Method and system for mobile data security

• US 8,086,688 B1
• Filed: 05/15/2009
• Issued: 12/27/2011
• Est. Priority Date: 05/16/2008
• Status: Active Grant

• Current Assignee: Quick Vault, Inc. (d/b/a CloudVault)
• Original Assignee: Quick Vault, Inc. (d/b/a CloudVault)
• Inventors: Bacastow, Steven V.
• Primary Examiner(s): Bates, Kevin
• Assistant Examiner(s): Chacko, Joe
• Application Number:
  US12/466,989
• Time in Patent Office: 956 Days
• Field of Search: 705/50, 705/56
• US Class Current: 709/213
• CPC Class Codes: G06F 11/1458 Management of the backup or restore process
• CPC Class Codes: G06F 21/121 Restricting unauthorised execution of programs
• CPC Class Codes: G06F 21/305 by remotely controlling device operation
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/06 : Authentication
• CPC Class Codes: H04W 12/08 : Access security
• CPC Class Codes: H04W 4/80 : Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A system and method for securely storing, retrieving and sharing data using PCs and mobile devices and for controlling and tracking the movement of data to and from a variety of computing and storage devices.

Claims

1. A computer-implemented method for mobile data security comprising the steps of:

storing a computer software program and database on a mobile device comprising a software license key and a mobile device serial number;

connecting the mobile device to a first PC comprising a first PC serial number, the first PC operable to validate the device based on security settings that are accessed from a remote computing device;

determining that the mobile device is authorized to be used on the first PC based on the combination of the software license key, the mobile device serial number and the first PC serial number;

transferring data from the first PC onto the mobile device;

communicating to the remote computing device details related to the data that was transferred to the mobile device;

storing details related to the data that was transferred from the first PC to the mobile device on the remote computing device as meta-data logs;

storing details related to the data that was transferred from the first PC to the mobile device into the database on the mobile storage device;

disconnecting the mobile device from the first PC;

connecting the mobile device to a second PC comprising a second PC serial number, the second PC operable to validate the device based on security settings that are accessed from the remote computing device;

determining that the mobile device is authorized to be used on the second PC based on the software license key, the mobile device serial number, and the second PC serial number;

transferring files from the mobile device to the second PC;

communicating to the remote computing device the details related to the data that was transferred from the mobile device to the second PC;

storing the details related to the data that was transferred from the mobile device to the second PC on the remote computing device as meta-data logs; and

storing details related to the data that was transferred from the mobile device to the second PC into the database on the mobile storage device.

2. The method of claim 1, wherein the details of the data transferred from the first PC to the mobile device comprise one of:

a file name, a file type, a date created, a date transferred, an originating PC, and an originating volume.

3. The method of claim 1, wherein the details of the files that were transferred to the second PC from the mobile device include:

file name, file type, date created, date transferred, destination PC, destination volume.

4. The method of claim 1, wherein the mobile device is a mobile storage device.

5. The method of claim 1, wherein the mobile device is a mobile communication device.

6. The method of claim 1, wherein the connection between the mobile device and the first PC is physical.

7. The method of claim 1, wherein the connection between the mobile device and the second PC is via NFC communication method.

8. A computer-implemented method for multi-factor remote data access, comprising the steps of:

storing a computer software program and database on a mobile device comprising a mobile device serial number and a software license key;

connecting the mobile device to a first PC comprising a first serial number and operable to validate the device based on security settings that are accessed from a remote computing device comprising remote security settings and a remote storage device;

determining that the mobile device is authorized to be used on the first PC based on the mobile device serial number, the first PC serial number and the software license key;

transferring data from the first PC onto the remote storage device;

communicating to the remote computing device the details related to the data that was transferred to the remote storage device;

storing details related to the data that was transferred from the first PC to the remote storage device on the remote computing device as meta-data logs;

disconnecting the mobile device from the first PC;

connecting the mobile device to a second PC comprising a second serial number and operable to validate the device based on security settings that are accessed from the remote computing device;

determining that the mobile device is authorized to be used on the second PC based on the mobile device serial number, the software license key, and the second serial number;

receiving data transferred from the remote storage device to the second PC;

communicating to the remote computing device the details related to the data that was transferred from the remote storage device; and

storing the details related to the data that was transferred from the remote storage device to the second PC on the remote computing device as meta-data logs.