Virtual self-destruction of stored information

• US 9,245,155 B1
• Filed: 03/14/2013
• Issued: 01/26/2016
• Est. Priority Date: 04/12/2010
• Status: Active Grant

• Current Assignee: Melvin, Stephen Waller
• Original Assignee: Melvin, Stephen Waller
• Inventors: Melvin, Stephen Waller
• Primary Examiner(s): Davis, Zachary A
• Assistant Examiner(s): Almeida, Devin
• Application Number:
  US13/826,642
• Time in Patent Office: 1,048 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB

Abstract

A method and apparatus are utilized to conveniently and swiftly render stored information inaccessible. Sensitive information is stored in an encrypted form and by eliminating the key or keys which are needed for decryption, the stored information becomes virtually destroyed. A variety of mechanisms and policies can be used to manage, set and eliminate decryption keys. In some cases decryption keys can be stored in volatile storage elements so that by merely interrupting power to the storage element, the decryption keys are eliminated. In this way, a manually controlled mechanism can be used to allow a user to accomplish a “self-destruct” of the stored information instantly without the need for the operation of any processor and without the need to change any stored information.

Claims

1. An apparatus comprising:

a portable storage device capable of storing encrypted information;

a decryption apparatus coupled to said portable storage device;

a radio receiver responsive to a radio signal from a radio transmitter and configured to generate a key elimination signal based on a failure to receive said radio signal, wherein said failure to receive said radio signal is based on a proximity between said radio transmitter and said radio receiver, such that said radio transmitter must be continuously proximate to said radio receiver to prevent said key elimination signal from being generated and when said radio transmitter is greater than a predetermined distance from said radio receiver said key elimination signal is generated;

a storage circuit configured to store a plurality of decryption keys, wherein said plurality of decryption keys can be used to decrypt information stored on said portable storage device;

a key elimination circuit configured to trigger said storage circuit thereby causing the elimination of a first non-empty subset of said plurality of decryption keys, without eliminating a second non-empty subset of said plurality of decryption keys, wherein said key elimination circuit is responsive to said key elimination signal, such that the elimination of said a first non-empty subset of decryption keys is triggered by a physical movement between said radio transmitter and said radio receiver.

2. The apparatus according to claim 1 further comprising:

an encryption apparatus coupled to said portable storage device configured to encrypt information received before being delivered to said portable storage device.

3. The apparatus according to claim 1 wherein said storage circuit can be detached from said portable storage device.

4. The apparatus according to claim 1 wherein said storage circuit comprises volatile memory and wherein said trigger causes power to be interrupted to said voltage memory.

5. A method of protecting stored information comprising the steps of:

storing a plurality of decryption keys in a storage circuit;

receiving encrypted information from a portable storage device;

decrypting said encrypted information to generate decrypted information using at least one of said plurality of decryption keys;

delivering said decrypted information to a host device;

operating a radio receiver configured to receive a radio signal from a radio transmitter and generating a key elimination signal if a signal is not received from said radio transmitter, wherein receipt of said radio signal is based on a proximity between said radio transmitter and said radio receiver, such that said radio transmitter must be continuously proximate to said radio receiver to prevent said key elimination signal from being generated and when said radio transmitter is greater than a predetermined distance from said radio receiver said key elimination signal is generated;

eliminating a first non-empty subset of said plurality of decryption keys, without eliminating a second non-empty subset of said plurality of decryption keys if said key elimination signal is generated, such that the elimination of said a first non-empty subset of decryption keys is triggered by a physical movement between said radio transmitter and said radio receiver.

6. The method according to claim 5 further comprising the step of:

receiving information from said host device;

encrypting information using an encryption key;

storing said encrypted information on said portable storage device.

7. The method according to claim 5 wherein said storage circuit can be detached from said portable storage device.

8. The method according to claim 5 wherein said storage circuit comprises volatile memory storage and wherein said step of eliminating comprises interrupting power to said volatile memory.