Data protection for storage device

• US 9,870,478 B1
• Filed: 08/03/2016
• Issued: 01/16/2018
• Est. Priority Date: 08/03/2016
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Takayama, Masao
• Primary Examiner(s): Reza, Mohammad W
• Application Number:
  US15/227,273
• Publication Number:
  US 20180039783A1
• Time in Patent Office: 531 Days
• Field of Search: 726 18
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/80 in storage media based on magnetic or optical technology, e.g. disks with sectors preventing unauthorised reproduction or copying of disc-type recordable media G11B20/00
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen

Abstract

A method for protecting data on a first storage device from unauthorized access is provided. The method includes copying a data map, such as a file allocation table, from the first storage device, on which the data to be protected resides, to a second storage device. A security key is established for the data map. The data map is then deleted from the first storage device, to render unusable the data thereon. The data map is restored to the first storage device upon successful input of the security key.

Claims

1. A method for protecting data in a first storage device, the method comprising:

copying a data map of a first storage device to a second storage device;

establishing a security key corresponding to the data map on the second storage device; and

deleting the data map from the first storage device;

wherein;

the first storage device is a body portion of a universal serial bus flash drive (USB flash drive),

the second storage device is a detachable cap portion of the USB flash drive, and

the data map is a file allocation table corresponding to at least one data file stored on the first storage device.

2. The method of claim 1 further comprising:

receiving a request to restore the data map to the first storage device.

3. The method of claim 1 further comprising:

issuing a security challenge.

4. The method of claim 3 further comprising:

receiving a user response to the security challenge.

5. The method of claim 4 further comprising:

on condition that the user response to the security challenge is a correct response, restoring the data map to the first storage device; and

on condition that the user response to the security challenge includes a pre-determined number of incorrect responses, deleting the data map from the second storage device.

6. An apparatus comprising:

a communication module configured to establish communication between a first storage device and a second storage device;

a copy module configured to;

(i) copy a data map of the first storage device to the second storage device, and (ii) initiate deletion of the data map from the first storage device; and

a security module configured to establish a security key corresponding to the data map on the second storage device;

wherein;

the first storage device is a body portion of a universal serial bus flash drive (USB flash drive),

the second storage device is a detachable cap portion of the USB flash drive, and

the data map is a file allocation table corresponding to at least one data file stored on the first storage device.

7. The apparatus of claim 6 further comprising a user interface module configured to:

display a security status to a user;

prompt the user for a security key; and

receive user input.

8. The apparatus of claim 6 wherein the second storage device comprises a non-volatile memory.

9. The apparatus of claim 6 wherein the security module is further configured to issue a security challenge.

10. The apparatus of claim 9 wherein:

the security module is further configured to initiate restoration of the data map to the first storage device in response to a correct user response to the security challenge; and

the security module is further configured to delete the data map from the second storage device in response to a pre-determined number of incorrect user responses to the security challenge.

11. The apparatus of claim 6 wherein the copy module is further configured to provide the data map to the first storage device in response to reception of a valid security key.

12. A system for protecting data in a first storage device, the system comprising:

a first storage device configured to store at least one data file, and a data map corresponding to the at least one data file; and

a security device configured to;

(i) establish communication between the first storage device and a second storage device, (ii) copy the data map to a second storage device, (iii) initiate deletion of the data map from the first storage device, and (iv) establish a security key corresponding to the data map on the second storage device;

wherein;

the first storage device is a body portion of a universal serial bus flash drive (USB flash drive),

the second storage device is a detachable cap portion of the USB flash drive, and

the data map is a file allocation table corresponding to the at least one data file stored on the first storage device.

13. The system of claim 12 wherein the security device is further configured to:

(i) receive a request to restore the data map to the first storage device;

(ii) prompt a user to input a security key;

(iii) receive the security key;

(iv) evaluate the security key; and

(v) on condition that the security key is a correct security key, restore the data map to the first storage device.