Data protecting device

• US 8,745,747 B2
• Filed: 12/31/2009
• Issued: 06/03/2014
• Est. Priority Date: 12/31/2009
• Status: Expired due to Fees

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Song, Zhexuan, Molina, Jesus, Gordon, Joseph
• Primary Examiner(s): Gee, Jason
• Application Number:
  US12/651,269
• Publication Number:
  US 20110162076A1
• Time in Patent Office: 1,615 Days
• Field of Search: 726/26
• US Class Current: 726/26
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection

Abstract

An event condition is checked, using a computer and data content of the computer is additionally protected in relation to a normal data protection according to the event condition. The event condition is detecting by the computer a remote command and/or detecting a state according to a policy.

Claims

1. A method, comprising:

checking by a computer for an event condition;

protecting by the computer target data of the computer in addition to existing data protection on the computer, according to the event condition,

the checking of the event condition comprises activating the computer with the target data at random time intervals to detect a security check received from a remote computer via a data communication interface and obtaining the event condition from the remote computer,

the activating to detect the security check received from the remote computer further comprises receiving an encrypted message including a data protection function and a synchronization random number during a time window at the random time intervals, the time window duration to receive the security check from the remote computer being settable according to a policy for increasing or decreasing the encrypted message synchronization between the computer and the remote computer; and

accumulating a history of failures to obtain the event condition during a set duration of one or more time windows at the random time intervals until reaching a condition to trigger the additionally protecting of the target data.

2. The method according to claim 1, wherein the checking of the event condition further comprises detecting a state of the computer.

3. The method according to claim 2, wherein the event condition obtained from the remote computer comprises one or more of a computer identification (ID), output of a function using a current time and a data protection function for the additionally protecting of the target data on the computer,

wherein a detected state of the computer triggering the additionally protecting of the target data is according to one or more of a failure to obtain the event condition from the remote computer, verifications of the computer ID and/or the function output or any combinations thereof.

4. The method according to claim 2, wherein a detected state of the computer triggering the additionally protecting of the target data is according to a failure to obtain the event condition from the remote computer, a failure to verify the encrypted message, or a failure to receive a random number in sequence, or any combinations thereof.

5. The method according to claim 2, wherein the state of the computer comprises one or more of a failure based upon user authentication, verification of the computer, verification of a remote computer, physical tempering of the computer, or any combinations thereof, according to a policy.

6. The method according claim 5, further comprising operating at the computer and/or at the remote computer a virtual machine and measuring the virtual machine of the computer and/or the remote computer for verification.

7. The method according to claim 1, wherein the protecting of the target data includes destroying the target data content by erasing the data, invalidating an encryption key to the target data and/or physical destruction.

8. The method according to claim 1, wherein the event condition is a period of time and upon expiration of the time period, the additionally protecting of the target data includes making target data of the computer inaccessible.

9. The method according to claim 1, wherein the event condition includes communicably disconnecting the computer from another computer and the additionally protecting of the target data includes making target data of the computer inaccessible after a period of time from the disconnecting.

10. A computing device communicably connectable to a remote computer, comprising:

a computer processor that executes

checking for an event condition;

protecting target data of the computing device in addition to existing data protection, according to the event condition,

the checking of the event condition comprises activating the computing device at random time intervals to detect a security check received from the remote computer via a data communication interface and obtaining the event condition from the remote computer,

the activating to detect the security check received from the remote computer further comprises receiving an encrypted message including a data protection function and a synchronization random number during a time window at the random time intervals, the time window duration to receive the security check from the remote computer being settable according to a policy for increasing or decreasing the encrypted message synchronization between the computing device and the remote computer; and

accumulating a history of failures to obtain the event condition during a set duration of one or more time windows at the random time intervals until reaching a condition to trigger the additionally protecting of the target data.

11. The computing device according to claim 10, wherein the checking of the event condition further comprises:

detecting a state of the computing device based upon;

a failure based upon user authentication, verification of the computing device, verification of the remote computer, physical tempering of the computing device, or any combinations thereof, according to a policy.

12. The computing device according to claim 10, wherein the event condition is a period of time and upon expiration of the time period, the additionally protecting of the target data includes making target data of the computing device inaccessible.

13. The computing device according to claim 10, wherein the event condition includes communicably disconnecting from the remote computer and the additionally protecting of the target data includes making target data of the computing device inaccessible after a period of time from previous communication with the remote computer.

14. The device according to claim 11,

wherein a detected state of the computing device triggering the additionally protecting of the target data is according to a failure to obtain the event condition from the remote computer, a failure to verify the message, or a failure to receive a random number in sequence, or any combinations thereof.

15. A computer system comprising:

a server computer; and

a portable device communicably connectable to the server computer and including a computer processor to execute;

checking for an event condition from the server computer and/or from a state of the portable device;

protecting target data of the portable device in addition to existing data protection, according to the event condition,

the checking of the event condition comprises activating the portable device at random time intervals to detect a security check to be received from the server via a data communication interface and obtaining the event condition from the remote computer,

the activating to detect the security check received from the server further comprises receiving an encrypted message including a data protection function and a synchronization random number during a time window at the random time intervals, the time window duration to receive the security check from the remote computer being settable according to a policy for increasing or decreasing the encrypted message synchronization between the portable device and the server; and

accumulating a history of failures to obtain the event condition during a set duration of one or more time windows at the random time intervals until reaching a condition to trigger the additionally protecting of the target data.