IP Library Granted Patent US 7,168,000
Granted Patent B2
US 7,168,000 · App. 11/378,948 · Granted Jan 23, 2007

Automatic reconnect and reacquisition in a computer investigation system

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 7,168,000
App. No.
11/378,948
Filed
Mar 16, 2006
Granted
Jan 23, 2007
Kind
B2
Art Unit
2114
USPC
714/4
Abstract

An examining machine automatically reconnecting to a target machine and resuming acquisition of data stored in a device coupled to the target machine. The examining machine establishes connection with the target machine and initiates data acquisition of the device coupled to the target machine. Periodically during the data acquisition, the examining machine receives from the target machine an intermediary hash state of the data that has been acquired so far. When connection is lost during the acquisition, the examining machine is able to automatically attempt reconnection to the target machine. Once the connection is automatically reestablished, the examining machine transmits the hash state that is currently saved for the acquisition to the target machine. The target machine may then continue the hash process from this intermediate state. That is, the target machine is able to continue generating a hash value for the entire acquisition without rehashing previously acquired data because that previously acquired data is already reflected in the intermediate hash state.

Claims (72)

1. A method for automatically reconnecting to a target machine and resuming acquisition of data stored in a device coupled to the target machine, the method comprising:

establishing connection with the target machine;

initiating data acquisition of the device coupled to the target machine;

detecting loss of connection with the target machine during the data acquisition;

automatically reconnecting to the target machine responsive to the detected loss of connection;

identifying a position of the device from which the data acquisition is to be resumed responsive to the reconnection to the target machine; and

automatically resuming the data acquisition starting from the identified position, the identified position causing reacquisition of at most a portion, but not all, of data already acquired prior to the loss of connection.

2. The method of claim 1 , further comprising:

periodically receiving from the target machine an intermediate representation of a digital signature associated with the data acquisition, the intermediate representation being based on data acquired up to a current position; and

storing the intermediate representation in memory.

3. The method of claim 2 further comprising:

responsive to the detected loss of connection, identifying the current position;

setting the position of the device from which the data acquisition is to be resumed to a next position following the current position;

retrieving the stored intermediate representation;

transmitting the intermediate representation to the target machine; and

requesting data associated with the next position.

4. The method of claim 2 , wherein the intermediate representation is a hash state for data acquired up to the current position.

5. The method of claim 4 , wherein the target machine receives the hash state and updates the hash state based on a hash calculation of the data associated with the next position.

6. The method of claim 1 further comprising establishing a secure communication with the target machine including:

receiving a first encryption key generated by the target machine;

generating a second encryption key; and

transmitting the second encryption key to the target machine, wherein the second encryption key is encrypted via the first encryption key.

7. The method of claim 6 further comprising receiving from the target machine data encrypted using the second encryption key.

8. An examining machine automatically reconnecting to a target machine and resuming acquisition of data stored in a device coupled to the target machine, the examining machine comprising:

a processor; and

a memory operably coupled to the processor and storing program instructions therein, the processor being operable to execute the program instructions, the program instructions including:

establishing connection with the target machine;

initiating data acquisition of the device coupled to the target machine;

detecting loss of connection with the target machine during the data acquisition;

automatically reconnecting to the target machine responsive to the detected loss of connection;

identifying a position of the device from which the data acquisition is to be resumed responsive to the reconnection to the target machine; and

automatically resuming the data acquisition starting from the identified position, the identified position causing reacquisition of at most a portion, but not all, of data already acquired prior to the loss of connection.

9. The examining machine of claim 8 further including a memory coupled to the processor, the program instructions further including:

periodically receiving from the target machine an intermediate representation of a digital signature associated with the device, the intermediate representation being based on data acquired up to a current position; and

storing the intermediate representation in the memory.

10. The examining machine of claim 9 , wherein the program instructions further include:

responsive to the detected loss of connection, identifying the current position;

setting the position of the device from which the data acquisition is to be resumed to a next position following the current position;

retrieving the stored intermediate representation;

transmitting the intermediate representation to the target machine; and

requesting data associated with the next position.

11. The examining machine of claim 9 , wherein the intermediate representation is a hash state for data acquired up to the current position.

12. The examining machine of claim 11 , wherein the target machine receives the hash state and updates the hash state based on a hash calculation of the data associated with the next position.

13. The examining machine of claim 8 , wherein the program instructions further comprise establishing a secure communication with the target machine including:

receiving a first encryption key generated by the target machine;

generating a second encryption key; and

transmitting the second encryption key to the target machine, wherein the second encryption key is encrypted via the first encryption key.

14. The examining machine of claim 13 , wherein the program instructions further include receiving from the target machine data encrypted using the second encryption key.

15. An examining machine automatically reconnecting to a target machine and resuming acquisition of data stored in a device coupled to the target machine, the examining machine comprising:

means for establishing connection with the target machine;

means for initiating data acquisition of the device coupled to the target machine;

means for detecting loss of connection with the target machine during the data acquisition;

means for automatically reconnecting to the target machine responsive to the detected loss of connection;

means for identifying a position of the device from which the data acquisition is to be resumed responsive to the reconnection to the target machine; and

means for automatically resuming the data acquisition starting from the identified position, the identified position causing reacquisition of at most a portion, but not all, of data already acquired prior to the loss of connection.

16. The examining machine of claim 15 further comprising:

means for periodically receiving from the target machine an intermediate representation of a digital signature associated with the device, the intermediate representation being based on data acquired up to a current position; and

means for storing the intermediate representation.

17. The examining machine of claim 16 further comprising:

means responsive to the detected loss of connection for identifying the current position;

means for setting the position of the device from which the data acquisition is to be resumed to a next position following the current position;

means for retrieving the stored intermediate representation;

means for transmitting the intermediate representation to the target machine; and

means for requesting data associated with the next position.

18. The examining machine of claim 16 , wherein the intermediate representation is a hash state for data acquired up to the current position.

19. The examining machine of claim 18 , wherein the target machine receives the hash state and updates the hash state based on a hash calculation of the data associated with the next position.

20. The examining machine of claim 15 further comprising means for establishing a secure communication with the target machine including:

means for receiving a first encryption key generated by the target machine;

means for generating a second encryption key; and

means for transmitting the second encryption key to the target machine, wherein the second encryption key is encrypted via the first encryption key.

21. The examining machine of claim 20 further comprising:

means for receiving from the target machine data encrypted using the second encryption key.

Assignments (8)
RELEASE OF SECURITY INTEREST IN PATENTS (REEL/FRAME 063558/0682) Recorded Jun 21, 2024
From: BARCLAYS BANK PLC
To: OPEN TEXT HOLDINGS, INC.
Reel/Frame 067807/0062 →
SECURITY INTEREST Recorded Aug 30, 2023
From: OPEN TEXT HOLDINGS, INC.
To: THE BANK OF NEW YORK MELLON
Reel/Frame 064749/0852 →
SECURITY INTEREST Recorded May 7, 2023
From: OPEN TEXT HOLDINGS, INC.
To: BARCLAYS BANK PLC
Reel/Frame 063558/0682 →
SECURITY INTEREST Recorded May 7, 2023
From: OPEN TEXT HOLDINGS, INC.
To: BARCLAYS BANK PLC
Reel/Frame 063558/0690 →
SECURITY INTEREST Recorded May 7, 2023
From: OPEN TEXT HOLDINGS, INC.
To: BARCLAYS BANK PLC
Reel/Frame 063558/0698 →
MERGER Recorded Oct 5, 2018
From: GUIDANCE SOFTWARE, INC.
To: OPEN TEXT HOLDINGS, INC.
Reel/Frame 047085/0319 →
SECURITY INTEREST Recorded Oct 14, 2014
From: GUIDANCE SOFTWARE, INC.
To: SILICON VALLEY BANK
Reel/Frame 033940/0532 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jan 22, 2007
From: STONE-KAPLAN, KIMBERLY A.; GARRETT, MATTHEW STEVEN
To: GUIDANCE SOFTWARE, INC.
Reel/Frame 018812/0932 →