Protecting digital data with automated mechanisms to disable data storage devices

Abstract

Techniques are presented for physically disabling the data storage functionality of a computer data storage device to prevent access to data stored on the device. A security breach of a device containing a component capable of communicating with a computer and digital data storable on the component can be detected. In response to the detection of the security breach, a mechanism can be activated to physically disable the component on the device. Disabling the component can be the result of the mechanism physically contacting the component in response to activation of the mechanism, and disabling the component renders the digital data stored on the component unretrievable by a computer.

Description

[Technical Field]

[0001] The present disclosure relates to protecting digital data on computer storage devices by using mechanisms to physically disable and / or disable the data storage functionality of the device in response to unauthorized physical access of the device, which may, for example, include compromising the integrity of the device.

[0002] The collection and use of data stored on computer-readable storage devices is growing exponentially. The global storage market has grown significantly to accommodate the increasing consumption of data (data stored on digital storage devices). In one example, as the number of physical storage devices increases and data is stored on the devices, the potential for unauthorized use, access, or misappropriation of the devices may increase. Such devices may contain data that is deemed valuable to one or more entities or persons.

[0003] In one example, digital storage devices may be vulnerable to unauthorized use and physical access by entities such as persons. Such physical removal or access may occur during the movement or removal of the device from a shipping, storage, or use facility. If the device is compromised, unauthorized access to data may result. In one example, deletion of data may not be sufficient to protect the data, and methods may be used to restore deleted data. In another example, encryption types may also be cracked, resulting in access to encrypted data, and such techniques for cracking encryption are being developed using techniques such as quantum computing.

[0004] In another example, current unauthorized device access warning systems may alert to unauthorized access too late. For example, physical security at a facility and evidence of tampering with electrical component racks and / or packaging that would alert to unauthorized use or intrusion may not occur in a timely manner to stop device removal. Summary of the Invention

[0005] The present disclosure recognizes shortcomings and problems associated with current techniques for preventing unauthorized access to digital data on data storage devices. The present invention provides a system and method for physically disabling the data storage functionality of a computer data storage device to prevent security breaches due to unauthorized access to data stored on the data storage device. Such disabling may include permanent disabling of device functionality, including disabling one or more components of the device.

[0006] In one example, the present invention may include a technique for physically destroying digital memory, e.g., flash memory, and other integrated circuit components of a flash memory-based disk drive. The destruction mechanism may be triggered when unauthorized removal of the disk drive is detected or, specifically, when activated by an end user. In one example, destruction of a memory device involves striking a series of elements, such as smashers, on a non-volatile memory module of a flash drive with sufficient force to shatter the module. The smashers may be made of a hardened material strong enough to destroy the packaging of the non-volatile memory module and other integrated circuit (IC) components. The smashers may be formed into a tapered shape, such as a cone or pyramid. Each smasher may be aligned directly over a target component. When activated, the smashers may be brought down on the component with sufficient force to destroy it.

[0007] In one embodiment, a pressurized chamber within the physical enclosure of the storage device supports a stiffened plate containing a suitably positioned smasher. The plate may be secured to the base of the enclosure with a series of coil springs. Pressure within the enclosure supports the plate on the circuit board, placing the coil springs in tension. When the pressure drops below a certain threshold, the spring tension is released, causing the plate to move downward onto the board, causing the smasher to penetrate and destroy the components. The tensioned material need not be a spring, but may be a material with sufficient physical properties to stretch when the enclosure is pressurized and exert a downward force when the pressure is released. When the security mechanism is activated, the pressure within the chamber is released by activating a relief valve. Initiation of the destruction sequence occurs when the storage medium is removed from its host device or when a user manually sends a destruction command or signal via software. One advantage of pressure deformation is that it can make data storage drives tamper-resistant. Any attempt to open the drive enclosure will result in the pressure being relieved and the smasher plate being released, destroying the module.

[0008] In an aspect according to the present invention, a computer-implemented method for physically disabling the data storage functionality of a computer data storage device to prevent access to data stored on the device comprises: detecting a security breach of a sealed device defining an internal chamber containing a component capable of communicating with a computer, and digital data storable in the component; responsive to detecting the security breach, activating a mechanism in communication with the internal chamber to physically disable the component in the device; and responsive to activating the mechanism, disabling the component as a result of the mechanism making physical contact with the component, wherein disabling the component renders the digital data stored in the component unretrievable by the computer.

[0009] In a related aspect, a mechanism is positioned within the sealing device to physically contact and disable the component upon activation of the mechanism.

[0010] In a related embodiment, the mechanism is positioned on the sealing device in an energized state to physically contact the component; and the mechanism is released to an unenergized state upon activation of the mechanism, disabling the component.

[0011] In a related aspect, the component includes a computer-readable data storage medium.

[0012] In a related aspect, the method further includes: receiving, at the computer, an approved activation command of the protocol sent by the user; and, in response to receiving the approved activation command, initiating activation of a mechanism for physically disabling a component in the device.

[0013] In a related aspect, disabling a component includes physically disabling a computer-readable storage medium contained in the component, wherein data stored on the computer-readable storage medium is unreadable by a computer.

[0014] In a related aspect, the mechanism includes a series of elements, the component includes a series of modules, each spatially corresponding to the series of elements, and the series of elements physically disables a corresponding series of modules in the sealing device upon activation of the mechanism.

[0015] In a related aspect, the method further comprises activating a series of mechanisms to physically disable corresponding components in the sealing device, where the mechanisms are part of a series of mechanisms and the components are part of corresponding components.

[0016] In a related aspect, the components each include a computer-readable data storage medium.

[0017] In a related aspect, detecting the security breach includes detecting a loss of air pressure in the sealing device.

[0018] In a related aspect, the mechanism includes an element for physically contacting the component.

[0019] In a related aspect, the element is constructed from a designated hardening material for disabling the component.

[0020] In a related aspect, the elements are formed with a specified shape to enhance the nulling of the component.

[0021] In a related aspect, the mechanism includes a biasing element to disable the component.

[0022] In a related aspect, the mechanism includes a coil spring to enable deactivation of the component, the coil spring being biased in an open position such that activation of the mechanism releases potential energy in the coil spring.

[0023] In another aspect according to the invention, an apparatus for physically disabling the data storage functionality of a computer data storage device to prevent access to data stored on the device may include: a sealing device defining an interior chamber containing a component capable of communicating with a computer, and digital data storable in the component; a mechanism in communication with the interior chamber, the mechanism configured to physically disable the component in the device in response to being activated by a security event; and an element of the mechanism in spaced relation to the component, the element configured to physically contact the component to disable the component and render the digital data stored in the component unretrievable by a computer in response to activation of the mechanism.

[0024] In a related embodiment, the mechanism is positioned within the sealing device in an energized state so as to make physical contact with the component using the element; and upon activation of the mechanism, the mechanism uses the element to release to an unenergized state, disabling the component.

[0025] In a related aspect, the apparatus further comprises a computer capable of communicating with the mechanism to receive an authorized activation command of the protocol sent by the user; and a mechanism that is activated to physically disable components in the device in response to receiving the authorized activation command.

[0026] In another aspect according to the invention, a system for physically disabling the data storage functionality of a computer data storage device to prevent access to data stored on the device includes: a sealing device defining an interior chamber containing a component capable of communicating with a computer, and digital data storable in the component; a mechanism in communication with the interior chamber, the mechanism responsive to being activated by a security event to physically disable the component in the device; and an element of the mechanism in spaced relation to the component, the element being positionable to responsive to activation of the mechanism to physically contact the component to disable the component and render the digital data stored in the component unretrievable by a computer.

[0027] In a related aspect, the system further comprises a computer capable of communicating with the mechanism to receive an authorized activation command of a protocol sent by a user; and a mechanism that is activated to physically disable a component in the device in response to receiving the authorized activation command. [Brief explanation of the drawings]

[0028] These and other objects, features, and advantages of the present invention will become apparent from the following detailed description of illustrative embodiments of the invention, which is to be read in conjunction with the accompanying drawings. Various features of the drawings are not to scale, as the illustrations are for clarity in facilitating understanding of the invention by those skilled in the art with respect to the detailed description. The drawings are discussed below.

[0029] [Figure 1] 1 is a schematic block diagram illustrating a system including components and functions for physically disabling an electronic device and rendering it functionally inoperable to prevent electronic access to data stored on the device, according to an embodiment of the present invention, and in one example, the system may use a computer system to initiate instructions that activate a mechanism for disabling the device.

[0030] [Figure 2] 1 is a flowchart depicting a method for physically disabling an electronic device to render it functionally inoperable to prevent electronic access to data stored on the device.

[0031] [Figure 3] 3 is another flowchart continuing from the flowchart shown in FIG. 2 according to an embodiment of the present invention.

[0032] [Figure 4] 1 is an apparatus according to an embodiment of the present invention for using a biased spring to physically disable an electronic device, rendering it functionally inoperable to prevent electronic access to data stored on the device.

[0033] [Figure 5] 1 is another apparatus for physically disabling an electronic device using a biased spring, according to an embodiment of the present invention.

[0034] [Figure 6]1 is another apparatus for physically disabling an electronic device using an actuation mechanism according to an embodiment of the present invention.

[0035] [Figure 7] FIG. 1 is a schematic block diagram depicting a computing environment, including a computer network and a cloud environment, that may incorporate in whole or in part and / or cooperate with one or more computers or devices shown in other figures and that may cooperate with the systems and methods shown in the figures, according to embodiments of the present disclosure. DETAILED DESCRIPTION OF THE INVENTION

[0036] The following description, which refers to the accompanying drawings, is provided to aid in a comprehensive understanding of exemplary embodiments of the present invention, as defined by the claims and their equivalents. While the description herein includes numerous specific details to aid in such understanding, these details should be considered merely as examples and are intended to provide clarity and conciseness. Therefore, those skilled in the art will recognize that various changes and modifications to the embodiments described herein can be made without departing from the scope of the present invention. Furthermore, descriptions of commonly known functions and configurations may be omitted.

[0037] The terms and phrases used in the following description and claims are not limited to their bibliographical meanings, but are used merely to enable a clear and consistent understanding of the present invention. Therefore, it should be apparent to those skilled in the art that the following description of exemplary embodiments of the present invention is provided for illustrative purposes only, and not for the purpose of limiting the present invention, which is defined by the appended claims and their equivalents.

[0038] The singular forms "a," "an," and "the" should be understood to include plural referents unless the context clearly dictates otherwise. Thus, for example, reference to a "component surface" includes a reference to the presence of one or more of such surfaces unless the context clearly dictates otherwise. Embodiments and Examples

[0039] The embodiments and figures of the present disclosure may have the same or similar components as other embodiments. Such figures and descriptions illustrate and describe further examples and embodiments according to the present disclosure. The embodiments of the present disclosure may include operational actions and / or procedures. Methods, such as computer-implemented methods, may include a series of operational blocks for implementing embodiments according to the present disclosure, which may include cooperation with one or more systems shown in the figures. The operational blocks of methods and systems according to the present disclosure may include techniques, mechanisms, modules, and the like for implementing the functionality of the operations according to the present disclosure. Similar components may have the same reference numerals. The components may operate in cooperation with the computer-implemented method.

[0040] It is understood that a user or end user may be a customer, and may be an individual or a group of individuals, or a business or organization.

[0041] 1 , a system 100 for physically disabling the data storage functionality of a computer data storage device to prevent access to data stored on the device may include a device 110, such as a data storage device, which may include one or more components 116, such as a computer-readable storage device. An end user 140 in a user environment 142 may electronically communicate with mechanism 114 and device 110 using a computer 144.

[0042] A method may be implemented using system 100. A computer-implemented method 200 may be used to physically disable the data storage capabilities of a computer data storage device to prevent access to data stored on the device. The method includes detecting a security breach 202 in the device. When method 200 does not detect a security breach, the method continues to monitor for a security breach in block 203 using a computer capable of initiating a disabling mechanism to render the device inoperable, or waits until detected by a physical event on the device or by monitoring the device. When method 200 detects a security breach of the device, the method continues to block 204.

[0043] The method 200 includes detecting a breach of security of a sealed device 110 housing 111 defining an inner chamber 112 containing components 116 capable of communicating with a computer 144 and / or a system (which may include a computer system) and / or a power source 124, as in block 204. Digital data can be stored in the components. For example, the sealed device can include a data storage component such as a hard drive or flash memory or other type of computer-readable memory module.

[0044] The method 200 includes, in response to detecting a security breach, activating a mechanism 114 in communication with the inner chamber to physically disable a component 116 in the device 110 , as in block 208 .

[0045] The method includes disabling the component as a result of mechanism 114 making or initiating physical contact with element 120 in response to activation of the mechanism, as in block 212. Disabling the component renders digital data stored in the component incomputably inaccessible.

[0046] The method may include, for example, a mechanism 114 having an element 120 positioned on the sealing device to physically contact and disable the component upon activation of the mechanism.

[0047] The method may include, for example, positioning a mechanism 114 within the sealing device 110, such as an element 120 of the mechanism, in an actuated state to physically contact the component 116. The mechanism, including the element, may be released to an unactuated state to disable the component upon activation of the mechanism. Accordingly, upon activation, the element disables the corresponding component, thereby destroying the component, rendering the component inoperable and / or operationally disruptive. In another example, the component includes a computer-readable data storage medium. Thus, disabling the component includes rendering data stored in the component inaccessible to a computer.

[0048] The method may further include receiving, e.g., at the computer, an authorized activation command of a protocol transmitted by a user. For example, an authorized user may transmit the activation command, thereby qualifying it as an activation command. The protocol may include, e.g., a digital key, a password, or a cryptographic command. In response to receiving the authorized activation command, the method may initiate activation of a mechanism for physically disabling components in the device.

[0049] In another example, disabling a component includes physically disabling a computer-readable storage medium contained in whole or in part in the component, where data stored on the computer-readable storage medium is unreadable by a computer.

[0050] In another example, the mechanism may include one or a series of tools, and the component may include one or a series of elements, each of which spatially corresponds to a series of elements, and which physically disables a corresponding series of elements in the sealing device in response to activation of the mechanism.

[0051] 3, in another embodiment according to the present disclosure, a method 300 continues from block 212 of the method 200 shown in FIG. 2. The method 300 includes activating a series of mechanisms to physically disable corresponding components in the sealing device, as in block 304. The mechanisms are part of a series of mechanisms and the components are part of corresponding components.

[0052] In one example, the components may each include a computer-readable data storage medium. In another example, detecting the security breach includes detecting a loss of air pressure in the sealing device. In another example, the mechanism may include an element for physical contact with the component.

[0053] In another example, the element may include a specified hardened material to disable the component. In another example, the element may be formed with a specified shape to enhance the disablement of the component. In another example, the mechanism may include a biasing element to disable the component. In another example, the mechanism may include a coil spring to disable the component, and the coil spring may be biased in an open position such that activation of the mechanism releases potential energy in the coil spring.

[0054] In one embodiment according to the present disclosure, an apparatus for physically disabling the data storage functionality of a computer data storage device to prevent access to data stored on the device may include a sealing device. The sealing device defines an interior chamber containing a component capable of communicating with a computer, and digital data may be stored in the component. A mechanism communicates with the interior chamber, and the mechanism physically disables the component in response to activation by a security event. The security event may include a security breach of the sealing device, such as opening a case and attempting or successfully removing a data storage module or device, such as a flash memory. An element of the mechanism is in spaced relation to the component and is positionable to physically contact the component in response to activation of the mechanism to disable the component and render digital data stored in the component unretrievable by a computer.

[0055] In one example, the mechanism is positioned within the sealing device in an energized state such that it makes physical contact with the component using the element; and upon activation of the mechanism, the mechanism uses the element to release to an unenergized state, disabling the component.

[0056] In another example, the apparatus may further comprise a computer capable of communicating with the mechanism to receive an authorized activation command of the protocol sent by the user; and, in response to receiving the authorized activation command, the mechanism is activated to physically disable a component in the device.

[0057] In another embodiment according to the present disclosure, a system for physically disabling a data storage function of a computer data storage device to prevent access to data stored on the device may include a sealing device defining an interior chamber containing a component capable of communicating with a computer, wherein digital data is storable in the component. A mechanism communicates with the interior chamber, the mechanism being configured to physically disable the component in response to activation by a security event. An element of the mechanism is in spaced relation to the component and is positionable to physically contact the component in response to activation of the mechanism to disable the component and render the digital data stored in the component unretrievable by a computer.

[0058] In one example, the system may further include a computer capable of communicating with the mechanism to receive an approved activation command of the protocol sent by the user; and, in response to receiving the approved activation command, the mechanism is activated to physically disable a component in the device.

[0059] Referring to FIG. 4 , according to an embodiment of the present disclosure, an apparatus 600 for physically disabling the data storage functionality of a computer data storage device to prevent access to data stored on the device is shown. The apparatus 600 includes a vertically compressible outer casing 604 and an inner chamber 608. A spring 616 is located at each end of the outer casing and is biased in an extended position. The inner chamber is pressurized, as indicated by arrow 628. The spring is held open by the pressurized inner chamber 608. When pressure is released using a release valve 624, the spring contracts and compresses the inner chamber, thereby allowing a pointed smasher 632 to physically contact and damage the memory module 620, rendering it inoperable. The release valve can be activated by an event, such as the opening of the outer casing, by manual activation by a person, or by computer instructions that electronically activate the release valve. In operation, when a security mechanism, such as a release valve, is activated, pressure in the chamber is released, such as through actuation of a relief valve, such as a release valve. When pressure drops in the chamber, the spring tension is released and the plate is pulled downward onto the substrate where the smasher penetrates and destroys the component.

[0060] Referring to FIG. 5 , according to another embodiment of the present disclosure, there is provided an apparatus 700 for physically disabling the data storage functionality of a computer data storage device to prevent access to data stored on the device. The components of apparatus 700 may be identical to apparatus 600 and are referred to by the same reference numerals. Apparatus 700 may physically disable the data storage functionality of a computer data storage device to prevent access to data stored on the device. Apparatus 700 includes an outer casing 604 and an inner chamber 608. A spring 616 is positioned within spring chamber 636 to align with each of a plurality of smashers 632, and the spring is biased in a compressed state. The inner chamber 608 is pressurized as indicated by arrow 628. The pressurized inner chamber 608 biases the spring in a compressed state. When pressure is released using the release valve 624, the spring expands and compresses the inner chamber, allowing the pointed smasher 632 to physically contact and damage the memory module 620, rendering it inoperable. The release valve may be activated by an event such as the opening of the outer casing, by manual activation by a person, or by computer instructions that electronically activate the release valve. In operation, when a security mechanism such as the release valve is activated, pressure within the chamber is released, such as through activation of a relief valve such as the release valve. When pressure drops within the chamber, the spring tension is released and the plate is pushed downward onto the substrate, where the smasher penetrates and destroys the component. In operation, when a security mechanism is activated, pressure within the chamber is released through activation of a relief valve. When the pressure is reduced, the spring is decompressed and expands downward, pushing the board downward so that the smasher penetrates and destroys the component, rendering the memory module inoperable.

[0061] Referring to FIG. 6 , according to another embodiment of the present disclosure, there is provided an apparatus 800 for physically disabling the data storage functionality of a computer data storage device to prevent access to data stored on the device. The components of apparatus 800 may be identical to those shown in apparatus 600 and apparatus 700 and are referred to by the same reference numerals. Apparatus 800 may physically disable the data storage functionality of a computer data storage device to prevent access to data stored on the device. Apparatus 800 includes an outer casing 604 and an inner chamber 608. An electromotive device 636 includes a contractible element 640 contractibly housed in a housing 637, which is secured to the housing at a securing area 638. The inner chamber 608 is pressurized, as indicated by arrow 628. The pressurized inner chamber 608 biases a spring into a compressed state. When pressure is released using release valve 624, the spring expands and compresses the inner chamber, allowing pointed smasher 632 to physically contact and damage memory module 620, rendering it inoperable. The release valve can be activated by an event such as the opening of the outer casing, by manual activation by a person, or by computer instructions that electronically activate the release valve. In operation, when a security mechanism such as the release valve is activated and pressure in the chamber is released via actuation of a relief valve, or when the pressurized inner chamber is breached and releases pressure, the pressure in the chamber is released and motor 636 can switch to an on state, beginning to turn the rotating side of a post and screw set, represented by housing 637 and element 640. As the barrel nut and screw secure together, the top plate with the smasher presses against the base containing the memory module, where the smasher penetrates and destroys the component, rendering the module inoperable. The motor continues to rotate until the smasher penetrates and destroys the component, rendering the module inoperable.

[0062] Generally, according to embodiments of the present disclosure, techniques implement the destruction of flash memory modules and other integrated circuits within a storage device. In one embodiment, a pressurized chamber holds material under tension or compression (depending on the embodiment), and when pressure is released, a series of "smashers" are forced down onto the substrate, crushing the components, rendering the device inoperable and making data recovery impossible. The pressurized chamber can be used as a security mechanism for the storage device to make the device tamper-proof. The default state of the mechanism is that an element, such as a smashing device, is forced down on the components; any opening of the drive enclosure, e.g., a breach of the device enclosure's security, such as a breach of the drive enclosure's seal, results in the enclosure pressure being relieved and the smashers being released, destroying the components.

[0063] In another embodiment, the method may utilize a motor and a post and screw set as the technique for providing the force to destroy the storage device components. When activated, the motor turns the rotating side of the post and screw set, pulling the top plate toward the base. As the two sides are squeezed together, an element such as a smasher presses against the components, destroying them and rendering them inoperable. External access to the rotating side of the post and screw set may be available so that the destruction device can be manually operated using common tools such as a screwdriver or Allen wrench. In another example, the destruction device may be manually operated by activating a computer command to initiate electronic activation of the destruction device.

[0064] Embodiments and examples according to the present disclosure include destroying data storage media using a mechanism that utilizes a pressurized chamber to hold material under tension or compression (depending on the embodiment) and, upon release of pressure, force a series of smashers down onto the substrate to decrypt the components. In one example, a technique is disclosed for physically destroying flash memory modules and other IC (integrated circuit) components in a storage device. Another example according to the present disclosure includes a self-contained apparatus that includes both a destruction mechanism and a storage device all in one. The storage device can be used directly in a system. Unauthorized removal of a memory module activates the destruction mechanism, which physically destroys the memory module, such as flash memory, and other components of the storage device. Therefore, the present disclosure includes specific methods for actually destroying the media or device. The mechanism utilizes a pressurized chamber to hold material under tension or compression (depending on the embodiment) and, upon release of pressure, force a series of smashers down onto the substrate to destroy the components. Additional Examples and Embodiments

[0065] Referring to a diagram, e.g., FIG. 1 , system 100 includes computer 144 integrated with or in communication with the device, which may communicate with other computers, such as computer 190 and / or computer 172. Computer 190 may be remote from computer 144 and may be in full or partial electronic communication with control system computer 172 as part of control system 170. The control system may include computer 172 having a computer-readable storage medium 173 that may store one or more programs 174 and a processor 175 for executing program instructions, and may also include control software 138 for managing the one or more programs. The control system may also include storage media that may include registration and / or account data 182 and a profile 183 of a user or entity (such entity may include a robot entity) as part of a user account 181. User account 181 may be stored in storage medium 180 that is part of control system 170. User account 181 may include registration and account data 182 and user profile 183. The control system may also include a computer 172 having a computer-readable storage medium 173 that may store programs or code embodied in the storage medium. The program code may be executed by a processor 175. The computer 172 may be in communication with a database 176. The control system 170 may also include a database 176 for storing all or some of the data described above, as well as other data.

[0066] The control system may also be in communication with a computer system 190, which may include a learning engine / module 192 and a knowledge corpus or database 196. The computer system 190 may also be in communication with the computer 144 and may be remote from the user computer 144. In another example, the computer system 190 may be all or part of the control system, or may be all or part of a device. A depiction of the computer system 190 and other components of the system 100 is shown in an example according to the present disclosure. One or more computer systems may be in communication with a communications network 160, such as the Internet. For example, the computer 190 and the control system 170 may be in communication with the communications network 160, and the device / computer 144 may be in communication with a local communications network that may be in communication with the communications network 160.

[0067] In one example, the new or different AI (artificial intelligence) ecosystem, or technology / communications or IT (information technology) ecosystem, can include a local communications network that can communicate with communications network 160. System 100 can include a learning engine / module 192 that can include at least a portion of a control system or that communicates with a control system to generate model 193 or a learning model. In one example, the learning model can model a workflow in a new AI or IoT (Internet of Things) ecosystem for machines / devices in the new ecosystem, which can include, for example, devices and mechanisms, where the mechanisms initiate and render components inoperable in response to detecting a security breach.

[0068] In another example, computer 172 may include processor 175 and computer-readable storage medium 173 on which may be stored an application or program 174 that may, in one example, embody all or part of the methods of the present disclosure. The application may include all or part of the instructions for implementing the methods of the present disclosure embodied in code and stored on the computer-readable storage medium.

[0069] In other embodiments and examples of the present disclosure shown in the figures, the computer may be part of a remote computer or remote server, e.g., a remote server. In another example, the computer may be part of a control system and provide performance of the functionality of the present disclosure. In another embodiment, the computer may be part of a mobile device and provide performance of the functionality of the present disclosure. In yet another embodiment, performance of some of the functionality of the present disclosure may be shared between a control system computer and a mobile device computer, e.g., the control system serves as a backend for one or more programs embodying the present disclosure, and the mobile device computer serves as a frontend for the one or more programs. The devices, e.g., mobile devices or mobile phones, may belong to one or more users and may communicate with the control system via a communications network.

[0070] The computer may be part of the mobile device or a remote computer that communicates with the mobile device. In another example, the mobile device and the remote computer may work in cooperation to implement the methods of the present disclosure using stored program code or instructions for performing the method features described herein. In one example, the device may include a computer having a storage medium that stores an application and a processor, the computer including a display. The application may incorporate program instructions for performing the features of the present disclosure using the processor. In another example, a mobile device application or computer software may have executable program instructions for a front end of the software application that incorporates features of the method of the present disclosure into the program instructions, while one or more back end programs of the software application stored on the control system computer communicate with the mobile device computer to perform other features of the method. The control system and the device (e.g., the mobile device or computer) may communicate using a communications network, such as the Internet.

[0071] Thus, in one example, a control system may communicate with a computer or device, and the computer may include an application or software. The computer or computer in a mobile device may communicate with the control system using a communications network. In another example, a control system may have a front-end computer belonging to one or more users and a back-end computer embodied as the control system.

[0072] Methods and systems according to embodiments of the present disclosure may be embodied, in whole or in part, in one or more computer programs or applications executable by a processor stored on an electronic storage medium as part of a computer on a mobile device. For example, the mobile device may communicate with a control system; in another example, a device such as a video feed device may communicate directly with the control system. Other users (not shown) may have similar mobile devices that similarly communicate with the control system. The application may be stored, in whole or in part, on a computer or on the mobile device and on a control system that communicates with the mobile device using a communications network, such as the Internet. It is contemplated that the application may access all or a portion of the program instructions to implement the methods of the present disclosure. The program or application may communicate with a remote computer system via a communications network (e.g., the Internet), access data, and collaborate with programs stored on the remote computer system. Such interactions and mechanisms are described in more detail herein and are referenced with respect to components of a computer system, such as a computer-readable storage medium, that are illustrated in one or more embodiments herein and, in this regard, are described in more detail with reference to one or more computers and systems described herein.

[0073] Also, with reference to the figures, a device may include a computer, a computer-readable storage medium, and an operating system and / or a program and / or a software application, which may include program instructions executable using a processor. Embodiments of these features are illustrated herein in the figures. A method according to the present disclosure may include a computer for implementing features of the method according to the present disclosure as part of a control system. In another example, a computer as part of a control system may function with a computer of a mobile device that cooperates with a communication system to implement features of the method according to the present disclosure. In another example, a computer for implementing features of the method may be part of a mobile device, thereby implementing the method locally.

[0074] The control system may include a storage medium for maintaining a registration of users and their devices for analysis of audio input. Such registration may include a user profile, which may include user data provided by the user for account registration and setup. In one embodiment, methods and systems incorporating the present disclosure include a control system (commonly referred to as a backend) in combination with and working with a frontend of the method and system, which may be an application. In one example, an application is stored on a device, e.g., a computer or device at the site, and can access data and additional programs in the application's backend, e.g., the control system.

[0075] A control system may also be part of a software application implementation and / or represent a software application having a front-end user portion and a back-end portion that provide functionality. In embodiments, methods and systems incorporating the present disclosure include a control system (which may generally be referred to as a back-end of a software application incorporating portions of the methods and systems of embodiments of the present application) that cooperates in combination with a front-end of a software application that incorporates other portions of the methods and systems of the present application on a device, such as may be shown in the example figures, e.g., an application stored on a computer or computer-readable storage medium of the device. The application is stored on the device or computer and can access data and additional programs in the back-end of the application, e.g., programs stored in the control system.

[0076] A program may include, in whole or in part, a series of executable steps for implementing a method of the present disclosure. A program incorporating all or a portion of a method according to the present disclosure may be stored, in whole or in part, on a computer-readable storage medium on a control system, or in whole or in part on a computer or device. It is contemplated that the control system may not only store user profiles, but may also, in one embodiment, interact with a website for viewing on a display of a device, such as a mobile device, or in another example, the Internet, to receive user input related to the method and system of the present disclosure. While the illustrated embodiment shows one or more profiles, it is understood that the method may include multiple profiles, users, registrations, etc. It is contemplated that multiple users or groups of users may register and provide profiles with the control system for use by the method and system of the present disclosure.

[0077] In one example, the received data may include data in a knowledge corpus and a history database, which may be populated with historical data collected from, for example, sensors, robotic devices, or other machines or devices.

[0078] With reference to one or more embodiments in the figures, the computer or device may also be referred to as a user device or administrator device and includes a computer having a processor and a storage medium on which an application may be stored. The application may embody features of the disclosed methods as instructions. A user may connect to a learning engine using the device. The device includes a computer and a display or monitor. The application may embody the disclosed methods and may be stored on a computer-readable storage medium. The device may further include a processor for executing the application / software. The device may communicate with a communications network, e.g., the Internet.

[0079] It is understood that user device refers to such devices that may include mobile devices, smart devices, laptop computers, etc., and similar devices that may belong to other users.

[0080] Additionally, methods and systems according to embodiments of the present disclosure may be described in terms of functional systems depicted by functional block diagrams. Methods and systems may include components and operations for embodiments according to the present disclosure, and are used herein for reference when describing operational steps of methods and systems of the present disclosure. Additionally, functional systems according to embodiments of the present disclosure depict functional operations indicative of the embodiments described herein. Further Examples and Embodiments

[0081] The methods and systems of the present disclosure may include a series of operational blocks for implementing one or more embodiments according to the present disclosure. The method shown in a figure may be another exemplary embodiment that may include aspects / operations shown and previously described in another figure, and may be reintroduced in another example. As such, the operational blocks and system components shown in one or more of the figures may be similar to the operational blocks and system components in other figures. The variety of operational blocks and system components depicts exemplary embodiments and aspects according to the present disclosure. For example, the method shown is intended as an exemplary embodiment that may include aspects / operations shown and previously described in this disclosure, and in one example, continues from a previous method shown in another flowchart.

[0082] Features shown in some of the drawings, such as block diagrams, are understood to be functional representations of features of the present disclosure, which are shown in embodiments of the systems and methods of the present disclosure for illustrative purposes to clarify the functionality of the features of the present disclosure. Further discussion of examples and embodiments

[0083] The computer-implemented methods disclosed herein may include computer-based models. The models may be generated using a learning engine or modeling modules of a computer system, which may be all or part of an artificial intelligence (AI) system in communication with a computer and / or control system. Such a computer system may include or be in communication with a knowledge corpus or history database. In one example, an acceptable model may include a model that meets specified parameters. In another example, an acceptable model may be a model that has undergone multiple iterations of the model. For example, as represented by an action block in a flowchart, when a model is not acceptable, the method may return to the previous action or proceed as indicated.

[0084] In one example, according to the present disclosure, a method may use a computer to generate a model that may include a sequence of actions. The model may be generated using a learning engine or by modeling a module of a computer system, which may be all or part of an artificial intelligence (AI) system in communication with the computer and / or control system. Such a computer system may include or be in communication with a knowledge corpus or history database.

[0085] A model may be generated using a learning engine or modeling modules of a computer system, which may be all or part of an artificial intelligence (AI) system in communication with a computer and / or control system. Such a computer system may include or be in communication with a knowledge corpus or history database. A model may also be generated by an AI system, such as the output of at least a portion of an AI system analysis using machine learning. Additional Embodiments and Examples

[0086] For example, account data, including profile data and data about a user, personal or otherwise, may be collected and stored, for example, at a control system. It is understood that such data collection is done with the user's knowledge and consent and stored in a manner that protects privacy, as discussed in more detail below. Such data may include personal data and data about personal items.

[0087] In one example, a user may register an account with a user profile on the control system. For example, data can be collected using the techniques described above, such as with a camera, and the data can be uploaded to the user profile by the user. A user may include, for example, a corporate entity, or a business division, or a home owner, or any end user, human operator, or robotic device, or other business personnel.

[0088] With respect to the collection of data pertaining to the present disclosure, such uploading or creation of a profile is voluntary by one or more users and is therefore initiated by and with user approval, thereby allowing users to opt in to establishing an account with a profile in accordance with the present disclosure. Similarly, data received or entered or received as input by the system is voluntary by one or more users and is therefore initiated by and with user approval, thereby allowing users to opt in to entering data in accordance with the present disclosure. Such user approval also includes the user's option to cancel such profile or account and / or data entry, thereby opting out of communication and data capture at the user's discretion. Furthermore, it is understood that any data stored or collected is intended to be securely stored, unavailable without user approval, and not available to the public and / or unauthorized users. It is understood that such stored data is deleted upon user request, and in a secure manner. It is also understood that any use of such stored data, in accordance with this disclosure, is only with the user's authorization and consent.

[0089] In one or more embodiments of the present invention, a user may opt in or register with a control system, voluntarily providing data and / or information with the user's consent and authorization, and the data may be stored and used in one or more methods of the present disclosure. The user may also register one or more user electronic devices for use with one or more methods and systems according to the present disclosure. As part of registration, the user may also identify and authorize access to one or more activities or other systems (e.g., audio and / or video systems). Such opt-in to registration and authorization for data collection and / or storage is voluntary, and the user may request deletion of data (including profile and / or profile data), unsubscription, and / or opt-out of any registration. Such opt-out is understood to include disposal of all data in a secure manner. The user interface may also allow a user or individual to remove all of their own historical data.

[0090] The description of various embodiments of the present invention has been presented for illustrative purposes and is not intended to be exhaustive or limited to the disclosed embodiments. Similarly, examples of features or functions of embodiments of the present disclosure described herein, whether used to describe a particular embodiment or listed as examples, are not intended to limit the embodiments of the present disclosure described herein or to limit the disclosure to the examples described herein. Such examples are intended to be examples or illustrative and not exhaustive. Numerous modifications and variations will be apparent to those skilled in the art without departing from the scope of the described embodiments. The terminology used herein has been selected to best explain the principles, practical applications, or technical improvements to technology found in the marketplace of the embodiments, or to enable others skilled in the art to understand the embodiments disclosed herein. Further Examples and Embodiments

[0091] Various aspects of the present disclosure are described through text, flowcharts, block diagrams of computer systems, and / or block diagrams of machine logic included in embodiments of a computer program product (CPP). For any flowchart, depending on the technology involved, operations may be performed in an order different from that shown in a given flowchart. For example, again depending on the technology involved, two operations shown in successive flowchart blocks may be performed in the reverse order, as a single integrated step, simultaneously, or in an at least partially overlapping manner.

[0092] A computer program product embodiment ("CPP embodiment" or "CPP") is a term used in this disclosure to describe any set of one or more storage media (also referred to as "media"), collectively contained in one or more storage devices, that collectively contain machine-readable code corresponding to instructions and / or data for performing the computer operations specified in a given CPP claim. A "storage device" is any tangible device that can hold and store instructions for use by a computer processor. The computer-readable storage medium may be, but is not limited to, an electronic storage medium, a magnetic storage medium, an optical storage medium, an electromagnetic storage medium, a semiconductor storage medium, a mechanical storage medium, or any suitable combination of the foregoing. Some known types of storage devices that include these media include diskettes, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM or flash memory), static random access memory (SRAM), compact disc read-only memory (CD-ROM), digital versatile disk (DVD), memory stick, floppy disk, mechanically encoded device (such as pits / lands formed on a major surface of a punch card or disk), or any suitable combination of the foregoing. Computer-readable storage media, as the term is used in this disclosure, is not to be construed as storage in the form of a transitory signal per se, such as radio waves or other freely propagating electromagnetic waves, electromagnetic waves propagating through a waveguide, light pulses passing through fiber optic cables, electrical signals communicated through wires, and / or other transmission media. As will be appreciated by those skilled in the art, data is typically moved at some infrequent time during the normal operation of a storage device, such as during access, defragmentation, or garbage collection, but this does not make the storage device transient because the data is not transient while it is stored.

[0093] 7, computing environment 1000 includes an example environment for the execution of at least some of the computer code associated with performing the methods of the invention, such as detecting an event, such as breaching a pressurized housing, and activating a device or mechanism to render a module inoperable, such as damaging a memory module and rendering it inoperable 1200. In addition to block 1200, computing environment 1000 includes, for example, a computer 1101, a wide area network (WAN) 1102, an end user device (EUD) 1103, a remote server 1104, a public cloud 1105, and a private cloud 1106. In this embodiment, computer 1101 includes a set of processors 1110 (including processing circuitry 1120 and cache 1121), a communications fabric 1111, volatile memory 1112, persistent storage 1113 (including operating system 1122 and block 1200, as identified above), a set of peripheral devices 1114 (including a set of user interface (UI) devices 1123, storage 1124, and a set of Internet of Things (IoT) sensors 1125), and a network module 1115. Remote server 1104 includes a remote database 1130. Public cloud 1105 includes a gateway 1140, a cloud orchestration module 1141, a set of host physical machines 1142, a set of virtual machines 1143, and a set of containers 1144.

[0094] Computer 1101 may take the form of a desktop computer, a laptop computer, a tablet computer, a smartphone, a smartwatch or other wearable computer, a mainframe computer, a quantum computer, or any other form of computer or mobile device now known or later developed that is capable of executing programs, accessing a network, or querying a database, such as remote database 1130. As is well understood and in accordance with the art of computer technology, execution of a computer-implemented method may be distributed among multiple computers and / or among multiple locations. However, in this presentation of computing environment 1100, to keep the presentation as simple as possible, the detailed discussion focuses on a single computer, specifically computer 1101. Computer 1101 may be located in a cloud, even though it is not depicted in the cloud of FIG. 7 . However, computer 1101 is not required to be in a cloud unless expressly indicated.

[0095] The processor set 1110 includes one or more computer processors of any type now known or later developed. The processing circuitry 1120 may be distributed across multiple packages, e.g., multiple tailored integrated circuit chips. The processing circuitry 1120 may implement multiple processor threads and / or multiple processor cores. The cache 1121 is memory located within the processor chip package and is typically used for data or code that should be available for fast access by threads or cores executing on the processor set 1110. Cache memory is typically organized into multiple levels depending on relative proximity to the processing circuitry. Alternatively, some or all of the cache for a processor set may be located “off-chip.” In some computing environments, the processor set 1110 may be designed for operation with qubits and for performing quantum computing.

[0096] Computer-readable program instructions are typically loaded onto the computer 1101 to cause the processor set 1110 of the computer 1101 to perform a series of operational steps, thereby realizing a computer-implemented method, such that the instructions so executed instantiate the method specified in the flowcharts and / or descriptions of the computer-implemented method contained herein (collectively referred to as the "invention methods"). These computer-readable program instructions are stored in various types of computer-readable storage media, such as cache 1121 and other storage media described below. The program instructions and associated data are accessed by the processor set 1110 to control and direct the execution of the inventive methods. In the computing environment 1100, at least some of the instructions for performing the inventive methods may be stored in persistent storage 1113 in block 1200.

[0097] Communications fabric 1111 is the signal-conducting pathway that allows various components of computer 1101 to communicate with one another. Typically, this fabric is made up of switches and conductive pathways, such as those that make up buses, bridges, physical input / output ports, and the like. Other types of signal communication pathways, such as fiber optic and / or wireless communication pathways, may also be used.

[0098] Volatile memory 1112 may be any type of volatile memory now known or later developed. Examples include dynamic random access memory (RAM) or static RAM. Typically, volatile memory is characterized by random access, although this is not required unless expressly stated. In computer 1101, volatile memory 1112 is located in a single package and internal to computer 1101; however, alternatively or additionally, volatile memory may be distributed across multiple packages and / or located external to computer 1101.

[0099] Persistent storage 1113 is any form of non-volatile storage for a computer, now known or later developed. The non-volatility of this storage means that stored data remains regardless of whether power is supplied to computer 1101 and / or to persistent storage 1113 directly. Persistent storage 1113 may be read-only memory (ROM), but typically is at least a portion of persistent storage that allows data to be written, data to be erased, and data to be rewritten. Some well-known forms of persistent storage include magnetic disks and solid-state storage devices. Operating system 1122 can take several forms, such as various known proprietary operating systems or open-source Portable Operating System Interface-type operating systems that utilize a kernel. The code contained in block 1200 typically includes at least some of the computer code involved in performing the methods of the present invention.

[0100] Peripheral device set 1114 includes a set of peripheral devices of computer 1101. Data communication connections between peripheral devices and other components of computer 1101 may be implemented in various manners, such as Bluetooth® connections, near field communication (NFC) connections, connections via cables (such as Universal Serial Bus (USB)-type cables), insertion-type connections (e.g., Secure Digital (SD) cards), connections via local area communication networks, and even connections over wide area networks such as the Internet. In various embodiments, UI device set 1123 may include components such as display screens, speakers, microphones, wearable devices (such as goggles and smartwatches), keyboards, mice, printers, touchpads, game controllers, and haptic devices. Storage 1124 may be external storage, such as an external hard drive, or insertable storage, such as an SD card. Storage 1124 may be persistent and / or volatile. In some embodiments, storage 1124 may take the form of a quantum computing storage device for storing data in the form of qubits. In embodiments where computer 1101 is required to have a large amount of storage (e.g., computer 1101 stores and manages a large database locally), this storage may be provided by a peripheral storage device designed to store very large amounts of data, such as a storage area network (SAN) shared by multiple geographically distributed computers. IoT sensor set 1125 consists of sensors that can be used in Internet of Things applications. For example, one sensor may be a thermometer and another sensor may be a motion detector.

[0101] The network module 1115 is a collection of computer software, hardware, and firmware that enables the computer 1101 to communicate with other computers over the WAN 1102. The network module 1115 may include hardware such as a modem or Wi-Fi® signal transceiver, software for packetizing and / or de-packetizing data for communication network transmission, and / or web browser software for communicating data over the Internet. In some embodiments, the network control and network forwarding functions of the network module 1115 are performed on the same physical hardware device. In other embodiments (e.g., embodiments utilizing Software-Defined Networking (SDN)), the control and forwarding functions of the network module 1115 are performed on physically separate devices, such that the control function manages multiple different network hardware devices. Computer-readable program instructions for carrying out the methods of the present invention may be downloaded to the computer 1101, typically from an external computer or external storage device, through a network adapter card or network interface included in the network module 1115.

[0102] WAN 1102 is any wide area network (e.g., the Internet) capable of communicating computer data over non-local distances using any technology for communicating computer data now known or later developed. In some embodiments, a WAN may be replaced and / or supplemented by a local area network (LAN) designed to communicate data between devices located in a local area, such as a Wi-Fi network. WANs and / or LANs typically include copper transmission cables, optical fiber transmissions, wireless transmissions, and computer hardware such as routers, firewalls, switches, gateway computers, and edge servers.

[0103] End-user device (EUD) 1103 is any computer system used and controlled by an end user (e.g., a customer of the enterprise operating computer 1101) and may take any of the forms described above in connection with computer 1101. EUD 1103 typically receives useful and useful data from the operation of computer 1101. For example, in a hypothetical case where computer 1101 is designed to provide recommendations to the end user, the recommendations would typically be communicated from computer 1101's network module 1115 over WAN 1102 to EUD 1103. In this manner, EUD 1103 can display or otherwise present the recommendations to the end user. In some embodiments, EUD 1103 may be a client device, such as a thin client, a heavy client, a mainframe computer, or a desktop computer.

[0104] Remote server 1104 is any computer system that provides at least some data and / or functionality to computer 1101. Remote server 1104 may be controlled and used by the same entity that operates computer 1101. Remote server 1104 represents a machine that collects and stores useful and useful data for use by other computers, such as computer 1101. For example, in the hypothetical case where computer 1101 is designed and programmed to provide recommendations based on historical data, then this historical data may be provided to computer 1101 from remote database 1130 of remote server 1104.

[0105] A public cloud 1105 is any computer system available for use by multiple entities that provides on-demand availability of computer system resources and / or other computer capacity, particularly data storage (cloud storage) and computing capacity, without direct active management by users. Cloud computing typically leverages resource sharing to achieve coherence and economies of scale. Direct active management of the computing resources of the public cloud 1105 is performed by computer hardware and / or software in a cloud orchestration module 1141. The computing resources provided by the public cloud 1105 are typically implemented by virtual computing environments running on various computers comprising a host physical machine set 1142, which is the universe of physical computers within and / or available in the public cloud 1105. A virtual computing environment (VCE) typically takes the form of virtual machines from a virtual machine set 1143 and / or containers from a container set 1144. It is understood that these VCEs may be stored as images and transferred among and between various physical machine hosts either as images or after instantiation of the VCE. Cloud orchestration module 1141 manages the transfer and storage of images, deploys new instantiations of VCEs, and manages active instantiations of VCE deployments. Gateway 1140 is a collection of computer software, hardware, and firmware that enables communication over WAN 1102 to public cloud 1105.

[0106] Some further description of virtualized computing environments (VCEs) is now provided. A VCE can be stored as an "image." A new, active instance of a VCE can be instantiated from the image. Two well-known types of VCEs are virtual machines and containers. A container is a VCE that uses operating system-level virtualization. This refers to a feature of an operating system in which the kernel allows the existence of multiple isolated user space instances, called containers. These isolated user space instances typically behave as actual computers from the perspective of programs running within them. A computer program running on a typical operating system can utilize all of the computer's resources, such as connected devices, files and folders, network shares, CPU power, and quantifiable hardware capabilities. However, a program running inside a container can only use the contents of the container and the devices assigned to the container, a feature known as containerization.

[0107] Private cloud 1106 is similar to public cloud 1105, except that the computing resources are available only for use by a single enterprise. While private cloud 1106 is shown in communication with WAN 1102, in other embodiments, the private cloud may be entirely disconnected from the Internet and accessible only through a local / private network. A hybrid cloud is a composite of multiple clouds of different types (e.g., private, community, or public cloud types), often each implemented by a different vendor. While each of the multiple clouds remains a separate, discrete entity, the larger hybrid cloud architecture is bound together by standardized or proprietary technologies that enable orchestration, management, and / or data / application portability between the constituent clouds. In this embodiment, both public cloud 1105 and private cloud 1106 are part of a larger hybrid cloud.

[0108] It is also understood that one or more computers or computer systems shown in the figures may include all or a portion of the computing environment 1000 and its components, and / or in one example, one or more computers may be in communication with all or a portion of the computing environment 1000 and its components as remote computer systems to accomplish the computer functionality described in this disclosure.

Claims

1. 1. A computer-implemented method for physically disabling data storage functionality of a computer data storage device to prevent access to data stored on the computer data storage device, comprising: detecting a security breach of a sealed device defining an interior chamber containing a component capable of communicating with a computer and digital data storable in said component; In response to the detection of the security breach, activating a mechanism in communication with the inner chamber to physically disable the component in the computer data storage device; and in response to said activation of said mechanism, disabling said component as a result of said mechanism making physical contact with said component, said disabling of said component rendering digital data stored in said component inaccessible to a computer; A method for providing

2. The method of claim 1 , wherein the mechanism is positioned on the sealing device to physically contact and disable the component in response to the activation of the mechanism.

3. the mechanism is positioned on the sealing device in a biased state for physical contact with the component; the mechanism is released to an unenergized state in response to the activation of the mechanism, disabling the component. The method of claim 1.

4. The method of claim 1 , wherein the component comprises a computer-readable data storage medium.

5. receiving, at the computer, an approved activation command for the protocol sent by the user; and In response to the receipt of the authorized activation command, initiating the activation of the mechanism to physically disable the component in the computer data storage device. The method of claim 1 further comprising:

6. 10. The method of claim 1, wherein the disabling of the component comprises physically disabling a computer-readable storage medium included in the component, wherein data stored on the computer-readable storage medium is unreadable by a computer.

7. 2. The method of claim 1, wherein the mechanism includes a series of elements, the component includes a series of modules, the series of elements spatially corresponding to each other, and the series of elements physically disable the corresponding series of modules in the sealing device in response to the activation of the mechanism.

8. 10. The method of claim 1, further comprising activating a series of mechanisms to physically disable a corresponding component in the sealing device, wherein the mechanism is part of the series of mechanisms and the component is part of the corresponding component.

9. The method of claim 1 , wherein the components each comprise a computer-readable data storage medium.

10. The method of claim 1 , wherein detecting the security breach comprises detecting a loss of air pressure in the sealing device.

11. The method of claim 1 , wherein the mechanism includes an element for physical contact with the component.

12. The method of claim 11 , wherein the element is constructed from a designated hardening material to disable the component.

13. The method of claim 11 , wherein the element is formed in a specified shape to enhance the disabling of the component.

14. The method of claim 1 , wherein the mechanism includes a biasing element for disabling the component.

15. 10. The method of claim 1, wherein the mechanism includes a coil spring to enable deactivation of the component, the coil spring being biased in an open position such that activation of the mechanism releases potential energy in the coil spring.

16. 1. An apparatus for physically disabling the data storage functionality of a computer data storage device to prevent access to data stored on said computer data storage device, comprising: a sealed device defining an interior chamber containing a component capable of communicating with a computer, and digital data storable on said component; a mechanism in communication with the inner chamber, the mechanism being activated by a security event to physically disable the components in the computer data storage device; and an element of said mechanism in spaced relation to said component and configurable to, in response to said activation of said mechanism, physically contact said component to disable said component and render digital data stored in said component incomputably inaccessible; An apparatus comprising:

17. the mechanism is positioned within the sealing device in a biased state so as to make physical contact with the component using the element; the mechanism uses the element to release into an unenergized state and disable the component in response to the activation of the mechanism.

17. The apparatus of claim 16.

18. a computer capable of communicating with the mechanism to receive authorized activation commands for protocols sent by a user; and the mechanism activated to physically disable the component in the computer data storage device in response to the receipt of the authorized activation command. The apparatus of claim 16 further comprising:

19. 1. A system for physically disabling a data storage function of a computer data storage device to prevent access to data stored on the computer data storage device, comprising: a sealed device defining an interior chamber containing a component capable of communicating with a computer, and digital data storable on said component; a mechanism in communication with the inner chamber, the mechanism being activated by a security event to physically disable the components in the computer data storage device; and an element of said mechanism in spaced relation to said component and configurable to, in response to said activation of said mechanism, physically contact said component to disable said component and render digital data stored in said component incomputably inaccessible; A system comprising:

20. a computer capable of communicating with the mechanism to receive authorized activation commands for protocols sent by a user; and the mechanism activated to physically disable the component in the computer data storage device in response to the receipt of the authorized activation command.

20. The system of claim 19, further comprising:

Images