Process and detachable device for using and managing encryption keys

Abstract

A data storage system stores at least one data element on a data storage device in a protected manner. After each of a plurality of random and irregular intervals, the data storage system renders the data element inaccessible, and requires entry of at least one password on a computer system connected to the data storage system in order to thereby render accessible the data element again.

What is claimed is: 
     
         1 . A data storage system comprising a data storage device, the data storage device including data storage hardware, the data storage system being configured to operate in association with at least one password entered into a computer system connected to the data storage system, at least one data element which is stored in the data storage device being rendered accessible upon entry of the at least one password, the data storage system being configured to require entry of the password into the computer system after each of a plurality of random and irregular intervals. 
     
     
         2 . The data storage system recited in  claim 1 , wherein the data storage device is detachable from the computer system. 
     
     
         3 . The data storage system recited in  claim 2 , further comprising an alarm device configured to communicate with the data storage device, the alarm device being configured to initiate an alarm event if a separation distance between the alarm device and the data storage device is determined to be at least a threshold distance. 
     
     
         4 . The data storage system recited in  claim 3 , wherein the alarm event includes generating at least one of a sound, a vibration, and a flashing light. 
     
     
         5 . The data storage system recited in  claim 3 , wherein the alarm event includes deletion of the at least one data element stored in the data storage system. 
     
     
         6 . The data storage system recited in  claim 1 , wherein the data storage system is configured to operate in association with a cryptography module configured to decrypt the at least one data element and thereby render it accessible. 
     
     
         7 . The data storage system recited in  claim 1 , wherein the data storage system is configured to require entry of one of a plurality of passwords into the computer system after each of the plurality of random and irregular intervals, the password for a present interval being different from a password for an interval in proximity to the present interval. 
     
     
         8 . The data storage system recited in  claim 7 , wherein at least one of the plurality of passwords is in the form of alphanumeric indicia. 
     
     
         9 . The data storage system recited in  claim 7 , wherein at least one of the plurality of passwords is in the form of biometric indicia. 
     
     
         10 . The data storage system recited in  claim 7 , wherein at least one of the plurality of passwords is in the form of indicia derived from a swipe gesture. 
     
     
         11 . A method for storing data on a data storage system, the data storage system including a data storage device, the method comprising:
 requiring entry of at least one password on a computer system connected to the data storage system after each of a plurality of random and irregular intervals;   upon entry of the at least one password, rendering accessible at least one data element which is stored in the data storage device; and   upon completion of each of the plurality of random and irregular intervals, rendering inaccessible the at least one data element.   
     
     
         12 . The method recited in  claim 11 , wherein the data storage device is detachable from the computer system. 
     
     
         13 . The method recited in  claim 12 , further comprising initiating an alarm event if a separation distance between an alarm device and the data storage device is determined to be at least a threshold distance. 
     
     
         14 . The method recited in  claim 13 , wherein the alarm event includes generating at least one of a sound, a vibration, and a flashing light. 
     
     
         15 . The method recited in  claim 13 , wherein the alarm event includes deletion of the at least one data element stored in the data storage system. 
     
     
         16 . The method recited in  claim 11 , wherein the at least one data element is rendered accessible by a cryptography module decrypting the at least one data element. 
     
     
         17 . The method recited in  claim 11 , wherein the entry of the password requires one of a plurality of passwords into the computer system after each of the plurality of random and irregular intervals, the password for a present interval being different from a password for an interval in proximity to the present interval. 
     
     
         18 . The method recited in  claim 16 , wherein at least one of the plurality of passwords is in the form of alphanumeric indicia. 
     
     
         19 . The method recited in  claim 16 , wherein at least one of the plurality of passwords is in the form of biometric indicia. 
     
     
         20 . The method recited in  claim 16 , wherein at least one of the plurality of passwords is in the form of indicia derived from a swipe gesture.