Providing data security with a token device

• US 9,667,621 B2
• Filed: 03/26/2015
• Issued: 05/30/2017
• Est. Priority Date: 01/28/2015
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Hintermeister, Gregory R.
• Primary Examiner(s): Hirl, Joseph P
• Assistant Examiner(s): MURPHY, JOSEPH B
• Application Number:
  US14/669,027
• Publication Number:
  US 20160219034A1
• Time in Patent Office: 796 Days
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 9/0863 involving passwords or one-time passwords network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol

Abstract

A computer-implemented method for providing security to access and store data may include transferring first information for display from a token device having a memory to a first computing device at a first time, the token device connected to the first computing device and the first information describing public data stored on the token device. A request to retrieve a root directory of private data may be received, the request specifying a root directory name. In response to receiving the request to retrieve a root directory of private data, the root directory may be requested by establishing a wireless connection between the token device and a server computing device, transferring the root directory name to the server computing device, wherein the root directory name is used as a password to retrieve the root directory, and receiving the root directory from the server computing device by the token device.

Claims

1. A computer-implemented method for providing security to access and store data, comprising:

transferring first information for display from a token device having a memory to a first computing device at a first time, the token device connected to the first computing device and the first information describing public data stored on the token device;

receiving a request to retrieve a root directory of private data, the request specifying a root directory name;

in response to receiving the request to retrieve a root directory of private data, requesting the root directory by;

establishing a wireless connection between the token device and a server computing device,

transferring the root directory name to the server computing device, wherein the root directory name is used as a password to retrieve the root directory, and

receiving the root directory from the server computing device by the token device.

2. The method of claim 1, further comprising:

receiving a request to retrieve a sub-directory of the root directory of private data, the request specifying a sub-directory name;

in response to receiving the request to retrieve the sub-directory of the root directory of private data, requesting the sub-directory by transferring the sub-directory name to the server computing device, wherein the sub-directory name is used as a password to retrieve the sub-directory; and

receiving the sub-directory from the server computing device by the token device.

3. The method of claim 1, further comprising synchronizing the token device with the server computing device to store the root directory from the server computing device to the token device.

4. The method of claim 3, further comprising:

transferring second information for display to a second computing device at a second time, wherein the token device is connected to the second computing device, the second information describing the public data stored on the token device;

receiving a request to retrieve the root directory of private data stored on the token device, the request specifying the root directory name that is used as a password to retrieve the root directory stored on the token device;

in response to receiving the request to retrieve the root directory of private data stored on the token device, authenticating the request by verifying that the root directory name matches the name of the root directory; and

transferring the root directory of private data stored on the token device to a display screen of the second computing device.

5. The method of claim 1 comprising:

receiving offline data entries by the token device, wherein the wireless connection between the token device and the server computing device is disconnected;

re-establishing the wireless connection between the token device and the server computing device; and

synchronizing the token device with the server computing device to store the offline data entries from the token device to the server computing device.

6. The method of claim 1, further comprising generating a unique compressed uniform resource locator (URL) each time a link, which corresponds to the compressed URL, is selected to open the root directory of private data in a browser.

7. The method of claim 1, further comprising displaying a public storage, wherein the display of the public storage shows a total storage capacity that is less than the actual total storage capacity of the token device and the display of the public storage shows only the public data stored on the token device.

8. The method of claim 7, wherein the token device is configured to alter how much of the total storage capacity is displayed for the public storage.