Method for preventing storage of prohibited data on an Ad Hoc moving data network

A computer-implemented method comprising:

• determining that a first balloon has moved from outside of a first legally-defined geographic area to a location within the first legally-defined geographic area, wherein the first balloon is part of a balloon network including a plurality of moveable balloons that provide service to client devices in a plurality of legally-defined geographic areas;
• in response to determining that the first balloon has moved to the location within the first legally-defined geographic area, the first balloon accessing:
• (i) a first list of geographically-prohibited data that identifies data that is restricted from being cached in a second legally-defined geographic area, and (ii) a second list of geographically-prohibited data that identifies data that is restricted from being cached in a third legally-defined geographic area;
• while the first balloon is at the location within the first legally-defined geographic area, the first balloon receiving data;
• using the first list of geographically-prohibited data and the second list of geographically-prohibited data as a basis for making a determination that the received data is geographically-prohibited data in the second legally-defined geographic area but not geographically-prohibited data in the third legally-defined geographic area;
• and
• based on the determination that the received data is geographically-prohibited data in the second legally-defined geographic area but not geographically-prohibited data in the third legally-defined geographic area, (i) identifying a second balloon of the plurality of balloons that is at a location within the third legally-defined geographic area, and (ii) routing the received data towards the second balloon.

A non-transitory computer readable medium storing instructions that, when executed by one or more processors in a computing device, cause that computing device to perform functions, the functions comprising:

• while a first balloon is at a location within a first legally-defined geographic area, accessing a first list of geographically-prohibited data that identifies data that is restricted from being cached by the first balloon while the first balloon is at the location within the first legally-defined geographic area, wherein the first balloon is part of a balloon network including a plurality of moveable balloons that provide service to client devices in a plurality of legally-defined geographic areas;
• determining that the first balloon has moved from the first legally-defined geographic area to a location within a second legally-defined geographic area;
• in response to determining that the first balloon has moved to the location within the second legally-defined geographic area, the first balloon refraining from accessing the first list of geographically-prohibited data and instead accessing a second list of geographically-prohibited data that identifies data that is restricted from being cached by the first balloon while the first balloon is at the location within the second legally-defined geographic area, wherein the second list of geographically-prohibited data further indicates geographically-prohibited data for each of one or more additional legally-defined geographic areas;
• while the first balloon is at the location within the second legally-defined geographic area, the first balloon receiving data;
• using the second list of geographically-prohibited data to determine that the received data is geographically-prohibited data in the second legally-defined geographic area;
• and
• responsive to a determination that the received data is geographically-prohibited data in the second legally-defined geographic area, (i) identifying a second balloon of the plurality of balloons that is at a location outside of the second legally-defined geographic area, (ii) using the second list of geographically-prohibited data to determine that the received data is not geographically-prohibited at the location of the second balloon, (iii) routing the received data to the second balloon, and (iv) refraining from caching the received data in data storage at the first balloon while the first balloon is at the location within the second legally-defined geographic area.

A balloon comprising:

• a location determination system configured to determine a location of the balloon;
• a communication interface configured to receive data;
• and
• a control system configured to:
• while the balloon is at a location within a first legally-defined geographic area, access a first list of geographically-prohibited data that identifies data that is restricted from being cached by the first balloon while the first balloon is at the location within the first legally-defined geographic area, wherein the first balloon is part of a balloon network including a plurality of moveable balloons that provide service to client devices in a plurality of legally-defined geographic areas;
• determine that the location of the balloon has moved from the first legally-defined geographic area to a location within a second legally-defined geographic area;
• in response to determining that the balloon has moved to the location within the second legally-defined geographic area, refrain from accessing the first list of geographically-prohibited data and instead access a second list of geographically-prohibited data that identifies data that is restricted from being cached by the balloon while the balloon is at the location within the second legally-defined geographic area, wherein the second list of geographically-prohibited data further indicates geographically-prohibited data for each of one or more additional legally-defined geographic areas;
• in response to receiving data via the communication interface while the balloon is at the location within the second legally-defined geographic area, use the second list of geographically-prohibited data to determine that the received data is geographically-prohibited data in the second legally-defined geographic area;
• and
• responsive to a determination that the received data is geographically-prohibited data in the second legally-defined geographic area, (i) identify a second balloon of the plurality of balloons that is at a location outside of the second legally-defined geographic area, (ii) use the second list of geographically-prohibited data to determine that the received data is not geographically-prohibited at the location of the second balloon, (iii) route the received data to the second balloon, and (iv) refrain from caching the received data in data storage at the first balloon while the first balloon is at the location within the second legally-defined geographic area.

A balloon comprising:

• a location determination system configured to determine a location of the balloon;
• a communication interface configured to receive data;
• and
• a control system configured to:
• determine that the location of the balloon has moved from outside of a first legally-defined geographic area to a location within the first legally-defined geographic area, wherein the balloon is part of a balloon network including a plurality of moveable balloons that provide service to client devices in a plurality of legally-defined geographic areas;
• in response to determining that the balloon has moved to the location within the first legally-defined geographic area, access:
• (i) a first list of geographically-prohibited data that identifies data that is restricted from being cached in a second legally-defined geographic area, and (ii) a second list of geographically-prohibited data that identifies data that is restricted from being cached in a third legally-defined geographic area;
• in response to receiving data via the communication interface while the balloon is at the location within the first legally-defined geographic area, use the first list of geographically-prohibited data and the second list of geographically-prohibited data as a basis for making a determination as to whether or not the received data is geographically-prohibited data in the second legally-defined geographic area but not geographically-prohibited data in the third legally-defined geographic area;
• and
• based on the determination that the received data is geographically-prohibited data in the second legally-defined geographic area but not geographically-prohibited data in the third legally-defined geographic area, (i) identify a second balloon of the plurality of balloons that is at a location within the third legally-defined geographic area, and (ii) route the received data towards the second balloon.