Computer program and method for biometrically secured, transparent encryption and decryption
A computer program for enabling secured, transparent encryption and decryption provides a user interface that allows a user to drag and drop files into and out of a secure repository and automatically encrypts files transferred into the repository and automatically decrypts files transferred out of the repository. The user can transfer file folders into the repository, wherein the program encrypts all of the files within the folder and retains the original file/folder structure, such that individual files can be moved within the repository, moved out of the repository, and opened or executed directly from the repository. The program requires the user to submit biometric data and grants access to the secure repository only if the biometric data is authenticated. The program generates an encryption key based at least in part on biometric data received from the user. Additionally, the program destroys the key after termination of each encryption/decryption session.
1. An integrated secure storage device for storing of a plurality of data items, comprising:
a biometric sensor;
one or more non-transitory computer storage media storing:
the plurality of data items, wherein each of the plurality of data items is associated with information associated with a security template of a user for authentication of the user's identity;
a computer-executable program for enabling secure storage of the plurality of data items, wherein the program instructs at least one processor to perform the following steps:
receive an instruction from the user to access a data item of the plurality of data items from the secure storage system;
receive information associated with an authentication template of the user to access the data item,
wherein the information associated with the authentication template includes biometric information and password information of the user;
compare the information associated with the authentication template with information associated with each of a plurality of security templates,
wherein each of the plurality of security templates comprises a biometric template and a password template, and
wherein the plurality of security templates includes the security template of the user;
generate a key useable to access the data item based at least in part on the password information; and
upon the information associated with the authentication template correlating with the information associated with the security template of the user, decrypt the data item using said generated key; and
a housing containing the biometric sensor and the non-transitory computer storage medium.
2. The device of claim 1 , wherein the biometric sensor is a fingerprint reader.
3. The device of claim 1 , wherein the biometric sensor is a camera configured to recognize the user's face.
4. The device of claim 1 , wherein the housing further includes a keyboard configured to receive the user's passcode.
5. The device of claim 1 , wherein each of the security templates comprises a plurality of biometric templates.
6. The device of claim 1 , wherein each of the plurality of data items consists of a single file.
7. The device of claim 1 , wherein each of the plurality of data items comprises a plurality of files.
8. One or more non-transitory computer storage media storing a plurality of data items and a computer-executable program for enabling secure storage of the plurality of data items, wherein the program instructs at least one program to perform the following steps:
receive an instruction from a user to access a data item of the plurality of data items from the secure storage system;
receive information associated with an authentication template of the user to access the data item,
wherein the information associated with the authentication template includes biometric information and password information of the user;
compare the information associated with the authentication template with information associated with each of a plurality of security templates,
wherein each of the plurality of security templates comprises a biometric template and a password template, and
wherein the plurality of security templates includes a security template of the user;
generate a key useable to access the data item based at least in part on the password information; and
upon the information associated with the authentication template correlating with the information associated with the security template of the user, decrypt the data item using said generated key.
9. The media of claim 8 , wherein the biometric template comprises a fingerprint template and the biometric information comprises fingerprint information.
10. The media of claim 8 , wherein the biometric template comprises a facial template and the biometric information comprises facial imagery.
11. The media of claim 8 , wherein the information associated with the authentication template comprises hashed information.
12. The media of claim 8 , wherein each of the plurality of data items consists of a single file.
13. The media of claim 8 , wherein each of the plurality of data items comprises a plurality of files.
14. The media of claim 8 , wherein each of the plurality of security templates comprises a plurality of biometric templates.
15. A method of accessing a data item of a plurality of securely stored data items, comprising the steps of:
receiving an instruction from a user to access a data item of the plurality of data items from the secure storage system;
receiving information associated with an authentication template of the user to access the data item,
wherein the information associated with the authentication template includes biometric information and password information of the user;
comparing the information associated with the authentication template with information associated with each of a plurality of security templates,
wherein each of the plurality of security templates comprises a biometric template and a password template, and
wherein the plurality of security templates includes a security template of the user;
generating a key useable to access the data item based at least in part on the password information; and
upon the information associated with the authentication template correlating with the information associated with the security template of the user, decrypt the data item using said generated key.
16. The method of claim 15 , further comprising the step of prompting the user to provide the information associated with the authentication template.
17. The method of claim 15 , wherein each of the plurality of data items consists of a single file.
18. The method of claim 15 , wherein the information associated with the authentication template comprises hashed information.
19. The method of claim 15 , further comprising the step of destroying the key at the end of a session.
20. The method of claim 15 , wherein the generated key is based at least in part on the password information.