Patent Application
20110246790
The present disclosure generally relates to the field of memory storage device, and more particularly, to a removable digital memory storage device for data storage with self-contained security protection/management and multiple security functions.
Conventional remote (not embedded inside a host device) or removable memory storage devices, such as external USB flash memory drives or external hard disk drives (HDD), can store digital data files while being portable from one device to another, which makes the transfer of data from a host device to another very convenient. To protect the data content, the conventional removable devices may include a biometric sensor or require a password as a gate for authentication. Such security protections usually rely on the CPU inside the host device, such as a PC or a notebook, to perform the necessary computation tasks for the authentication process (e.g., data processing to recognize the fingerprint patterns from the sensor, or installation of encryption). That is, the removable storage devices must be first connected to a host device and then use the CPU, operating system, and/or drivers of the host device to compute and perform the authentication tasks.
One exemplary embodiment of the present disclosure is directed to a secured removable storage device operable to communicate with a host device. The secured removable storage device comprises: a non-volatile memory module; a biometric module operable to process biometric data; a display module operable to sense and receive biometric data and to display information and allow a user to enter data; an interface for communicating with the host device; and a microcontroller module. The microcontroller module is in communication with the non-volatile memory module, the biometric module, and the display module such that the microcontroller module is operable to verify the identity of the user using the biometric data and selectively allow access to the storage device.
Another exemplary embodiment of the present disclosure is directed to a secured removable storage device operable to communicate with a host. The secured removable storage device comprises: a non-volatile memory module; a biometric module operable to sense, receive, and process biometric data; an interface for communicating with the host; a microcontroller module; a tracking module comprising a GPS unit for tracking the location of the secured removable storage device; and an embedded power source operable to provide power to the non-volatile memory module, the biometric module, the tracking module, and the microcontroller module. The microcontroller module is in communication with the non-volatile memory module, the biometric module, and the tracking module such that the microcontroller module is operable to verify the identity of the user using the biometric data and selectively allow access to the storage device.
In order to understand the manner in which embodiments of the present disclosure are obtained, a more particular description of various embodiments of the disclosure briefly described above will be rendered by reference to the appended drawings. It is to be appreciated that these drawings depict only typical embodiments of the disclosure and are not necessarily drawn to scale and are not therefore to be considered to be limited of its scope. The embodiments of the disclosure will be described and explained with additional specificity and detail through the use of the accompanying drawings in which:
Accordingly, it may be desirable to provide both internal data encryption and external biometric protection to high-capacity data storage while not significantly adding to the size and weight of the original device. It may also be desirable that the add-on biometric sensor components are not easily separated for access to the original storage device.
Furthermore, conventional computers without an internal, built-in security management enabling device or software may rely on an external device, such as a fingerprint pad, connected to the host device through a USB cable/port, to enable data encryption for files storage in the main internal drives. This requires the addition of another auxiliary device, the external biometric fingerprint pad, for example. Thus, if one is to use an external mouse, an external fingerprint pad, and external data storage drive, one needs to carry three additional, separate devices. If a single device can combine the functions of all three devices, then a user needs only to carry one device instead of three, which provides more convenience to the users and reduces the weight of carrying all three devices while traveling. Therefore, there may be needs for integrated devices that can perform some or all of the above discussed functions.
One aspect of the present disclosure is directed to a multifunctional, self-contained secured removable storage device that, in some embodiments, may not rely on a host for data protection. The device may include integrated, multi-level, hardware- and software-based security protections that operate independent from any host device, thereby allowing independent security management on the storage device alone. The integration of security protections in one independent device affords a degree of protection that cannot be achieved by individually implementing the same security mechanisms.
Another aspect of the present disclosure is directed to a multifunctional, self-contained secured removable storage device that has disassembly-proof mode and GPS protection mode. It may be desirable that all these features/components can be integrated in a single circuit board.
In the following detailed description, reference is made to the accompanying drawings that show, by way of illustration, specific embodiments in which the disclosure may be practiced. These embodiments are described in sufficient detail to enable those skilled in the art to practice the disclosure. It is to be understood that the various embodiments of the disclosure, although different, are not necessarily mutually exclusive. For example, a particular feature, structure, or characteristic described herein, in connection with one embodiment, may be implemented within other embodiments without departing from the spirit and scope of the disclosure.
In addition, it is to be understood that the location or arrangement of individual elements within each disclosed embodiment may be modified without departing from the spirit and scope of the disclosure. The following detailed description is, therefore, not to be taken in a limiting sense, and the scope of the present disclosure is defined only by the appended claims, appropriately interpreted, along with the full range of equivalents to which the claims are entitled.
In some embodiments, the biometric module 20 comprises a biometric sensor 21 for sensing and receiving voice signal data. The biometric sensor 21 may be a voice sensor, such as a microphone. However, those skilled in the art may understand that, the present disclosure is not so limited.
The power source 60 may be comprised of a power switch 61 and a rechargeable battery 62. The power switch may be configured to have a default “power-on” mode. In an embodiment, it may be configured such that switching from the power-on to a power-off mode can only be done through the display module 30 after passing predetermined security procedures. In an exemplary embodiment, the power switch 61 can only be turned off through a secured soft-key on the display module, such as a multifunctional touch screen. However, those skilled in the art may understand that, the present disclosure is not so limited.
Moreover, the non-volatile memory module 10 may be a solid-state drive (SSD), a HDD, or a Flash memory, including a NAND Flash memory. The interface 40 may be at least one of USB 2.0, USB 3.0, peripheral component interconnect express (PCI-E), external serial advanced technology attachment (eSATA), integrated drive electronics (IDE), infrared interface, and Bluetooth.
Those skilled in the art may understand that the rechargeable battery in some embodiments may be a Ni-Cd battery, a Ni-MH battery, a lithium-ion battery, a Li-Pol battery, or a SLA battery. The single circuit board 201 of the secured removable storage device 200 may contain other numbers of the biometric sensor, the non-volatile memory, the display module, the interface and the rechargeable battery respectively, and all kinds of variations shall fall into the scope of the present disclosure.
In accordance with one embodiment of the present disclosure, the single circuit board 201 may also include other modules or components. In an embodiment, a random number generator 70 is linked to the display module 30 and the microcontroller module 50 for generating a sequence of periodic random alphanumeric number displayed in the display module 30 for verification. In another embodiment, a tracking module 80 is powered by the embedded power source 60 with a GPS unit (as shown in
All the above-mentioned modules will be respectively described with other Figures in different embodiments according to the present disclosure.
A user may be required to go through an authentication process before given access to the data files in the secured removable storage device 300. The authentication process may contain multiple levels of security measures comprising any combination of the following: biometric fingerprint recognition, password recognition, handwriting signature recognition, and any other security measures know in the art. In an embodiment, a touch-screen 310 of device 300 may be operable to sense and receive fingerprint or other biometric information and transmit the biometric information to the biometric module 306. In another embodiment, the biometric module 306 may include an integrated biometric senor operable to sense and receive fingerprint or other biometric information.
Upon obtaining the biometric data, the biometric module 306 is operable to process the biometric data, and send a corresponding signal to the microcontroller module 304. The microcontroller module 304 may match the signal with information stored in a users database stored in the flash memory 308. If the biometric data matches with one of the recorded users of the device 300, the user may proceed to a second level for further authentication. In an embodiment, in the second level, the user has to input a certain password by a soft keypad displayed on the touch-screen 310. In another embodiment, the visitor may input a handwriting signature using the touch-screen 310, which may allow the user to input in different languages in addition to English alphanumeric, such as Chinese, Japanese, Arabic, etc. Therefore, the password or signature can be in a different language. Finally, if the visitor passes all the security recognition steps, the device can be used as a normal storage device.
Those skilled in the art may appreciate that the combination of the multiple recognitions may be in different order and other combinations of the above-mentioned recognition methods are easily understood, such as combination of fingerprint recognition once and password recognition twice and so on. Of course, the present disclosure is not limited in this aspect, and other embodiments may occur to those skilled in the art.
Even without connecting to any host device, a user may finish managing the secured removable storage device 300 powered by the lithium-ion battery 311 after passing the recognition as described above. In this way, the user may store new passwords, new handwriting signatures, or new users' fingerprints. Furthermore, the user can also enable special working modes like “tamper-proof mode” or “locating mode”.
In an exemplary embodiment, the random number generator 411 may generate various alphanumeric number patterns at different time or on demand For example, the random number may be displayed on an upper part of the touch-screen 410 window while the lower part of the window shows a virtual keypad for the user to re-enter the random number. Once the recognition process is completed, the device 400 can then be used for a specified period determined by the user (such as one hour, 24 hours, one week, etc.). When the pre-specified period expires, the user must re-enter the same number again to continue. Otherwise, the entire registration process must be started anew. It is to be appreciated that the present disclosure is not limited in this aspect, and other embodiments may occur to those skilled in the art.
In accordance with an embodiment of the present disclosure, the secured removable storage device may further comprise a tamper-proof module (not shown) powered by the embedded power source for triggering a partial or complete destruction of the storage device 500 once the storage device 500 is being tampered, disassembled and/or damaged. The tamper-proof module may comprise at least one disassembly sensor for sensing the disassembly when tamper-proof mode is activated. Optionally, the tamper-proof module may be activated in many manners, such as electrical manners, mechanical manners, electromechanically manners or optical manners. The disassembly sensor in accordance with the embodiment of the present disclosure may be of contact or contactless type, such as being embodied by photoelectric sensor, mechanical moving detector, vibration sensor and the like. However, the present disclosure is not so limited, other variations may occur to those skilled in the art, and these variations fall into the scope of the present disclosure.
The device 500 may further include a random number generator 411, which may be identical to the one shown in
Of course, the present disclosure is not limited in this aspect, and other embodiments may occur to those skilled in the art.
It is to be appreciated that the secured storage devices of the present disclosure may include multiple security measures, including biometric fingerprint recognition, biometric voice recognition, password recognition, handwriting signature recognition, random number recognition, locating mode and tamper-proof mode, and may be used individually or in any combination with each other. Although several security measures have been described with embodiments in detail above, the embodiments described are exemplary and are not limiting, other variations may occur to those skilled in the art, and these variations fall into the scope of the present disclosure. Moreover, combinations of the multiple security measures may achieve a security system that can be used in many different applications according to design needs.
The disclosures are not restricted to the particular details listed herein. Indeed, those skilled in the art having the benefit of this disclosure will appreciate that many other variations from the foregoing description and drawings may be made within the scope of the present disclosure. Accordingly, it is the appended claims including any amendments thereto that define the scope of the disclosures. The terms and expressions which have been employed herein are used as terms of description and not of limitation, and there is no intention, in the use of such terms and expression, of excluding any equivalents of the features shown and described (or portions thereof), and it is recognized that various modifications, variations, alternatives, and equivalents are possible within the scope of the claims. Accordingly, the claims are intended to cover such modifications, variations, alternatives, and equivalents.
