Computer security system having integrated GPS

• US 9,665,742 B2
• Filed: 07/16/2013
• Issued: 05/30/2017
• Est. Priority Date: 09/23/2009
• Status: Active Grant

• Current Assignee: Kyndryl Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Dewilde, Frederick C.
• Primary Examiner(s): Zimmerman, Brian
• Assistant Examiner(s): Lau, Kevin
• Application Number:
  US13/943,741
• Publication Number:
  US 20130305395A1
• Time in Patent Office: 1,414 Days
• Field of Search: None
• CPC Class Codes: G06F 21/80 in storage media based on magnetic or optical technology, e.g. disks with sectors preventing unauthorised reproduction or copying of disc-type recordable media G11B20/00
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen

Abstract

A computing apparatus having a hard drive storage unit which includes a global positioning system, a non-volatile memory and a compare module. The non-volatile memory stores a permitted zone of operation of the hard drive storage unit while the compare module monitors the current location. If the compare module detects a current location of the hard drive storage unit as tracked by the global positioning system which is outside of the permitted zone of operation as stored in the non-volatile memory, the non-volatile memory contains at least one command implemented by a computer processor that may cause the hard drive storage unit to become disabled.

Claims

1. A secured external computer storage device attached to a portable computer, comprising:

a portable hard drive,

a circuit board onto which is mounted a dual-function component consisting of a magnetosensitive random access memory (MRAM) and a microcontroller,

a wireless transceiver capable of bidirectional communications between the microcontroller and a processor hosting a Web site, where the Web site is configured to perform a method for securing the portable hard drive,

a GPS capable of identifying whether hardware components of the storage device are physically located in a permitted building, and

firmware stored in the MRAM comprising instructions for securing the portable hard drive, and

a switching mechanism that controls distribution of power to components of the storage device, where the switching mechanism is capable of only three disabling operations;

disabling power to only the circuit board, disabling power only to all components of the storage device other than the circuit board, and disabling power to all components of the storage device, the method comprising;

the processor of the Web site receiving, through the transceiver, a notification that the GPS has determined that the portable hard drive is no longer in the permitted building;

the processor, in response to the receiving, notifying a user of the portable computer that the portable hard drive is no longer in the permitted building; and

the processor, in response to determining that the portable hard drive remains outside the permitted building after the notifying, instructing the microcontroller to perform the following sequence of operations;

disabling power, by means of the switching mechanism, to the hard drive but not to the dual-function component;

directing the portable computer to reboot and request a security code; and

, upon a failure to receive a desired security code, removing the device from a BIOS of the portable computer without restoring power to the portable hard drive and without purging data from the portable hard drive.

2. The storage device of claim 1, where the method further comprises:

the processor, receiving a security code from the user in response to the notifying;

the processor, determining that the received security code is acceptable;

the processor identifying that the portable hard drive is in the permitted building;

the processor instructing the switching mechanism, through the transceiver, to restore power to the dual-purpose component; and

the processor instructing the microcontroller to add the portable hard drive to the BIOS.

3. The storage device of claim 1, where the method further comprises:

the processor, receiving a security code from the user in response to the notifying;

the processor, determining that the received security code is acceptable;

the processor identifying that the portable hard drive remains outside the permitted building;

the processor instructing the switching mechanism, through the transceiver, to restore power to the dual-purpose component;

the processor instructing the microcontroller to add the portable hard drive to the BIOS; and

the processor reconfiguring the firmware in the MRAM to reclassify the current location of the hard drive to be the permitted building.

4. The storage device of claim 1, where the method further comprises:

the processor, receiving a security code from the user in response to the notifying;

the processor, determining that the received security code is not acceptable;

the processor identifying that the portable hard drive remains outside the permitted building;

the processor instructing the switching mechanism, through the transceiver, to restore power to the dual-purpose component;

the processor instructing the microcontroller to remove power from the portable hard drive.

5. The storage device of claim 1, where the method further comprises:

the processor, receiving a security code from the user in response to the notifying;

the processor, determining that the received security code is not acceptable;

the processor identifying that the portable hard drive remains outside the permitted building;

the processor instructing the switching mechanism, through the transceiver, to restore power to the dual-purpose component;

the processor instructing the microcontroller to purge data stored on the portable hard drive.

6. A method for securing a secured external computer storage device attached to a portable computer, where the storage device comprises:

a portable hard drive,

a circuit board onto which is mounted a dual-function component consisting of a magnetosensitive random access memory (MRAM) and a microcontroller,

a wireless transceiver capable of bidirectional communications between the microcontroller and a processor hosting a Web site, where the Web site is configured to perform a method for securing the portable hard drive,

a GPS capable of identifying whether hardware components of the storage device are physically located in a permitted building, and

firmware stored in the MRAM comprising instructions for securing the portable hard drive, and

a switching mechanism that controls distribution of power to components of the storage device, where the switching mechanism is capable of only three disabling operations;

disabling power to only the circuit board, disabling power only to all components of the storage device other than the circuit board, and disabling power to all components of the storage device, the method comprising;

the processor of the Web site receiving, through the transceiver, a notification that the GPS has determined that the portable hard drive is no longer in the permitted building;

the processor, in response to the receiving, notifying a user of the portable computer that the portable hard drive is no longer in the permitted building; and

the processor, in response to determining that the portable hard drive remains outside the permitted building after the notifying, instructing the microcontroller to perform the following sequence of operations;

disabling power, by means of the switching mechanism, to the hard drive but not to the dual-function component;

directing the portable computer to reboot and request a security code; and

, upon a failure to receive a desired security code, removing the device from a BIOS of the portable computer without restoring power to the portable hard drive and without purging data from the portable hard drive.

7. The method of claim 6, where the method further comprises:

the processor, receiving a security code from the user in response to the notifying;

the processor, determining that the received security code is acceptable;

the processor identifying that the portable hard drive is in the permitted building;

the processor instructing the switching mechanism, through the transceiver, to restore power to the dual-purpose component; and

the processor instructing the microcontroller to add the portable hard drive to the BIOS.

8. The method of claim 6, where the method further comprises:

the processor, receiving a security code from the user in response to the notifying;

the processor, determining that the received security code is acceptable;

the processor identifying that the portable hard drive remains outside the permitted building;

the processor instructing the switching mechanism, through the transceiver, to restore power to the dual-purpose component;

the processor instructing the microcontroller to add the portable hard drive to the BIOS; and

the processor reconfiguring the firmware in the MRAM to reclassify the current location of the hard drive to be the permitted building.

9. The method of claim 6, where the method further comprises:

the processor, receiving a security code from the user in response to the notifying;

the processor, determining that the received security code is not acceptable;

the processor identifying that the portable hard drive remains outside the permitted building;

the processor instructing the switching mechanism, through the transceiver, to restore power to the dual-purpose component;

the processor instructing the microcontroller to remove power from the portable hard drive.

10. The method of claim 6, where the method further comprises:

the processor, receiving a security code from the user in response to the notifying;

the processor, determining that the received security code is not acceptable;

the processor identifying that the portable hard drive remains outside the permitted building;

the processor instructing the switching mechanism, through the transceiver, to restore power to the dual-purpose component;

the processor instructing the microcontroller to purge data stored on the portable hard drive.

11. A computer program product, comprising a computer-readable program code configured to be executed by a computer system hosting a Web site comprising a processor, a memory coupled to the processor, and a computer-readable hardware storage device coupled to the processor, the computer-readable storage device containing program code configured to be run by the processor via the memory to implement a method for securing a secured external computer storage device attached to a portable computer, where the secured external computer storage device comprises:

a portable hard drive,

a circuit board onto which is mounted a dual-function component consisting of a magnetosensitive random access memory (MRAM) and a microcontroller,

a wireless transceiver capable of bidirectional communications between the microcontroller and a processor hosting a Web site, where the Web site is configured to perform a method for securing the portable hard drive,

a GPS capable of identifying whether hardware components of the secured external computer storage device are physically located in a permitted building, and

firmware stored in the MRAM comprising instructions for securing the portable hard drive, and

a switching mechanism that controls distribution of power to components of the storage device, where the switching mechanism is capable of only three disabling operations;

disabling power to only the circuit board, disabling power only to all components of the storage device other than the circuit board, and disabling power to all components of the storage device, the method comprising;

the processor of the Web site receiving, through the transceiver, a notification that the GPS has determined that the portable hard drive is no longer in the permitted building;

the processor, in response to the receiving, notifying a user of the portable computer that the portable hard drive is no longer in the permitted building; and

the processor, in response to determining that the portable hard drive remains outside the permitted building after the notifying, instructing the microcontroller to perform the following sequence of operations;

disabling power, by means of the switching mechanism, to the hard drive but not to the dual-function component;

directing the portable computer to reboot and request a security code; and

, upon a failure to receive a desired security code, removing the device from a BIOS of the portable computer without restoring power to the portable hard drive and without purging data from the portable hard drive.

12. The computer program product of claim 11, where the method further comprises:

the processor, receiving a security code from the user in response to the notifying;

the processor, determining that the received security code is acceptable;

the processor identifying that the portable hard drive is in the permitted building;

the processor instructing the switching mechanism, through the transceiver, to restore power to the dual-purpose component; and

the processor instructing the microcontroller to add the portable hard drive to the BIOS.

13. The computer program product of claim 11, where the method further comprises:

the processor, receiving a security code from the user in response to the notifying;

the processor, determining that the received security code is acceptable;

the processor identifying that the portable hard drive remains outside the permitted building;

the processor instructing the switching mechanism, through the transceiver, to restore power to the dual-purpose component;

the processor instructing the microcontroller to add the portable hard drive to the BIOS; and

the processor reconfiguring the firmware in the MRAM to reclassify the current location of the hard drive to be the permitted building.

14. The computer program product of claim 11, where the method further comprises:

the processor, receiving a security code from the user in response to the notifying;

the processor, determining that the received security code is not acceptable;

the processor identifying that the portable hard drive remains outside the permitted building;

the processor instructing the switching mechanism, through the transceiver, to restore power to the dual-purpose component;

the processor instructing the microcontroller to remove power from the portable hard drive.

15. The computer program product of claim 11, where the method further comprises:

the processor, receiving a security code from the user in response to the notifying;

the processor, determining that the received security code is not acceptable;

the processor identifying that the portable hard drive remains outside the permitted building;

the processor instructing the switching mechanism, through the transceiver, to restore power to the dual-purpose component;

the processor instructing the microcontroller to purge data stored on the portable hard drive.