Granted Patent B2

US 8,839,371 · App. 12/868,724 · Granted Sep 16, 2014

Abstract

Claims (38)

1. An interface device for securing access to a storage device, the interface device comprising:

a first port configured to be operatively, physically coupled to a computing system;

a second port configured to be operatively, physically coupled to the storage device including a plurality of encrypted logical sections;

a wireless signal detector configured to receive a unique identifier from a wireless device; and

a controller operatively coupled to the first port, the second port, and the wireless signal detector, wherein the controller is configured to store access permission rights for accessing the plurality of logical sections and wherein the controller is further configured to decrypt the plurality of logical sections based on the access permission rights corresponding to a plurality of derived cryptographic keys and wherein the controller is configured to:

derive a cryptographic key from the unique identifier;

decrypt a logical section of the plurality of encrypted logical sections in the storage device using the derived cryptographic key; and

disable access to the decrypted logical section in the storage device if the wireless device is not in range of the wireless signal detector.

2. The interface device of claim 1 , wherein the controller includes a memory configured to store the access permission rights.

3. The interface device of claim 1 , wherein the controller is further configured to authenticate the identity of a user of the wireless device.

4. The interface device of claim 3 , wherein the controller authenticates the identity of the user using one or more of biometric identification, or a login procedure.

5. The interface device of claim 1 , wherein the encrypted logical sections are encrypted using one or more of AES encryption, hardware encryption, or software encryption.

6. The interface device of claim 1 , wherein the first port and the second port employ a communication interface including at least one of a universal serial bus, a Fire Wire, a serial advanced technology attachment, a parallel advanced technology attachment, or a peripheral component interconnect express.

7. The interface device of claim 1 , wherein the storage device lies within the computing system.

8. The interface device of claim 1 , wherein the storage device is external to the computing system.

9. The interface device of claim 1 , wherein the wireless device includes at least one of a radio frequency device, a Bluetooth device, an infra-red device, a near-field communication device, a Wi-Fi device, or a cellular phone.

10. A method for securing access to a storage device including a plurality of encrypted logical sections, method comprising:

providing an interface device including a first port physically connected to a computing system and a second port physically connected to the storage device;

storing access permission rights for the plurality of encrypted logical sections in the interface device;

receiving a unique identifier from a wireless device wherein the unique identifier is received by a wireless signal detector coupled to the interface device;

deriving a cryptographic key from the unique identifier;

decrypting a logical section of the plurality of encrypted logic sections in the storage device based on the derived cryptographic key and based on the access permission rights corresponding to the derived cryptographic key; and

disabling the decrypted logical section in the storage device if the wireless device is not in range of the wireless signal detector.

11. The method of claim 10 further comprising authenticating the identity of a user of the wireless device.

12. The method of claim 11 , wherein the identity of the user is authenticated using one or more of biometric identification, or a login procedure.

13. The method of claim 10 , wherein the locked logical sections are encrypted using one or more of AES encryption, hardware encryption, or software encryption.

14. The method of claim 10 , wherein the storage device lies within the computing system.

15. The method of claim 10 , wherein the storage device is external to the computing system.

16. The method of claim 10 , wherein the wireless device includes at least one of a radio frequency device, a Bluetooth device, an infra-red device, a near-field communication device, a Wi-Fi device, or a cellular phone.

17. The method of claim 10 further comprising disabling the computing system, upon a determination that one or more of the encrypted logical sections cannot be decrypted.

18. A method for securing access to a storage device including a plurality of logical sections, the method comprising:

providing an interface device including a first port physically connected to a computing system and a second port physically connected to the storage device wherein the storage device includes a plurality of logical sections that comprise the persistent storage and the volatile memory of the storage device;

storing access permission rights for the plurality of encrypted logical sections in the interface device:

encrypting a first logical section of the plurality of logical sections based on a first cryptographic key, wherein the first cryptographic key is derived from a first unique identifier received from a first wireless device;

receiving a second unique identifier from a wireless device wherein the second unique identifier is received by a wireless signal detector coupled to the interface device;

deriving a second cryptographic key from the second unique identifier;

decrypting the first logical section in the storage device upon a determination that the first cryptographic key is identical to the second cryptographic key and that the wireless device can access the encrypted logical sections based on the access permission rights; and

disabling the decrypted logical section in the storage device if the wireless device is not in range of the wireless signal detector.

Assignments (10)