Secured data storage on a hard drive

• US 9,767,306 B2
• Filed: 09/18/2015
• Issued: 09/19/2017
• Est. Priority Date: 11/03/2014
• Status: Active Grant

• Current Assignee: Secured2 Corporation
• Original Assignee: Secured2 Corporation
• Inventors: Klum, R. Daren
• Primary Examiner(s): MOORTHY, ARAVIND K
• Application Number:
  US14/858,277
• Publication Number:
  US 20160125196A1
• Time in Patent Office: 732 Days
• Field of Search: 726 28, 726 26, 713165, 713193, 711100, 711170, 711171, 711173
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06F 21/80 in storage media based on magnetic or optical technology, e.g. disks with sectors preventing unauthorised reproduction or copying of disc-type recordable media G11B20/00
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 2221/2125 Just-in-time application of countermeasures, e.g., on-the-fly decryption, just-in-time obfuscation or de-obfuscation
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen

Abstract

Secured electronic data storage on a hard drive is described. A computer system that incorporates the hard drive includes a shrink, shred, and data randomization algorithm built into the read/write function of the computer system for the purposes of securing any data that is stored on the hard drive. Data to be stored on the hard drive is processed using the algorithm which shrinks, shreds, and randomly distributes the data into multiple storage locations, for example multiple partitions of storage, different data storage drives of the hard drive, different folders of a storage device, and the like. An electronic log of where the data is distributed is kept in electronic data storage, on the computer system and/or separate from the computer system, that allows the data on the hard drive to be retrieved, reassembled, decompressed, and if necessary decrypted, upon receipt of a read/access request.

Claims

1. A computer system, comprising:

a hard drive mechanism having a data input and a data output, and multiple storage locations each of which can store data;

a data processor operatively connected to the data input and the data output for processing data; and

non-volatile data storage that is operatively connected to the processor, the non-volatile data storage is provided with program instructions to compress data that is to be stored in the multiple storage locations, divide the data that is to be stored into a plurality of data segments, and randomly distribute each of the plurality of data segments to a storage location of the multiple storage locations that are available in the hard drive mechanism for storage of the data segments, wherein for each of the plurality of data segments, a data segment is stored in a single storage location among the multiple storage locations that are available in the hard drive mechanism.

2. The computer system of claim 1, wherein the hard drive mechanism comprises a plurality of data storage drives that form the multiple storage locations, and the program instructions on the non-volatile data storage randomly distributes the data segments to at least two of the data storage drives for storage of the data segments.

3. The computer system of claim 2, wherein the data storage drives are rotatable data storage disks.

4. The computer system of claim 1, wherein the hard drive mechanism is a hard disk drive, a solid state drive, a solid state hybrid drive, an external hard drive, a USB flash drive, and/or networked attached storage.

5. The computer system of claim 1, wherein the hard drive mechanism comprises a data storage drive that is partitioned into a plurality of partitions that form the multiple storage locations, and the program instructions on the non-volatile data storage randomly distribute the data segments to the plurality of partitions for storage of the data segments.

6. The computer system of claim 1, wherein the program instructions randomly divide the data to be stored into the plurality of data segments.

7. The computer system of claim 1, wherein the hard drive mechanism includes a chassis;

and the multiple storage locations, the non-volatile data storage and a read/write device are mounted on the chassis.

8. The computer system of claim 1, wherein the program instructions encrypt the data that is to be stored.

9. The computer system of claim 1, further comprising a physical-based authentication system connected to the processor that controls access to the data in the multiple storage locations using at least one physical-based authentication technique.

10. The computer system of claim 9, wherein the physical-based authentication technique comprises biometric, voice or haptic feedback authentication.

11. The computer system of claim 9, further comprising a geo-location system that is configured to provide a current geographic location of the computer system.

12. The computer system of claim 9, further comprising a session log module that creates a log file of each user access to data written to or read from the hard drive mechanism, and each log file is stored in non-volatile data storage.

13. The computer system of claim 1, further including an operating system, and the operating system comprises Windows, Linux, Unix, Android, iOS, BSD, OS X, QNX, Windows Phone, or IBM z/OS.

14. The computer system of claim 1, further including a housing, and the hard drive mechanism, the data processor and the non-volatile data storage are disposed in the housing.

15. The computer system of claim 1, wherein the computer system comprises a personal computer, a mainframe computer, a server, a laptop computer, a notebook computer, a tablet computer, or a mobile phone.

16. The computer system of claim 1, wherein the multiple storage locations comprise one or more of:

a plurality of partitions on a data storage drive;

a plurality of data storage drives; and

a plurality of folders of a storage device.

17. A method of secured data storage on a hard drive mechanism having multiple storage locations, comprising:

receiving data, for processing by a data processor, that is to be stored on the hard drive mechanism;

the data processor compressing the data, randomly divides the data into a plurality of data segments, and randomly determines the locations of the multiple storage locations that are available in the hard drive mechanism for each of the data segments to be stored in the multiple storage locations of the hard drive mechanism; and

storing each of the data segments in the determined location of the multiple storage locations,

wherein for each of the plurality of data segments, a data segment is stored in a single storage location among the multiple storage locations that are available in the hard drive mechanism.

18. The method of claim 17, prior to storing the data segments, performing physical authentication of a user that requests that the data be stored on the hard drive mechanism, and storing the data segments in the determined locations of the multiple storage locations only if the user passes the physical authentication.

19. The method of claim 17, further comprising encrypting the data that is to be stored on the hard drive mechanism.

20. The method of claim 17, wherein the hard drive mechanism comprises one or more of the following:

a plurality of data storage drives that form the multiple storage locations;

a data storage drive that is partitioned into a plurality of partitions that form the multiple storage locations;

a storage device with a plurality of folders that form the multiple storage locations.

21. A computer system, comprising:

a hard drive mechanism having a data input and a data output and also including a chassis supporting;

a storage drive having a plurality of storage locations each of which can store data,

a controller that controls read/write operations on the storage drive, the controller including a data processor operatively connected to the data input and the data output for processing data, and

a non-volatile storage connected to the processor, the non-volatile storage storing a data compression engine with program instructions to compress data that is to be stored in the plurality of storage locations, a data segmenting engine with program instructions to divide the data that is to be stored into a plurality of data segments, and a random distribution engine with program instructions to randomly distribute each of the plurality of data segments to one storage location of the plurality of storage locations that are available in the hard drive mechanism for storage of the data segments,

wherein for each of the plurality of data segments, a data segment is stored in a single storage location among the multiple storage locations that are available in the hard drive mechanism.

22. The computer system of claim 21, wherein the non-volatile storage storing a data encryption engine with program instructions to encrypt data to be stored on the hard drive mechanism.

23. The computer system of claim 21, further comprising a physical-based authentication system connected to the processor that controls access to the data in the plurality of storage locations using at least one physical-based authentication technique, wherein the physical-based authentication technique comprises biometric, voice or haptic feedback authentication.