IP Library Granted Patent US 11,550,938
Granted Patent B2
US 11,550,938 · App. 16/559,164 · Granted Jan 10, 2023

Automatic device zeroization

Inventor: George Fortney (Toms River, NJ)
Assignee: Science Applications International Corporation
G06F21/62G06F21/32G06F2221/2133G06F2221/2139G06F2221/2143
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,550,938
App. No.
16/559,164
Granted
Jan 10, 2023
Kind
B2
Abstract

Systems, apparatuses, and methods are described for zeroization of a computing device based on biometric information and vitality information. A computing device may store information associated with a user. The computing device may request biometric information and vitality information from one or more sensing devices. The computing device may determine, based on the requested biometric information and the requested vitality information, whether to zeroize the computing device.

Claims (100)

1. A method comprising:

sending, by a computing device, a request for biometric data;

receiving, by the computing device and in response to the request for biometric data, encrypted biometric data;

sending, by the computing device, a request for first vitality data;

receiving, by the computing device and in response to the request for first vitality data, encrypted first vitality data;

decrypting, by the computing device, the encrypted biometric data and the encrypted first vitality data;

authenticating, by the computing device and based on the decrypted biometric data, a human user of the computing device;

determining, by the computing device and based on the decrypted first vitality data, that the human user is alive;

based on the authenticating the human user, based on the determining that the human user is alive, and based on determining that one or more sensing devices are within a predetermined range of the computing device, providing, by the computing device, access to data stored in a memory of the computing device;

determining, by the computing device and based on second vitality data associated with providing the access, that the human user is not alive; and

based on the determining that the human user is not alive, erasing, by the computing device, the data stored in the memory by at least one of:

overwriting the data stored in the memory; or

rendering the memory inoperable by applying an electric charge to the memory.

2. The method of claim 1 , further comprising:

sending, based on a frequency of biometric data requests, multiple requests for biometric data; and

sending, based on a frequency of vitality data requests, multiple requests for vitality data.

3. The method of claim 2 , further comprising:

receiving, by the computing device, an indication of a type of mission associated with the computing device; and

determining, by the computing device and based on the type of mission, one or more of the frequency of biometric data requests or the frequency of vitality data requests.

4. The method of claim 2 , further comprising:

adjusting, by the computing device and based on vitality data received in response to one or more of the multiple requests for vitality data, the frequency of vitality data requests.

5. The method of claim 1 , wherein the biometric data comprises one or more of fingerprint data, toe print data, or iris recognition data.

6. The method of claim 1 , wherein each of the decrypted first vitality data and the second vitality data comprises one or more of heart rate data, body temperature data, or brainwave data.

7. The method of claim 1 , further comprising:

sending, by the computing device and to the one or more sensing devices, a request for second biometric data;

receiving, by the computing device and from the one or more sensing devices, encrypted second biometric data; and

decrypting the encrypted second biometric data, wherein the erasing the data stored in the memory is after determining that the decrypted second biometric data corresponds to the human user and that the human user is not alive.

8. The method of claim 1 , further comprising:

sending, by the computing device and to the one or more sensing devices, a request for the second vitality data after the providing the access to the data stored in the memory; and

receiving, by the computing device and from the one or more sensing devices, encrypted second vitality data; and

decrypting, by the computing device, the encrypted second vitality data to produce the second vitality data, wherein the sending the request for the first vitality data comprises sending, to the one or more sensing devices, the request for the first vitality data.

9. The method of claim 1 , further comprising:

sending, by the computing device and to the one or more sensing devices, a request for second biometric data; and

sending, by the computing device and to the one or more sensing devices, a request for the second vitality data;

wherein the erasing the data stored in the memory is after determining that encrypted second biometric data is received within a period of time after the sending the request for the second biometric data and that an encrypted form of the second vitality data is received within the period of time after the sending the request for the second vitality data.

10. The method of claim 1 , further comprising:

sending, by the computing device and to the one or more sensing devices, a request for second biometric data;

sending, by the computing device and to the one or more sensing devices, a request for the second vitality data;

receiving, by the computing device and from the one or more sensing devices, encrypted second biometric data; and

receiving, by the computing device and from the one or more sensing devices, encrypted second vitality data;

wherein the erasing the data stored in the memory is after processing decrypted second biometric data.

11. A computing device comprising:

one or more processors; and

memory storing instructions that, when executed by the one or more processors, cause the computing device to:

send a request for biometric data;

receive, in response to the request for biometric data, encrypted biometric data;

send a request for first vitality data;

receive, in response to the request for the first vitality data, encrypted first vitality data;

decrypt the encrypted biometric data and the encrypted first vitality data;

authenticate, based on the decrypted biometric data, a human user of the computing device;

determine, based on the decrypted first vitality data, that the human user is alive;

based on authenticating the human user, based on determining that the human user is alive, and based on determining one or more sensing devices are within a predetermined range of the computing device, provide access to data stored in the memory;

determine, based on second vitality data associated with providing the access, that the human user is not alive; and

based on the determining that the human user is not alive, erase the data stored in the memory by at least one of:

overwriting the data stored in the memory; or

rendering the memory inoperable by applying an electric charge to the memory.

12. The computing device of claim 11 , wherein the instructions, when executed by the one or more processors, further cause the computing device to:

send, based on a frequency of biometric data requests, multiple requests for biometric data; and

send, based on a frequency of vitality data requests, multiple requests for vitality data.

13. The computing device of claim 11 , wherein the instructions, when executed by the one or more processors, further cause the computing device to:

send, to the one or more sensing devices, a request for second biometric data;

receive, from the one or more sensing devices, encrypted second biometric data; and

decrypt the encrypted second biometric data, wherein the instructions, when executed by the one or more processors, cause the computing device to erase the data stored in the memory after determining that the decrypted second biometric data corresponds to the human user and that the human user is not alive.

14. The computing device of claim 11 , wherein the instructions, when executed by the one or more processors, further cause the computing device to:

send, to the one or more sensing devices, a request for the second vitality data after the providing the access to the data stored in the memory;

receive, from the one or more sensing devices, encrypted second vitality data; and

decrypt the encrypted second vitality data to produce the second vitality data, wherein the instructions, when executed by the one or more processors, cause the computing device to send the request for the first vitality data by sending, to the one or more sensing devices, the request for the first vitality data.

15. The computing device of claim 11 , wherein the instructions, when executed by the one or more processors, further cause the computing device to:

send, to the one or more sensing devices, a request for second biometric data; and

send, to the one or more sensing devices, a request for the second vitality data;

wherein the instructions, when executed by the one or more processors, cause the computing device to erase the data stored in the memory after determining that encrypted second biometric data is received within a period of time after the sending the request for the second biometric data and that an encrypted form of the second vitality data is received within the period of time after the sending the request for the second vitality data.

16. One or more non-transitory computer-readable media storing instructions that, when executed by one or more processors, cause a computing device to:

send a request for biometric data;

receive, in response to the request for biometric data, encrypted biometric data;

send a request for first vitality data;

receive, in response to the request for the first vitality data, encrypted first vitality data;

decrypt the encrypted biometric data and the encrypted first vitality data;

authenticate, based on the decrypted biometric data, a human user of the computing device;

determine, based on the decrypted first vitality data, that the human user is alive;

based on authenticating the human user, based on determining that the human user is alive, and based on determining that one or more sensing devices are within a predetermined range of the computing device, provide access to data stored in a memory of the computing device;

determine, based on second vitality data associated with providing the access, that the human user is not alive; and

based on the determining that the human user is not alive, erase the data stored in the memory by at least one of:

overwriting the data stored in the memory; or

rendering the memory inoperable by applying an electric charge to the memory.

17. The one or more non-transitory computer-readable media of claim 16 , wherein the instructions, when executed by the one or more processors, further cause the computing device to:

send, based on a frequency of biometric data requests, multiple requests for biometric data; and

send, based on a frequency of vitality data requests, multiple requests for vitality data.

18. The one or more non-transitory computer-readable media of claim 16 , wherein the instructions, when executed by the one or more processors, further cause the computing device to:

send, to the one or more sensing devices, a request for second biometric data;

receive, from the one or more sensing devices, encrypted second biometric data; and

decrypt the encrypted second biometric data, wherein the instructions, when executed by the one or more processors, cause the computing device to erase the data stored in the memory after determining that the decrypted second biometric data corresponds to the human user and that the human user is not alive.

19. The one or more non-transitory computer-readable media of claim 16 , wherein the instructions, when executed by the one or more processors, further cause the computing device to:

send, to the one or more sensing devices, a request for the second vitality data after the providing the access to the data stored in the memory;

receive, from the one or more sensing devices, encrypted second vitality data; and

decrypt the encrypted second vitality data to produce the second vitality data, wherein the instructions, when executed by the one or more processors, cause the computing device to send the request for the first vitality data by sending, to the one or more sensing devices, the request for the first vitality data.

20. The one or more non-transitory computer-readable media of claim 16 , wherein the instructions, when executed by the one or more processors, further cause the computing device to:

send, to the one or more sensing devices, a request for second biometric data; and

send, to the one or more sensing devices, a request for the second vitality data;

wherein the instructions, when executed by the one or more processors, cause the computing device to erase the data stored in the memory after determining that encrypted second biometric data is received within a period of time after the sending the request for the second biometric data and that an encrypted form of the second vitality data is received within the period of time after the sending the request for the second vitality data.

21. The method of claim 1 , wherein the erasing the data stored in the memory is further based on a determination that the one or more sensing devices are not within the predetermined range of the computing device.

Assignments (2)
SECURITY INTEREST Recorded Apr 22, 2021
From: SCIENCE APPLICATIONS INTERNATIONAL CORPORATION
To: CITIBANK, N.A.
Reel/Frame 056011/0903 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 13, 2019
From: FORTNEY, GEORGE
To: SCIENCE APPLICATIONS INTERNATIONAL CORPORATION
Reel/Frame 050371/0270 →
Continuity (1)
Related Publication 20210064768A1 · Mar 4, 2021