Method and system for remote data access using a mobile device

• US 9,614,858 B2
• Filed: 01/07/2016
• Issued: 04/04/2017
• Est. Priority Date: 05/16/2008
• Status: Active Grant

• Current Assignee: Quick Vault, Inc. (d/b/a CloudVault)
• Original Assignee: Quick Vault, Inc. (d/b/a CloudVault)
• Inventors: Bacastow, Steven V.
• Primary Examiner(s): HERZOG, MADHURI R
• Application Number:
  US14/990,438
• Publication Number:
  US 20160119360A1
• Time in Patent Office: 453 Days
• Field of Search: 726 2- 7, 726 21, 726 26- 30, 713168-170
• CPC Class Codes: G06F 11/1458 Management of the backup or restore process
• CPC Class Codes: G06F 21/121 Restricting unauthorised execution of programs
• CPC Class Codes: G06F 21/305 by remotely controlling device operation
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/06 : Authentication
• CPC Class Codes: H04W 12/08 : Access security
• CPC Class Codes: H04W 4/80 : Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A system and method for securely storing, retrieving and sharing data using PCs and mobile devices and for controlling and tracking the movement of data to and from a variety of computing and storage devices.

Claims

1. A computer-implemented method for remote data access using a mobile device, comprising the steps of:

a remote computer receiving from a first mobile device a first authentication request comprising a first mobile device unique identifier and a first software unique identifier, the first mobile device unique identifier comprising a first device serial number and the first software unique identifier comprising a first software license key, the first software license key associated with software stored on the first mobile device;

the remote computer determining whether the first mobile device is authorized for use with the remote computer by determining a valid combination of the first mobile device unique identifier and the first software unique identifier, the remote computer comprising a plurality of security settings, each of the security settings associated with a single mobile device and comprising a unique combination of a mobile device unique identifier and a software unique identifier;

upon determining that the first mobile device is authorized, the remote computer transmitting to the first mobile device a validation message associated with the first mobile device;

the remote computer receiving from the first mobile device a first file copied from the first mobile device;

the remote computer storing a first detail message in a meta-data log, the first detail message associated with the first file copied from the first mobile device to the remote computer, the first detail message comprising at least a name of the first file copied from the first mobile device to the remote computer;

the remote computer receiving from a second mobile device a second authentication request comprising a second mobile device unique identifier and a second software unique identifier, the second mobile device unique identifier comprising a second device serial number and the second software unique identifier comprising a second software license key, the second software license key associated with software stored on the second mobile device;

the remote computer determining whether the second mobile device is authorized for use with the remote computer by determining a valid combination of the second mobile device unique identifier and the second software unique identifier;

upon determining that the second mobile device is authorized, the remote computer transmitting to the second mobile device a validation message associated with the second mobile device;

the remote computer transmitting to the second mobile device a copy of the first file copied from the first mobile device to the remote computer; and

the remote computer storing in the meta-data log a second detail message associated with the first file transmitted from the remote computer to the second mobile device.

2. The computer-implemented method of claim 1, wherein a first user name and a first password are authenticated by a software application on the first mobile device based on local security rules stored on the first mobile device and operable to authorize the transfer of files to and from the remote computer.

3. The computer-implemented method of claim 1, wherein a second user name and a second password are authenticated by a software application on the second mobile device based on local security rules stored on the second mobile device and operable to authorize the transfer of files to and from the remote computer.

4. The computer-implemented method of claim 1, wherein the first detail message further comprises at least one of:

a file type, a date created, a date transferred, and a volume.

5. The computer-implemented method of claim 1, wherein the first mobile device comprises a processor, an operating system, a non-volatile flash memory, and a wireless antenna for communicating with the remote computer.

6. The computer-implemented method of claim 1, wherein the second mobile device comprises a processor, an operating system, a non-volatile flash memory, and a wireless antenna for communicating with the remote computer.

7. The computer-implemented method of claim 1, wherein the first mobile device receives authorization to upload or download files from the remote computer based on remote security rules.

8. The computer-implemented method of claim 1, wherein the second mobile device receives authorization to upload or download files from the remote computer based on remote security rules.

9. A computer-implemented method for remote data access using a mobile device, comprising the steps of:

a remote computer receiving from a first mobile device a first authentication request comprising a first mobile device unique identifier and a first software unique identifier, the first mobile device unique identifier comprising a first device serial number and the first software unique identifier comprising a first software license key, the first software license key associated with software stored on the first mobile device;

the remote computer determining whether the first mobile device is authorized for use with the remote computer by determining a valid combination of the first mobile device unique identifier and the first software unique identifier, the remote computer comprising a plurality of security settings, each of the security settings associated with a single mobile device and comprising a unique combination of a mobile device unique identifier and a software unique identifier;

upon determining that the first mobile device is authorized, the remote computer transmitting to the first mobile device a validation message associated with the first mobile device;

the remote computer receiving from the first mobile device a first file copied from the first mobile device; and

the remote computer storing a detail message in a meta-data log, the detail message associated with the first file copied from the first mobile device to the remote computer, the detail message comprising at least a name of the first file copied from the first mobile device to the remote computer.

10. The computer-implemented method of claim 9, wherein a first user name and a first password are authenticated by a software application on the first mobile device based on local security rules stored on the first mobile device and operable to authorize the transfer of files to and from the remote computer.

11. The computer-implemented method of claim 9, wherein the detail message further comprises at least one of:

a file type, a date created, a date transferred, and a volume.

12. The computer-implemented method of claim 9, wherein the first mobile device comprises a processor, an operating system, a non-volatile flash memory, and a wireless antenna for communicating with the remote computer.

13. The computer-implemented method of claim 9, wherein the first mobile device receives authorization to upload or download files from the remote computer based on remote security rules.

14. A computer-implemented method for remote data access using a mobile device, comprising the steps of:

a remote computer receiving from a second mobile device a second authentication request comprising a second mobile device unique identifier and a second software unique identifier, the second mobile device unique identifier comprising a second device serial number and the second software unique identifier comprising a second software license key, the second software license key associated with software stored on the second mobile device;

the remote computer determining whether the second mobile device is authorized for use with the remote computer by determining a valid combination of the second mobile device unique identifier and the second software unique identifier, the remote computer comprising a plurality of security settings, each of the security settings associated with a single mobile device and comprising a unique combination of a mobile device unique identifier and a software unique identifier;

upon determining that the second mobile device is authorized, the remote computer transmitting to the second mobile device a validation message associated with the second mobile device;

the remote computer transmitting to the second mobile device a copy of a first file copied from a first mobile device to the remote computer; and

the remote computer storing in a meta-data log a detail message associated with the first file transmitted from the remote computer to the second mobile device.

15. The computer-implemented method of claim 14, wherein a second user name and a second password are authenticated by a software application on the second mobile device based on local security rules stored on the second mobile device and operable to authorize the transfer of files to and from the remote computer.

16. The computer-implemented method of claim 14, wherein the detail message comprises at least one of:

a name of the first file, a file type, a date created, a date transferred, and a volume.

17. The computer-implemented method of claim 14, wherein the second mobile device comprises a processor, an operating system, a non-volatile flash memory, and a wireless antenna for communicating with the remote computer.

18. The computer-implemented method of claim 14, wherein the second mobile device receives authorization to upload or download files from the remote computer based on remote security rules.