Computer security system having integrated GPS

A computing apparatus having a hard drive storage unit which includes a global positioning system, a non-volatile memory and a compare module. The non-volatile memory stores a permitted zone of operation of the hard drive storage unit while the compare module monitors the current location. If the compare module detects a current location of the hard drive storage unit as tracked by the global positioning system which is outside of the permitted zone of operation as stored in the non-volatile memory, the non-volatile memory contains at least one command implemented by a computer processor that may cause the hard drive storage unit to become disabled.

FIELD OF THE INVENTION

The present invention relates in general to computer systems and, in particular, to a computer system and method for disabling a hard drive storage unit in a computer when the hard drive storage unit is outside an authorized, geographical area utilizing a global positioning system device.

BACKGROUND OF THE INVENTION

Personal computer systems are well known in the art. They have attained widespread use for providing computer power to many segments of today's modern society. Personal computers (PCs) may be defined as a desktop, server, floor standing, portable or laptop computer that may include a system unit having at least one central processing unit (CPU) and associated volatile and non-volatile memory, including random access memory (RAM) and basic input/output system read only memory (BIOS ROM), a system monitor, a keyboard, a CD/DVD drive, a fixed disk storage drive (also known as a “hard drive”), a pointing device such as, a mouse, and an optional network interface adapter. These systems may include the use of a motherboard to electrically connect these components together.

Computers are one of the most stolen electronic devices on the market today. After being stolen, a portable computer is typically removed from its area of use and resold in another area. This prevents local police from easily recovering the computer.

Once a computer is stolen or otherwise removed from its area of use, data from the hard drive may be accessed. Previous attempts at security have been aimed at protecting the computer. However, the really valuable part of the computer may be the data stored on the hard drive and the previous attempts at security do not appear to address the security of the hard drive.

BRIEF SUMMARY OF THE INVENTION

The present invention proposes an apparatus and method for protecting the data stored on a hard drive should the hard drive, or a computer system incorporating the hard drive, be moved outside a permitted zone of operation by disabling the hard drive.

The various advantages and purposes of the present invention as described above and hereafter are achieved by providing, according to a first aspect of the invention, a hard drive storage unit apparatus including a hard drive storage unit for a computer, a housing for the hard drive storage unit, a non-volatile memory within the housing to store data regarding a permitted location of the hard drive storage unit, a global positioning system (GPS) unit within the housing to track a current location of the hard drive storage unit, and a compare module to monitor any change between the permitted location and current location of the hard drive storage unit.

According to a second aspect of the invention, there is provided a computing apparatus including a computing apparatus housing, a central processing unit within the computing apparatus housing, and a hard drive storage unit apparatus within the computing apparatus housing including a hard drive storage unit, a housing for the hard drive storage unit, a non-volatile memory within the hard drive storage unit housing to store data regarding a permitted location of the hard drive storage unit, a global positioning system (GPS) unit within the hard drive storage unit housing to track the current location of the hard drive storage unit, and a compare module to monitor any change between the permitted location and current location of the hard drive storage unit.

According to a third aspect of the invention, there is provided a method of securing a hard drive storage unit in a computer, the hard drive storage unit having a housing for the hard drive storage unit, a non-volatile memory within the housing to store data regarding a predetermined zone of operation of the hard drive storage unit, a computer processor, a compare module to monitor any change between the permitted location and a current location, and a global positioning system (GPS) unit within the housing to track the current location of the hard drive storage unit, the method including registering the GPS unit by a computer processor with an instrumentality upon initial power up of the hard drive storage unit, defining by a user a predetermined zone of operation, storing by a computer processor the predetermined zone of operation in the non-volatile memory, storing by a computer processor a command in the non-volatile memory to disable the hard drive storage unit, determining by the GPS unit a current location of the hard drive storage unit, referencing by the compare module the predetermined zone of operation stored by the non-volatile memory and determining if the current location of the hard drive storage unit is within the predetermined zone of operation, controlling power to the hard drive storage unit by the computer processor and wherein power is supplied to the hard drive storage unit if the hard drive storage unit is within the predetermined zone of operation and power is not supplied to the hard drive storage unit if the hard drive storage unit is outside of the predetermined zone of operation, and receiving an instruction by a computer processor from the instrumentality to implement the command to format the hard drive storage unit.

According to a fourth aspect of the invention, there is provided a method of securing a hard drive storage unit in a computer, the hard drive storage unit having a housing for the hard drive storage unit, a non-volatile memory within the housing to store data regarding a predetermined zone of operation of the hard drive storage unit, a compare module to monitor any change between the predetermined zone of operation and a current location and a global positioning system (GPS) unit within the housing to track the current location of the hard drive storage unit, the method including storing by a computer processor a predetermined zone of operation in the non-volatile memory, referencing by the compare module the predetermined zone of operation stored in the non-volatile memory, determining by the compare module if the current location of the hard drive storage unit is within the predetermined zone of operation, and disabling by a computer processor the hard drive storage unit if the hard drive storage unit is outside of the predetermined zone of operation.

DETAILED DESCRIPTION OF THE INVENTION

Referring to the Figures in more detail. and particularly referring toFIG. 1, there is shown a computer system10having a hard drive12. Computer system and computer are used interchangeably herein. Such a hard drive12is a ubiquitous and well known part of the computer and may include, for purposes of illustration and not limitation, fixed disk hard drives as well as flash drives in netbook minicomputers. The computer10may be any of the computers mentioned above but the present invention has particular application to laptops because of their versatile portability. Also indicated inFIG. 1is a permitted zone of operation14where the computer10frequently operates. The permitted zone of operation may be an office, cubicle, building, home office or other area as defined by the owner or authorized user (collectively referred to as owner) of the computer10. It is within the scope of the present invention to have multiple permitted zones of operation such as a cubicle in an office building and a home office.

Referring now toFIG. 2, there is shown a pictorial representation of a hard drive12. Any type of hard drive12may be suitable for practicing the present invention. The hard drive12shown inFIG. 2is merely representative of a hard drive12that may be used in practicing the present invention and is shown for purposes of illustration and not limitation. Hard drive12includes a hard drive unit30contained within a housing28which may be in one or more parts. Also shown inFIG. 2is a printed circuit assembly50which may contain the various components that make up the electronic circuitry that runs the hard drive12.

Referring now toFIG. 3, a detailed schematic representation of the computer system10of the present invention is illustrated. Computer system10typically includes one or more central processing units (only one such central processing unit (CPU)22is shown inFIG. 2), memory24and other components not important to the present important. The CPU22, memory24and other components may be mounted on a mother board26as is conventional.

Still referring toFIG. 3, the circuitry that runs the hard drive12shown inFIG. 2is shown in more detail. The hard drive12and hard drive unit30are shown schematically as box12,30. The electronic circuitry are conveniently shown as located on printed circuit assembly50but they do not need to be as some components may be directly attached to the hard drive unit30. The hard drive12may contain conventional components such as drive motor circuitry100and device processor102. The circuitry further includes non-volatile memory32, global positioning system (GPS)34and compare module33.

The non-volatile memory32may be selected from the group consisting of electrically erasable programmable read only memory (EEPROM), flash memory, non-volatile random access memory (NVRAM) and magnetosensitive random access memory (MRAM). The non-volatile memory is essentially used herein as a controller that may store firmware commands with respect to the operation or disabling of the hard drive12, as will be explained in more detail hereafter. The non-volatile memory32may be any memory device, including those listed above, that is capable of storing firmware commands.

In one embodiment of the present invention, the firmware commands from non-volatile memory32may be executed by a computer processor37. The non-volatile memory32and computer processor37may be separate components connected by appropriate wiring or, as shown inFIG. 3, the non-volatile memory32and computer processor37may be manufactured as a single component having the dual functionality of a non-volatile memory and a computer processor. It is envisioned that computer processor37is a relatively simple computer processor and need not be as complex as a CPU. In another embodiment of the present invention, non-volatile memory32and computer processor37may be replaced by a microcontroller provided that the microcontroller has a non-volatile memory component.

In one preferred embodiment, the hard drive circuitry includes a transceiver36for communicating a location of the hard drive unit30to the outside world. In another preferred embodiment, the hard drive unit30, non-volatile memory32, computer processor37, GPS34, compare module33and preferred transceiver36are located within the housing28of the hard drive12. In a further preferred embodiment, the nonvolatile memory32, computer processor37, GPS34, compare module33and preferred transceiver36are mounted on the printed circuit assembly50which may also include the hard drive unit30. The combination of hard drive unit30, non-volatile memory32, computer processor37, GPS34, compare module33and preferred transceiver36may form an integrated hard drive assembly contained within housing28. Hard drive12hereafter may be referred to as hard drive or hard drive storage unit and both of such terms are understood to be equivalent.

Still referring toFIG. 3, the computer10includes a power supply38which supplies system power to the CPU22, memory22and other components not shown as well as hard drive12. In one embodiment, the system power is supplied to motherboard26through circuitry40. The hard drive12may also be mounted on system board26although this is not required. Instead, hard drive12may be mounted on a card which is in turn mounted on motherboard26. In either case, power is supplied to hard drive12through switch104(for example, a logical gate) as indicated by circuitry42. Switch104is connected to non-volatile memory32and computer processor37by wiring106. Switch104is controlled by computer processor37through wiring106. Power is supplied to non-volatile memory32and computer processor37though bus108from switch104. While power is fed to non-volatile memory32and computer processor37from switch104, the power is always “on” and not subject to being switched by switch104. The hard drive12may have a power bus44by which power is distributed from switch104to the hard drive unit30, GPS34and preferred transceiver36. In addition, non-volatile memory32and computer processor37may communicate with GPS34by bus46and with transceiver36by bus112while GPS34and transceiver36may communicate by bus48. The hard drive12further comprises the compare module33for comparing the permitted zone of operation as stored in the non-volatile memory32with the current location of the hard drive12as tracked by GPS unit34. Compare module33may be implemented in hardware, software or firmware and may be separate from non-volatile memory32, computer processor37and GPS unit34. It is also within the scope of the present invention for compare module33to form a part of the non-volatile memory32, computer processor37or GPS unit34.

Referring now toFIGS. 4 to 7, the operation of a preferred embodiment of the present invention will be discussed. Referring first toFIG. 4, computer10having hard drive12is located in a zone of operation14which has been determined by the owner of the computer10to be permitted. The computer10may communicate through transceiver36with a service at an instrumentality such as a web site60which handles managing of user accounts, billing, defining safe zones, registering of the GPS34, notifications from computer10, preferences of the owner of the computer10and other services to be explained hereafter. The web site60upon receiving input from the owner may also place the computer10and hard drive12in travel and/or repair mode if desired.

Referring now toFIG. 5, the method of the invention is described. In step62, computer10registers GPS34with a service at an instrumentality such as web site60using a unique serial number or identifier of the hard drive12. In step64, the owner chooses a security code which will be needed for verification purposes should the hard drive12be removed from the permitted zone of operation14and the computer10receives the security code as input from the owner. In step66, a permitted zone of operation where the computer10and hard drive12will be operated is defined. The permitted zone of operation may be defined via the web site60, directly inputted from the GPS unit34or from an online mapping service (such as Googlemaps) where GPS coordinates can be obtained using input supplied by the owner. In step68, the nonvolatile memory32stores the permitted zone of operation. In step70, the nonvolatile memory32may also store certain commands, such as a “format c:\” command or a disabling BIOS command that may disable the hard drive12as will be explained hereafter.

Referring now toFIG. 6, additional steps of the method will be described. In step72, the GPS unit34determines the current location of the hard drive12.

At this point in the process, in step74, the compare module33references the permitted zone of operation14as stored in the non-volatile memory32and determines if the current location of the hard drive12is within the permitted zone of operation. If the determination is made that the hard drive12is within the permitted zone of operation14, this determination may be stored in non-volatile memory32, then in step76, computer processor37causes switch104to supply power to the hard drive12. If the determination is made that the hard drive12is outside the permitted zone of operation14, this determination may be stored in non-volatile memory32, then in step78, computer processor37causes switch104to deny power to the hard drive12, effectively disabling the computer10. There may also be a pop-up window with a warning that the computer or hard drive will be disabled because it is leaving the permitted zone of operation. In step80, the computer10or the instrumentality such as the web site60may also send a notification to the owner.

Referring now toFIG. 7, the process continues with denying power to the hard drive12, as previously indicated by step78. In step82, the person in possession of the computer10(who may be the owner or an unauthorized person) reboots the computer. After the computer10has been rebooted, in step84, the person in possession of the computer10enters in the computer10the security code which was first entered in the computer10in step64,FIG. 5. In step86, the software at the web site60determines if the security code is correct, and if so, web site60may communicate this determination to non-volatile memory32via transceiver36and bus112and then in step88, the computer processor37may cause switch104to supply power to the hard drive12. Since power was initially denied due to the hard drive12leaving its permitted zone of operation, a further step in the process could be step90wherein the computer10queries the owner to define a new zone of operation, and if the answer is “yes”, then a further step may be step92, wherein a new zone of operation is defined in computer10using owner input, which could also include choosing a new security code.

If, in step86, the security code is incorrect or if no security code is entered in computer10, the service at web site60, in step94, looks to its user preferences for further instructions. There may also be a further notification to the owner by the web site60, step80, or a pop-up window may open with a warning that the computer or hard drive will be disabled because it is leaving the permitted zone of operation. When the service at web site60looks to its user preferences for further instructions, step94, these instructions may be stored at the web site60or the web site60may inquire of the owner for these further instructions. The further instructions could include several different options for disabling the computer10or hard drive12. One option could simply be to default to step78, in which power is denied to the hard drive and cause the computer processor37to issue a command (which may be previously stored in non-volatile memory32) to shut down the hard drive and therefore the computer10. The user may try to reboot and since the user does not have the security code, the computer10would be shut down again. This scenario may proceed until the user gives up, thus preserving the data on the hard drive. Another option is to have the computer processor37in step96issue a command (which may be previously stored in non-volatile memory32) to the BIOS (Basic Input/Output System) through circuitry110(FIG. 3) to remove the hard drive from the BIOS. This would have the effect of also shutting down the computer. If the owner recovers the computer, the BIOS may be fixed so that the computer becomes operable again. A further option, in step98, is to format the hard drive by the web site60or possibly the computer processor37issuing a “format CA” command (which may be previously stored in non-volatile memory32) if the security code is incorrectly entered a predetermined number of times. This is a drastic option but it may be necessary to protect very sensitive data.

As noted previously, power is controlled to the hard drive12by computer processor37and switch104. If the hard drive12is within the permitted zone of operation, the computer processor37may permit the system BIOS to boot normally. If the hard drive12is outside of the permitted zone of operation, or is moved from within the permitted zone of operation to outside the permitted zone of operation, the computer processor37may cause switch104to cut power to the hard drive12, the BIOS may shut down the computer10and an alert may be sent by transceiver36to the web site60. The non-volatile memory32may then enter “security mode” and unless the corresponding security code was transmitted to the web site60the next time the computer10was powered on, the computer processor37may issue a command as discussed above while disabling the power to the hard drive12, rendering the entire unit useless.

The process could be modified in the user preferences at web site60such that the instructions to the non-volatile memory32and computer processor37, or perhaps just the most harsh instructions such as the hard drive format command, would be sent only with written permission from the computer owner via the web site60and can only be initiated by the service at the web site60utilizing the unique serial number or identifier of the hard drive12previously used for registration along with an encrypted signal.

The service at web site60may make use of Googlemaps or a similar service so that for a fee, the computer owner could track their computer and hard drive in real time anywhere in the world.

While a preferred embodiment of the present invention is to have transceiver36for communicating with the web site60, the present invention may be advantageous even without transceiver36. That is, some user preferences could be embodied in the non-volatile memory32. For example, the non-volatile memory32and computer processor37could be programmed so that upon transporting of the hard drive12out of the permitted zone of operation14, power to the hard drive12may be shut off by switch104. Upon rebooting of the computer10and hard drive12, a security word may be requested and after some number of tries, the computer processor37would fail to provide a necessary instruction for the BIOS to boot the computer, thereby disabling the computer10. The owner of the computer10, after recovering the computer10, could reboot, enter the correct security code into computer10and thus re-enable the computer10. As a drastic solution, there could be an instruction in the non-volatile memory to direct the computer processor37to simply format the hard drive after some number of incorrect entries of the security word.