Patent Publication Number: US-2011055507-A1

Title: System and method for restricting the function of a storage device based on geographical location

Description:
FIELD OF INVENTION 
     This patent application relates to storage devices whose functions can be restricted based on its geographical location and methods for achieving the function-restriction. 
     BACKGROUND 
     The development of the computer industry creates more and more applications of data storage devices. A common storage device usually includes a storage module and a control module. When the storage device is connected to an external device, storage of data in the storage module may be achieved through the control actions of the control module. 
     In certain circumstances, especially when the data stored in the storage module contains important information or confidential information, it may be desirable to protect the data in the storage device and restrict one of more functions of the storage device, such as read, write or erase functions, according to its specific location (geographic position). However, there is currently no storage device that realizes such a function-restriction feature. 
     SUMMARY OF THE INVENTION 
     In one aspect of the invention, a storage device whose functions can be restricted according to its geographical location is provided. Such a storage device comprises:
         a storage module for storing data;   a positioning module, the positioning module determines the current location of the storage device; and   a control module, the control module determines if the storage device is located within an area for function-restriction; and if so, one or more storage functions of the storage device are restricted; if not, the storage module assumes normal operation.       

     In another aspect of the invention, a method for restricting the functions of a storage device based on the device&#39;s geographical location is provided. Such a method comprises the steps of:
         determining if there exist one or more pre-defined geographical areas for function-restriction;   if there exist one or more pre-defined geographical areas for function-restriction, then determining the current geographical position of the storage device;
           determining if the storage device&#39;s current geographical location is within a pre-defined geographical area, and   restricting one or more data storage functions of the storage device, if the storage device&#39;s current geographical location is within a pre-defined geographical area, or   allowing the data storage device to assume normal operation, if the storage device&#39;s current geographical location is not within any pre-defined geographical area.   
               

     Therefore, the storage device and method provided by this invention can restrict the functions of a storage device based on the device&#39;s geographic location, and thus enhance the security of data stored in the storage device. 
    
    
     
       BRIEF DESCRIPTION OF THE DRAWINGS 
         FIG. 1  demonstrates a storage device whose functions can be restricted based on its geographical location according to one embodiment of the invention; 
         FIG. 2  demonstrates a storage device whose functions can be restricted based on its geographical location according to another embodiment of the invention; 
         FIG. 3  demonstrates a method for restricting the functions of a storage device based on its geographical location according to yet another embodiment of the invention; 
         FIG. 4  demonstrates a method for restricting the functions of a storage device based on its geographical location according to yet another embodiment of the invention. 
     
    
    
     DETAILED DESCRIPTION OF PREFERRED EMBODIMENTS 
       FIG. 1  demonstrates a storage device whose functions can be restricted based on its geographical location according to one embodiment of the invention. According to  FIG. 1 , the storage device comprises a storage module  10 , a control module  20  and a positioning module  30 . The storage module  10  is used to store data, such as financial data, management data, information data, or military data, etc. The positioning module  30  determines the location of the storage device. The control module  20  determines if the storage device is located within an area for function-restriction. If the storage device is located in an area for function-restriction, then one or more functions of the storage device will be restricted according to pre-defined function-restricting patterns. Such function-restricting patterns may include prohibiting the read, write or erase operations on data stored in the storage device. Such a restriction of functions may be achieved by controlling the storage device to prohibit the execution of certain specific operations on the data it stores. For example, the control module  20  may instruct the storage device not to accept any operational command, thereby prohibiting any operation on the stored data. Of course, what is described here is only one example of achieving the function-restriction feature. Other means may be used to achieve the restriction of storage functions on the stored data. 
     In one embodiment, the control module  20  includes a RAM memory module. Programs used by the control module  20  to achieve its functions may be stored in the RAM memory module. 
     In another embodiment, the above-mentioned geographical areas for function-restriction may be a set of pre-defined locations for the storage module. The set of pre-defined locations may be stored in the storage module  10 . 
     In yet another embodiment, according to  FIG. 2 , the storage device may also include an input module  40 . The input module  40  allows an authorized user to enter self-defined parameters that specify the geographical locations for function-restriction. The input module  40  may be a well-know input device in the field, such as a key board. An authorized user is a user who is given the permission to enter geographical parameters for function-restriction. The purpose of assigning authorized users is to prevent the random entry of geographical parameters by any user. The granting of access to an authorized user may be achieved, for example, by providing a login ID and password to the authorized user. 
     Moreover, according to  FIG. 2 , the storage device may also include a display module  50 . When an authorized user is entering geographical parameters, the control module  20  may provide prompts to the user through the display module  50 , and guide the user to enter the correct parameters. The display module  50  may be a well-known display device, such as a LCD display. 
     According to one embodiment of the invention, the positioning module  30  may be any device that can obtain information of geographical position, such as a GPS device, a satellite navigation and positioning system or a rangefinder, etc. 
     In one embodiment, the control module  20  communicates with and controls the operations of the storage module  10 , the positioning module  30 , the input module  40  and the display module  50  via data packages that contain certain control command packages. The control command packages contained in the data packages may include: set geographical locations command package; display information command package; result inquiry command package; as well as return result command package. 
     Among the command packages, the set geographical locations command package may further include other command package according to the specific parameters required. For example, if the geographical location is a circle defined by a center point and a radius r, wherein the center point is defined by its latitude x and longitude y; then the set geographical locations command package may further include: a set latitude command package, a set longitude command package and a set radius command package. 
     When an authorized user is entering the parameters, the control module  20  sends the set latitude, set longitude and set radius command packages to the input module  40 , and sends the display information command package to the display module  50  to display prompts on the display module  50 . The prompts help the authorized user to enter the corresponding parameters (i.e. latitude x, longitude y and radius r) to define the geographical location for function-restriction. The control module  20  then sends the result inquiry command package to the positioning module  30  to learn the current location of the storage device determined by the positioning module  30 . The control module  20  then compares the current location and the function-restriction locations entered by the authorized user and determines if the current location is within a function-restriction location. If so, then the control module  20  exercises restrictions on one or more functions of the storage device. The control module  20  may also use the return result command package to inform the authorized user through the display module  50  that “function of the storage device is restricted because the device is within a geographical location for function-restriction”. If the current location is not within a function-restriction location, then the control module  20  allows the storage device to assume normal operation. The control module  20  may also use the return result command package to inform the authorized user through the display module  50  that “the storage device is operating normally because the device is not within a geographical location for function-restriction”. 
     In another embodiment, a data package may include three parts. The first part (for example, the first byte) contains the type of command. The second part (for example, the second byte) contains the size of the data package. The third part (its length is determined by the size shown in the second part) contains the content of the data package. For example, the third part of the set geographical location command package may include 4 bytes, the first two bytes contain the integer portions of the parameters such as latitude, longitude and radius and the last two bytes contain the decimal portions of these parameters. 
       FIG. 3  shows one embodiment of the method for achieving function-restriction based on a storage device&#39;s geographical location. 
     According to  FIG. 3 , when the storage device starts operating (step  101 ), it first in step  102  determines if a geographical location for function-restriction has been pre-defined. If not, the storage device enters step  103  to allow the storage module to assume normal data storage operation; if yes, the storage device enters step  104  to determine its current location. Then, in step  105 , the storage device determines if its current location is within a pre-defined geographical location for function-restriction. If yes, it restricts one or more of its storage functions in step  106 . If not, it allows the storage module to assume normal operation in step  107 . Possible function-restrictions may include prohibiting the read, write or erase operations on the data stored in the storage device. As an exemplary embodiment of function-restriction, when the control module determines that the storage device is within a function-restriction location, it will instruct the storage device not to accept any operational command, thereby prohibiting any operation on the stored data. 
       FIG. 4  shows another embodiment of the method for achieving function-restriction based on a storage device&#39;s geographical location. In this embodiment, an authorized user can define the geographical areas for function-restriction. 
     According to  FIG. 4 , when the storage device starts operating (step  201 ), it first in step  202  determines if a geographical location for function-restriction has been pre-defined. If yes, it enters  205 ; if not, it enters step  203  to allow an authorized user to enter geographical parameters to define the function-restriction areas. After the authorized user enters the parameters, the storage device in step  204  checks if the parameters are entered in conformity with a pre-defined format, i.e. if the parameters can be used to determine valid geographical areas for function-restriction. For example, the storage device can check if the parameters entered include latitude and longitude, or if the number of bytes entered matches the number of bytes that is pre-defined for latitude and longitudes , or if the parameters are entered according to a pre-defined format, etc. If the parameters entered by the authorized user do not conform to the pre-defined format, then the process returns to step  203 , meaning the authorized user is asked to re-enter the parameters. If valid geographical areas for function-restriction can be determined based on the parameters entered, then the process enters step  205  to determine the current geographical position of the storage device. Then, step  206  determines if the current geographical location of the storage device is within a pre-defined or user-entered area for function-restriction. If yes, then one or more storage functions of the storage device are restricted in step  207 ; if not, then the storage device assumes normal operation in step  208 . 
     In one embodiment of the invention, information exchange is achieved via data packages. For example, in step  203  above, a “set geographical location” command package may be used to prompt the authorized user to enter parameters to define the geographic areas for function-restriction. A “display information” command package may be used to display information that prompts the authorized user to enter the corresponding parameters. In step  206  above, a “result inquiry” command package may be used to check the current geographical location of the storage device, and determine if the location is within a pre-defined or user-entered geographical area for function-restriction. In steps  207  and  208 , a “return result” command package may be used to show the status of function-restriction of the storage device. 
     In another embodiment of the invention, one or more geographical areas for function-restriction may be pre-defined or set up by authorized users. When entering the parameters, the first parameter entered may be the number of geographical areas for function-restriction, so that the storage device could allocate appropriate memory for storing the number of geographical areas. Next, parameters specifying the types of function-restriction may be entered and parameters describing the geographical areas for each type of function-restriction may be specified. For example, the parameters may specify that in area one (such as the control center of a R&amp;D base), normal data read/write operations by storage devices (such as mobile hard disks) can be performed; while in area two (such as areas within the R&amp;D base other than the control center), normal data read operation is allowed, but any data write operation is prohibited; while in any other area, any data read or write operation is prohibited. 
     When determining if parameters entered by an authorized user are valid, the measurement error of the positioning module may be taken into consideration. For example, if a GPS positioning module with a positioning error of about 1 meter is used, then in order to improve the accuracy for controlling the storage device, it may be required that the radius parameter entered be larger than 1 meter. 
     The embodiments described above are just examples of implementing the invention and they shall not be used to limit the scope of the invention. Any revision or replacement within the spirit and principle of the invention shall be included in the scope of protection of this application.