Method and system for multi-factor remote data access

• US 8,868,683 B1
• Filed: 07/03/2014
• Issued: 10/21/2014
• Est. Priority Date: 05/16/2008
• Status: Active Grant

• Current Assignee: Quick Vault, Inc. (d/b/a CloudVault)
• Original Assignee: Quick Vault, Inc. (d/b/a CloudVault)
• Inventors: Bacastow, Steven V.
• Primary Examiner(s): Dharia, Rupal
• Assistant Examiner(s): Chacko, Joe
• Application Number:
  US14/323,939
• Publication Number:
  US 20140325608A1
• Time in Patent Office: 110 Days
• Field of Search: 709/213, 709/217, 726/5
• US Class Current: 709/217
• CPC Class Codes: G06F 11/1458 Management of the backup or restore process
• CPC Class Codes: G06F 21/121 Restricting unauthorised execution of programs
• CPC Class Codes: G06F 21/305 by remotely controlling device operation
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/0492 by using a location-limited connection, e.g. near-field communication or limited proximity of entities
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/04 specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
• CPC Class Codes: H04L 67/535 Tracking the activity of the user network monitoring arrangements H04L43/00; recording of computer activity G06F11/34
• CPC Class Codes: H04W 12/0431 Key distribution or pre-distribution; Key agreement
• CPC Class Codes: H04W 12/06 : Authentication
• CPC Class Codes: H04W 12/08 : Access security
• CPC Class Codes: H04W 4/80 : Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A system and method for securely storing, retrieving and sharing data using PCs and mobile devices and for controlling and tracking the movement of data to and from a variety of computing and storage devices.

Claims

1. A computer-implemented method for multi-factor remote data access comprising the steps of:

a remote computer receiving from a first computer an authentication request, the authentication request comprising a first computer serial number, a unique software license key, a mobile device serial number, and a user name and a password associated therewith;

the unique software license key and the mobile device serial number associated with a mobile device in communication with the first computer;

the user name and password authenticated by a software application on the mobile device based on local security rules stored on the mobile device and operable to authorize the transfer of files to and from the remote computer;

the remote computer determining whether the mobile device is authorized for use with the first computer by determining a valid combination of the first computer serial number and at least one of the unique software license key and the mobile device serial number;

the remote computer transmitting to the first computer a validation message associated with the mobile device;

the remote computer receiving from the first computer a first detail message associated with a first file copied from the first computer to the mobile device, the first detail message comprising at least a name of the first file copied from the first computer to the mobile device;

the remote computer storing the first detail message in a meta-data log;

the remote computer receiving from a second computer an authentication request, the authentication request comprising a second computer serial number, the unique software license key, the mobile device serial number, the user name and the password;

the unique software license key and the mobile device serial number associated with the mobile device, the mobile device in communication with the second computer;

the user name and the password authenticated by the software application on the mobile device based on local security rules stored on the mobile device and operable to authorize the transfer of files to and from the remote computer;

the remote computer determining whether the mobile device is authorized for use with the second computer by determining a valid combination of the second computer serial number and at least one of the unique software license key and the mobile device serial number;

the remote computer transmitting to the second computer a validation message associated with the mobile device;

the remote computer receiving from the second computer a second detail message associated with the first file copied from the mobile device to the second computer, the second detail message comprising at least the name of the first file copied from the mobile device to the second computer; and

the remote computer storing the second detail message in the meta-data log.

2. The computer-implemented method of claim 1, wherein the first detail message further comprises at least one of:

a file type, a date created, a date transferred, an identifier for the first computer, and a volume.

3. The computer-implemented method of claim 1, wherein the second detail message further comprises at least one of:

a file type, a date created, a date transferred, an identifier for the second computer, and a volume.

4. The computer-implemented method of claim 1, wherein the mobile device is one of a mobile storage device and a mobile communication device.

5. The computer-implemented method of claim 1, wherein the first file is encrypted before being copied using an encryption key that is related to the unique software license key.

6. The computer-implemented method of claim 1, wherein in association with the first file copied from the mobile device to the second computer, the first file is decrypted using an encryption key that is related to the unique software license key.

20. The computer-implemented method of claim 1 wherein the software application on the mobile device uses the CPU resources and network connection of one of the first computer and the mobile device to perform its operations.

22. The computer-implemented method of claim 1 wherein the mobile device is coupled to the first computer using one of USB, firewire, Bluetooth, or RFID technologies.

7. A computer-implemented method for multi-factor remote data access comprising the steps of:

a remote computer receiving from a mobile device a first computer serial number, a unique software license key, a mobile device serial number, and a user name and password associated therewith;

the mobile device in communication with a first computer;

the user name and the password authenticated by a software application on the mobile device based on local security rules stored on the mobile device and operable to authorize the transfer of files to and from the remote computer;

the remote computer determining whether the mobile device is authorized for use with the first computer by determining a valid combination of the first computer serial number and at least one of the unique software license key and the mobile device serial number;

the remote computer transmitting to the first computer a validation message associated with the mobile device;

the remote computer receiving from the mobile device a first detail message associated with a first file copied from the first computer to the mobile device, the first detail message comprising at least a name of the first file copied from the first computer to the mobile device;

the remote computer storing the first detail message in a meta-data log;

the remote computer receiving from the mobile device a second computer serial number, the unique software license key, the mobile device serial number, the user name and the password;

the mobile device in communication with a second computer;

the user name and the password authenticated by the software application on the mobile device based on local security rules stored on the mobile device and operable to authorize the transfer of files to and from the remote computer;

the remote computer determining whether the mobile device is authorized for use with the second computer by determining a valid combination of the second computer serial number and at least one of the unique software license key and the mobile device serial number;

the remote computer transmitting to the second computer a validation message associated with the mobile device;

the remote computer receiving from the mobile device a second detail message associated with the first file copied from the mobile device to the second computer, the second detail message comprising at least the name of the first file copied from the mobile device to the second computer; and

the remote computer storing the second detail message in the meta-data log.

8. The computer-implemented method of claim 7, wherein the first detail message further comprises at least one of:

a file type, a date created, a date transferred, an identifier for the first computer, and a volume.

9. The computer-implemented method of claim 7, wherein the second detail message further comprises at least one of:

a file type, a date created, a date transferred, an identifier for the second computer, and a volume.

10. The computer-implemented method of claim 7, wherein the mobile device is one of a mobile storage device and a mobile communication device.

11. The computer-implemented method of claim 7, wherein the first file, copied from the first computer to the mobile device, is encrypted before being copied using an encryption key that is related to the unique software license key.

12. The computer-implemented method of claim 7, wherein the first file, copied from the mobile device to the second computer, is decrypted using an encryption key that is related to the unique software license key.

21. The computer-implemented method of claim 7 wherein the software application on the mobile device uses the CPU resources and network connection of one of the first computer and the mobile device to perform its operations.

23. The computer-implemented method of claim 7 wherein the mobile device is coupled to the first computer using one of USB, firewire, Bluetooth, or RFID technologies.

13. A computer-implemented method for multi-factor remote data access, comprising the steps of:

a remote computer receiving from a first mobile device a first mobile device serial number, a first unique software license key, a first user name and a first password associated therewith;

the first mobile device in communication with the remote computer;

the first user name and the first password authenticated by a software application on the mobile device based on local security rules stored on the mobile device and operable to authorize the transfer of files to and from the remote computer;

the remote computer determining whether the first mobile device is authorized for use with the remote computer by determining a valid combination of the first mobile device serial number and the first unique software license key;

upon determining that the first mobile device is authorized, the remote computer transmitting to the first mobile device a validation message associated with the first mobile device;

the remote computer receiving from the first mobile device a first file copied from the first mobile device;

the remote computer storing a first detail message in a meta-data log, the first detail message associated with the first file copied from the first mobile device to the remote computer, the first detail message comprising at least a name of the first file copied from the first mobile device to the remote computer;

the remote computer receiving from a second mobile device a second mobile device serial number, a second unique software license key, a second user name, and a second password associated therewith;

the second mobile device in communication with the remote computer;

the second user name and the second password authorized by a software application on the mobile device based on local security rules stored on the mobile device and operable to authorize the transfer of files to and from the remote computer;

the remote computer determining whether the second mobile device is authorized for use with the remote computer by determining a valid combination of the second mobile device serial number and the second unique software license key;

upon determining that the second mobile device is authorized, the remote computer transmitting to the second mobile device a validation message associated with the second mobile device;

the remote computer transmitting to the second mobile device a copy of the first file copied from the first mobile device to the remote computer; and

the remote computer storing in the meta-data log a second detail message associated with the first file transmitted from the remote computer to the second mobile device.

14. The computer-implemented method of claim 13, wherein the first detail message further comprises at least one of:

a file type, a date created, a date transferred, and a volume.

15. The computer-implemented method of claim 13, wherein the second detail message comprises at least one of:

a file name, a file type, a date created, a date transferred, and a volume.

16. The computer-implemented method of claim 13, wherein the first mobile device is one of a mobile storage device and a mobile communication device.

17. The computer-implemented method of claim 13, wherein the second mobile device is one of a mobile storage device and a mobile communication device.

18. The computer-implemented method of claim 13, wherein, prior to the remote computer receiving the first file, the first file is encrypted using an encryption key that is uniquely related to a software license key for a software application on the first mobile device.

19. The computer-implemented method of claim 13, wherein, prior to the remote computer receiving the first file, the first file is encrypted using an encryption key that is uniquely related to a software license key for a software application on the second mobile device.

24. The computer-implemented method of claim 13 wherein the first mobile device receives authorization to upload or download files from the remote computer based on remote security rules.

25. The computer-implemented method of claim 13 wherein the second mobile device receives authorization to upload or download files from the remote computer based on remote security rules.