Granted Patent B2

US 9,473,305 · App. 14/922,769 · Granted Oct 18, 2016

Inventor: Erix Pizano (Tampa, FL)

Assignee: Ceelox Patents, LLC

H04L9/3242G06F21/602G06F21/6218G06F21/6245H04L63/06H04L63/0861G06F2221/2107H04L63/0428

Abstract

Claims (53)

1. A non-transitory computer-readable storage medium with an executable program stored thereon for enabling a secure storage system for storage of first and second data items, wherein the first and second data items are associated with information associated with a security template of a user for authentication of the user's identity, wherein the program instructs at least one processor to perform the following steps:

receive an instruction from the user to transfer a one of the first and second data items to or from the secure storage system;

receive information associated with an authentication template of the user to access the one of the first and second data items during a session;

compare the information associated with the authentication template with the information associated with the security template and information associated with one or more secondary templates;

upon the information associated with the authentication template correlating with the information associated with the security template, generate a key corresponding to said one of the first and second data items to be transferred,

wherein the first data item corresponds to a first key, the second data item corresponds to a second key, and the first key is different than the second key;

if the received instruction is to transfer the one of the first and second data items to the secure storage system, encrypt the one of the first and second data items using said generated key and store the one of the first and second data items in the secure storage system; and

if the received instruction is to transfer the one of the first and second data items from the secure storage system, decrypt the one of the first and second data items using said generated key and remove the one of the first and second data items from the secure storage system.

2. The medium of claim 1 , wherein the information associated with the authentication template of the user is biometric information.

3. The medium of claim 2 , wherein the information associated with the authentication template of the user is fingerprint information.

4. The medium of claim 2 , wherein the information associated with the authentication template of the user is facial characteristic information.

5. The medium of claim 1 , wherein the information associated with the authentication template of the user includes biometric information and password information.

6. The medium of claim 1 , wherein the generated key is an AES256 key.

7. A method of enabling secure storage of a plurality of user data items on device including a storage medium, comprising the steps of:

receiving a request, from a user, to access the device;

enabling the user to provide biometric information associated with the user in order to be granted access to the device;

receiving, from the user, the biometric information associated with the user;

generating, from the biometric information associated with the user, an authentication template for the user;

comparing information associated with the authentication template for the user with information associated with a security template stored on the device and information associated with one or more secondary templates stored on the device;

determining that the authentication template for the user corresponds to the security template stored on the device;

providing access, in response to the determination, to the storage medium;

receiving a request to access a user data item of the plurality of user data items on the storage medium; and

decrypting, using a data item key accessible if the authentication template for the user corresponds to the security template stored on the device, the user data item,

wherein each user data item of the plurality of user data items has a different data item key.

8. The method of claim 7 , wherein the biometric information associated with the user is fingerprint information.

9. The method of claim 8 , wherein the device includes an integrated fingerprint scanner for receiving fingerprint information.

10. The medium of claim 7 , wherein the biometric information associated with the user is facial characteristic information.

11. The method of claim 7 , further comprising the step of discarding the biometric information associated with the user after generating the authentication template for the user.

12. The method of claim 7 , further comprising the steps of:

in response to the request from the user to access the device, providing the user with the option of authenticating via biometric data or password data;

receiving, from the user, an indication that the user desires to authenticate via password;

receiving, from the user, a password submission;

determining that the password submission corresponds to a password template stored on the device;

providing access, in response to the determination, to the storage medium; and

decrypting, using a data item key accessible if the password submission corresponds to the password template stored on the device, the user data item.

13. The method of claim 12 , wherein the data item key accessible if the password submission corresponds to the password template stored on the device is the same as the data item key accessible if the authentication template for the user corresponds to the security template stored on the device.

14. A device storing encrypted user data, comprising:

a fingerprint scanner;

a processor; and

a storage medium storing a plurality of encrypted user data items and one or more computer-executable instructions that, when executed, cause the processor to perform a method of controlling access to the encrypted user data comprising the steps of:

receiving a request, from a user, to access the device;

enabling the user to either provide fingerprint information or password information to access the device;

receiving, from the user, fingerprint information of the user;

generating, from the fingerprint information, an authentication template for the user;

comparing information associated with the authentication template for the user with information associated with a security template stored on the device and information associated with one or more secondary templates stored on the device;

determining that the authentication template for the user corresponds to the security template stored on the device;

providing access, in response to the determination, to the storage medium;

receiving a request to access an encrypted user data item of the plurality of encrypted user data items on the storage medium; and

decrypting, using a data item key accessible if the authentication template for the user corresponds to the security template stored on the device, the encrypted user data item,

wherein each encrypted user data item of the plurality of user data items has a different data item key.

15. The device of claim 14 , wherein the method further comprises the step of discarding the fingerprint information of the user after generating the authentication template for the user.

16. The device of claim 14 , wherein the data item key accessible if the authentication template for the user corresponds to the security template stored on the device is stored on the storage medium in encrypted form.

17. The device of claim 14 , wherein the plurality of encrypted user data items are stored on the storage medium in a file system comprising folders, sub-folders, and encrypted data files.

Assignments (4)

Continuity (8)