US 12,437,040 B2
Secure access device with multiple authentication mechanisms
Lev M. Bolotin, Kirkland, WA (US); Alex Lemelev, Maple (CA); and Marc Singer, Seattle, WA (US)
Assigned to ClevX, LLC, Kirkland, WA (US)
Filed by ClevX, LLC, Kirkland, WA (US)
Filed on Feb. 28, 2024, as Appl. No. 18/590,205.
Application 18/590,205 is a continuation of application No. 17/445,540, filed on Aug. 20, 2021, granted, now 11,971,967.
Application 17/445,540 is a continuation of application No. 16/915,641, filed on Jun. 29, 2020, granted, now 11,151,231.
Application 16/915,641 is a continuation of application No. 16/021,547, filed on Jun. 28, 2018, granted, now 10,754,992.
Application 16/021,547 is a continuation of application No. 14/987,749, filed on Jan. 4, 2016, granted, now 10,181,055.
Application 14/987,749 is a continuation in part of application No. 12/680,742, granted, now 9,262,611, previously published as PCT/US2008/077766, filed on Sep. 26, 2008.
Claims priority of provisional application 60/975,814, filed on Sep. 27, 2007.
Prior Publication US 2024/0202297 A1, Jun. 20, 2024
This patent is subject to a terminal disclaimer.
Int. Cl. G06F 21/31 (2013.01); G06F 21/62 (2013.01); G06F 21/78 (2013.01); H04L 9/40 (2022.01); H04W 12/06 (2021.01); H04W 12/069 (2021.01)
CPC G06F 21/31 (2013.01) [G06F 21/6218 (2013.01); G06F 21/78 (2013.01); H04L 63/083 (2013.01); H04W 12/06 (2013.01); H04W 12/068 (2021.01); H04W 12/069 (2021.01)] 15 Claims
OG exemplary drawing
 
1. A secure access device comprising:
a memory;
an interface controller coupled to the memory and for coupling to an external data channel, the interface controller configured to disable access to the memory via the external data channel until a user is authenticated;
an encryption engine in the interface controller for encrypting data to be stored in the memory;
a wireless transceiver for wireless communication outside the external data channel; and
an authentication subsystem configured to receive user authentication information via the wireless transceiver, the authentication subsystem further configured to send an unlock command to the interface controller to enable access to the memory via the external data channel after authenticating the user authentication information;
wherein, the encryption engine, while the external data channel is unlocked, performs operations comprising:
encrypting, with an encryption key, data received through the external data channel before storing the encrypted data in the memory; and
decrypting, with the encryption key, data read from the memory before sending the decrypted data through the external data channel.