Systems and methods for diffracted data retrieval

• US 10,165,050 B2
• Filed: 12/15/2015
• Issued: 12/25/2018
• Est. Priority Date: 12/15/2014
• Status: Active Grant

• Current Assignee: UBIQ Security Incorporated
• Original Assignee: FHOOSH, Inc.
• Inventors: Iasi, Anthony, Eigner, Linda, Eigner, William, Kahle, Charles, Tobias, Eric
• Primary Examiner(s): Abu Roumi, Mahran Y
• Application Number:
  US14/970,466
• Publication Number:
  US 20160173605A1
• Time in Patent Office: 1,106 Days
• Field of Search: 709204
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]

Abstract

A system for diffracted data retrieval (DDR) comprises a plurality of storage locations. The system for DDR also comprises a client device configured to: transmit a request to retrieve the data object, wherein the data object comprises a plurality of segments stored across the plurality of storage locations; receive a sequencing key in response to the request to retrieve the data object; and retrieve the plurality of segments of the data object from the plurality of storage locations based at least in part on an order indicated by the sequencing key. The system of DDR further comprises an initiation server configured to: receive the request from the client device to retrieve the data object; generate the sequencing key in response to the request; transmit the sequencing key to the client device; and monitor a progress of the retrieval of the data object by the client device.

Claims

1. A method for storing and retrieving a data object, the method comprising:

dissociating a user profile from sections of the data object that include other information,

disassembling the user profile into a plurality of separate pieces of identity information;

individually encrypting each of the plurality of separate pieces of identity information comprising the user profile using a separate encryption key for each of the separate pieces of identity information;

storing the separate pieces of identity information across a plurality of storage locations;

transmitting from a client device to an initiation server a request to retrieve the data object, wherein the data object comprises a plurality of segments stored across the plurality of storage locations;

receiving, at the client device, a sequencing key from the initiation server in response to the request to retrieve the data object, wherein the sequencing key comprises an ordered list of the plurality of storage locations;

retrieving, by the client device, the plurality of segments of the data object from the plurality of storage locations at least in part according to the order indicated by the sequencing key, wherein the order indicated by the sequencing key comprises retrieving a first segment of the data object from a first storage location prior to retrieving a second segment of the data object from a second storage location;

monitoring a progress of the retrieval of the data object by the client device, wherein said monitoring comprises;

receiving, at the initiation server, a notification from the second storage location of the plurality of storage locations of an attempt by the client device to retrieve the second segment of the data object, and

determine whether a request to retrieve the second segment of the data object from the second storage location is in accordance with the order indicated by the sequencing key; and

terminating a session with the client device in response to determining that the request to retrieve the second segment of the data object from the second storage location is not in the order indicated by the sequencing key, wherein said determination comprises determining that the client device is attempting to retrieve the second segment of the data object from the second storage location prior to retrieving the first segment of the data object from the first storage location.

2. The method of claim 1, wherein the ordered list comprises a first identifier associated with the first storage location followed by a second identifier associated with the second storage location.

3. The method of claim 1, further comprising receiving a diffraction table from the initiation server.

4. The method of claim 3, wherein the plurality of segments of the data object is retrieved from the plurality of storage locations further based on the diffraction table.

5. The method of claim 4, wherein the diffraction table includes, for each of the plurality of storage locations, a corresponding universal record locator (URL), port number, and access key.

6. The method of claim 5, wherein the access key associated with the first storage location of the plurality of storage locations is generated based at least in part on a token associated with the first storage location and a token associated with the client device.

7. The method of claim 5, further comprising providing the access key associated with the first storage location of the plurality of storage locations to retrieve a first segment of the data object from the first storage location.

8. The method of claim 7, wherein the first storage location is configured to provide the first segment of the data object to the client device in response to successfully verifying the client device based on the access key provided by the client device.

9. A method for providing a data object, the method comprising:

dissociating a user profile from sections of the data object that include other information,

disassembling the user profile into a plurality of separate pieces of identity information; and

individually encrypting each of the plurality of separate pieces of identity information comprising the user profile using a separate encryption key for each of the separate pieces of identity information;

storing the separate pieces of identity information across a plurality of storage locations;

receiving, at an initiation server, a request from a client device to retrieve a data object;

generating a sequencing key in response to the request from the client device to retrieve the data object, wherein the sequencing key comprises an ordered list of the plurality of storage locations;

transmitting the sequencing key to the client device;

monitoring a progress of the retrieval of the data object by the client device, wherein said monitoring comprises;

receiving a notification from a first storage location of the plurality of storage locations of an attempt by the client device to retrieve a first segment of the data object, and

determining whether the request to retrieve the first segment of the data object from the first storage location is in accordance with the order indicated by the sequencing key, wherein the order indicated by the sequencing key comprises retrieving a second segment of the data object from a second storage location prior to retrieving the first segment of the data object from the first storage location; and

invalidating a session with the client device in response to determining that the request to retrieve the first segment of the data object from the first storage location is not in the order indicated by the sequencing key, wherein said determination comprises determining that the request to retrieve the first segment of the data object from the first storage location is prior to retrieving the second segment of the data object from the second storage location.

10. The method of claim 9, further comprising retracting the plurality of segments of the data object from the plurality of storage locations in response to determining that the request to retrieve the first segment of the data object from the first storage location is not in the order indicated by the sequencing key.

11. The method of claim 9, further comprising transmitting a verification to the first storage location in response to determining that the request to retrieve the first segment of the data object from the first storage location is in the order indicated by the sequencing key.

12. The method of claim 11, wherein the first storage location is configured to provide the first segment of the data object to the client device in response to receiving the verification from the initiation server and to successfully verifying the client device based on an access key provided by the client device.

13. The method of claim 9, further comprising:

authenticating the client device; and

in response to successfully authenticating the client device;

generating a diffraction table that includes, for each of the plurality of storage locations, a universal record locator (URL), a port number, and an access key; and

transmitting the diffraction table to the client device.

14. A method of providing a data object, the method comprising:

dissociating a user profile from sections of the data object that include other information,

disassembling the user profile into a plurality of separate pieces of identity information;

individually encrypting each of the plurality of separate pieces of identity information comprising the user profile using a separate encryption key for each of the separate pieces of identity information;

storing the separate pieces of identity information across a plurality of storage locations;

receiving, at a second storage location of the plurality of storage locations, a request from a client device to retrieve a second segment of the plurality of segments of the data object, wherein the data object comprises the plurality of segments stored across the plurality of storage locations;

transmitting, from the second storage location to the initiation server, a notification of the attempt by the client device to retrieve the second segment of the data object;

monitoring, by the initiation server, a progress of the retrieval of the data object by the client device, said monitoring comprises;

receiving the notification of the attempt by the client device to retrieve the second segment of the data object, and

determining whether the request to retrieve the second segment of the data object from the second storage location is in accordance with an order indicated by a sequencing key, wherein the order indicated by the sequencing key comprises retrieving a first segment of the data object from a first storage location prior to retrieving the second segment of the data object from the second storage location;

receiving a verification of the request in response to determining, by the initiation server, that the client device requested to retrieve a first segment of the data object from a first storage location prior to requesting to retrieve the second segment of the data object from the second storage location in accordance with the order indicated by the sequencing key;

determining whether the verification of the request is received from the initiation server;

in response to determining that a verification of the request is received from the initiation server;

verifying an access key provided by the client device; and

providing the second segment of the data object to the client device in response to successfully verifying the access key provided by the client device; and

invalidating a session with the client device in response to determining that the request to retrieve the second segment of the data object from the second storage location is not in the order indicated by the sequencing key, wherein said determination comprises determining that the client device is requesting to retrieve the second segment of the data object from the second storage location prior to requesting to retrieve the first segment of the data object from the first storage location.

15. The method of claim 14, further comprising in response to successfully verifying the access key provided by the client device, transmitting a notification to the initiation server of a successful verification of the client device.

16. The method of claim 14, further comprising terminating a connection with the client device in response to determining that a verification of the request is not received from the initiation server.

17. The method of claim 14, wherein the initiation server is further configured to provide the access key for the first storage location in a diffraction table.

18. The method of claim 17, the diffraction table includes, for each of the plurality of storage locations, a corresponding universal record locator (URL), port number, and access key.

19. A system for diffracted data retrieval (DDR), the system comprising:

a plurality of storage locations;

a client device configured to;

transmit a request to retrieve a data object, wherein the data object comprises a plurality of segments stored across the plurality of storage locations;

receive a sequencing key in response to the request to retrieve the data object, wherein the sequencing key comprises an ordered list of the plurality of storage locations, and wherein the order indicated by the sequencing key comprises retrieving a first segment of the data object from a first storage location prior to retrieving a second segment of the data object from a second storage location; and

retrieve the plurality of segments of the data object from the plurality of storage locations at least in part according to the order indicated by the sequencing key; and

an initiation server configured to;

dissociate a user profile from sections of a data object that include other information,

disassemble the user profile into a plurality of separate pieces of identity information; and

individually encrypt each of the plurality of separate pieces of identity information comprising the user profile using a separate encryption key for each of the separate pieces of identity information;

store the separate pieces of identity information across the plurality of storage locations;

receive the request from the client device to retrieve the data object;

generate the sequencing key in response to the request from the client device to retrieve the data object;

transmit the sequencing key to the client device;

monitor a progress of the retrieval of the data object by the client device, wherein to monitor the progress comprises;

receive a notification from the second storage location of the plurality of storage locations of an attempt by the client device to retrieve the second segment of the data object, and

determine whether the request to retrieve the second segment of the data object from the second storage location is in accordance with the order indicated by the sequencing key; and

invalidate a session with the client device in response to determining that the request to retrieve the second segment of the data object from the second storage location is not in the order indicated by the sequencing key, wherein said determination comprises determining that the client device is attempting to retrieve the second segment of the data object from the second storage location prior to retrieving the first segment of the data object from the first storage location.

20. The system of claim 19, wherein the first storage location of the plurality of storage location is configured to:

receive a request from the client device to retrieve the first segment of a plurality of segments of the data object;

transmit, to the initiation server, a notification of the attempt by the client device to retrieve the first segment of the data object;

determine whether a verification of the request is received from the initiation server; and

in response to determining that a verification of the request is received from the initiation server;

verify an access key provided by the client device; and

provide the first segment of the data object to the client device in response to successfully verifying the access key provided by the client device.

21. The system of claim 20, wherein the first storage location is further configured to transmit to the initiation server a notification of a successful verification of the client device.

22. The system of claim 21, wherein the initiation server is further configured to invalidate the session with the client device in response to determining that the client device is not successfully verified by the first storage location.