/2009
• Status: Active Grant

• Current Assignee: Comtech Systems, Inc. (Comtech Telecommunications Corporation)
• Original Assignee: TeleCommunication Systems Inc (Comtech Telecommunications Corporation)
• Inventors: Jones, Roydn, Vancouvering, Ken
• Primary Examiner(s): Hailu, Teshome
• Assistant Examiner(s): WYSZYNSKI, AUBREY H
• Application Number:
  US14/017,808
• Publication Number:
  US 20140013443A1
• Time in Patent Office: 853 Days
• Field of Search: 726/27
• US Class Current: 1/1
• CPC Class Codes: G06F 12/0246 in block erasable memory, e.g. flash memory
• CPC Class Codes: G06F 12/1416 by checking the object accessibility, e.g. type of access defined by the memory independently of subject rights G06F12/1458 takes precedence
• CPC Class Codes: G06F 12/1425 the protection being physical, e.g. cell, word, block
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 2212/1052 Security improvement
• CPC Class Codes: G06F 2212/455 Image or video data
• CPC Class Codes: G06F 2212/7209 Validity control, e.g. using flags, time stamps or sequence numbers
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 3/0623 in relation to content
• CPC Class Codes: G06F 3/0653 Monitoring storage devices or systems
• CPC Class Codes: G06F 3/067 Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]
• CPC Class Codes: G06F 3/0679 Non-volatile semiconductor memory device, e.g. flash memory, one time programmable memory [OTP]
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 4/025 using location based information parameters

Abstract

A data storage system including a SSD includes a capability to detect whether its location is acceptable for function, and a capability to self-disable in the event the location of the device is unacceptable, or to self-enable only while the location of the device is acceptable.

Claims

1. A self-enabling data storage device, comprising:

a persistent storage device;

a location sensor to sense a current location of said persistent storage device;

an encryption key to set an encryption of data stored in said persistent storage device based on said current location; and

an enabler to self-enable operation of said persistent storage device when said current location of said persistent storage device falls within a permitted location;

wherein said persistent storage device is programmable to self-activate at least one of a fast erase function of said persistent storage device, a secure erase function of said persistent storage device, and a destructive erase function of said persistent storage device, when said persistent storage device is located in a non-permitted location.

2. The self-enabling data storage device according to claim 1, wherein said persistent storage device comprises:

a solid state drive (SSD).

3. The self-enabling data storage device according to claim 1, wherein said location sensor comprises:

a global positioning system (GPS) device.

4. The self-enabling data storage device according to claim 1, wherein:

said location sensor comprises a long range navigation (LORAN) receiver.

5. The self-enabling data storage device according to claim 1, wherein:

said data stored in said persistent storage device is encrypted when said current location does not match said permitted location wherein said persistent storage device is permitted to operate.

6. A self-disabling data storage device, comprising:

a persistent storage device;

a location sensor to sense a current location of said persistent storage device;

a decryption key to set decryption of data stored in said persistent storage device based on said current location; and

a disabler to self-disable operation of said persistent storage device when said current location of said persistent storage device falls within a non-permitted location;

wherein said persistent storage device is programmable to self-activate at least one of a fast erase function of said persistent storage device, a secure erase function of said persistent storage device, and a destructive erase function of said persistent storage device, when said persistent storage device is located in said non-permitted location.

7. The self-disabling data storage device according to claim 6, wherein said persistent storage device comprises:

a solid state drive (SSD).

8. The self-disabling data storage device according to claim 6, wherein said location sensor comprises:

a global positioning system (GPS) device.

9. The self-disabling data storage device according to claim 6, wherein:

said location sensor comprises a long range navigation (LORAN) receiver.

10. The self-disabling data storage device according to claim 6, wherein:

said data stored in said persistent storage device is decrypted when said current location does not match said non-permitted location where said persistent storage device is disabled.

11. A method of self-enabling data storage, comprising:

sensing a current location of a persistent storage device;

setting an encryption of data stored in said persistent storage device based on said current location;

self-enabling operation of said persistent storage device when said current location of said persistent storage device falls within a permitted location; and

self-activating at least one of a fast erase function of said persistent storage device, a secure erase function of said persistent storage device, and a destructive erase function of said persistent storage device, when said persistent storage device is located in a non-permitted location.

12. The method of self-enabling data storage according to claim 11, wherein:

said persistent storage device is a solid state drive (SSD).

13. The method of self-enabling data storage according to claim 11, wherein:

said current location is sensed by a global positioning system (GPS) device.

14. The method of self-enabling data storage according to claim 11, wherein:

said location sensor comprises a long range navigation (LORAN) receiver.

15. The method of self-enabling data storage according to claim 11, wherein:

said data stored in said persistent storage device is encrypted when said current location does not match said permitted location where said persistent storage device is permitted to operate.

16. A method of self-enabling data storage device, comprising:

sensing a current location of a persistent storage device;

setting a decryption of data stored in said persistent storage device based on said current location;

self-disabling operation of said persistent storage device when said current location of said persistent storage device falls within a non-permitted location; and

self-activating at least one of a fast erase function, a secure erase function, and a destructive erase function when said persistent storage device is located in a non-permitted location.

17. The method of self-enabling data storage according to claim 16, wherein:

said persistent storage device is a solid state drive (SSD).

18. The method of self-enabling data storage according to claim 16, wherein:

said current location is sensed by a global positioning system (GPS) device.

19. The method of self-enabling data storage according to claim 16, wherein:

said location sensor comprises a long range navigation (LORAN) receiver.

20. The method of self-enabling data storage according to claim 16, wherein:

said data stored in said persistent storage device is decrypted when said current location does not match said non-permitted location where said persistent storage device is disabled.