Compromise free cloud data encryption and security

• US 10,445,524 B2
• Filed: 02/09/2017
• Issued: 10/15/2019
• Est. Priority Date: 05/02/2014
• Status: Active Grant

• Current Assignee: Edward Bialek, Mayida Zaal
• Original Assignee: Edward Bialek, Mayida Zaal
• Inventors: Williams, Henry R.
• Primary Examiner(s): Bechtel, Kevin
• Application Number:
  US15/428,812
• Publication Number:
  US 20170214714A1
• Time in Patent Office: 978 Days
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2212/1052 Security improvement
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/108 when the policy decisions are valid for a limited amount of time
• CPC Class Codes: H04L 63/166 at the transport layer

Abstract

A cloud data encryption and security system includes a central computing authority and a network of computing devices. At least some of the computing devices are pod computing devices physically hosted by an operator. The pod computing devices include a central processing unit and a computer readable storage media in data communication with the central processing unit. Data is encrypted in the computer readable storage media so that the owner can access the data but the operator cannot access the data.

Claims

1. A computer-implemented method for registering a pod computing device to a user device using a cloud encryption system, wherein the pod computing device comprises computer-readable storage media comprising volatile memory and non-volatile memory, the method comprising:

using a central server to communicate with the user device, comprising;

receiving a request to register the user device;

allocating the pod computing device from a plurality of pod computing devices to the user device, wherein the pod computing device comprises hardware that is separate from hardware of each other pod computing device from the plurality of pod computing devices, such that access to data stored on the pod computing device is limited to the user device to which the pod computing device is allocated; and

providing a unique identification associated with the pod computing device to the user device; and

using the pod computing device to communicate with the user device, comprising;

receiving, from the user device, a password and a private key;

storing the private key in the volatile memory of the pod computing device, such that the private key is erased from the computer-readable storage media when the volatile memory loses power;

storing encrypted data in the non-volatile memory such that data that is encrypted is not accessible to an operator hosting the pod computing device; and

decrypting the encrypted data using the private key and store decrypted data in the volatile memory.

2. The computer implemented method of claim 1, wherein using the pod computing device to communicate with the user device further comprises generating a public key.

3. The computer implemented method of claim 2, wherein using the pod computing device further comprises encrypting data for storage in the non-volatile memory using the public key.

4. At least one computer-readable storage device storing one or more sets of data instructions which, when executed by at least one processing device, cause the at least one processing device to:

use a central server to communicate with a user device, including to;

receive a request to register the user device;

allocate a pod computing device from a plurality of pod computing devices to the user device, wherein the pod computing device comprises hardware that is separate from hardware of each other pod computing device from the plurality of pod computing devices, such that access to data stored on the pod computing device is limited to the user device to which the pod computing device is allocated; and

provide a unique identification associated with the pod computing device to the user device; and

use the pod computing device to communicate with the user device, the pod computing device including volatile memory and non-volatile memory, including to;

receive, from the user device, a password and a private key;

store the private key in the volatile memory of the pod computing device, such that the private key is erased from the pod computing device when the volatile memory loses power;

store encrypted data in the non-volatile memory such that data that is encrypted is not accessible to an operator hosting the pod computing device; and

decrypt the encrypted data using the private key and store decrypted data in the volatile memory.

5. A system comprising:

a central server device comprising at least one processing device and at least one data storage device storing data instructions that, when executed by at least one processing device of the central server device cause the central server device to;

receive a request to register a user device;

allocate a pod computing device from a plurality of pod computing devices to the user device, wherein the pod computing device comprises hardware that is separate from hardware of each other pod computing device from the plurality of pod computing devices, such that access to data stored on the pod computing device is limited to the user device to which the pod computing device is allocated; and

provide a unique identification associated with the pod computing device to the user device; and

the pod computing device comprising at least one processing device and at least one data storage device including volatile memory and non-volatile memory, the at least one data storage device storing data instructions that, when executed by the at least one processing device of the pod computing device cause the pod computing device to;

receive, from the user device, a password and a private key;

store the private key in the volatile memory of the pod computing device, such that the private key is erased from the at least one data storage device of the pod computing device when the volatile memory loses power;

store encrypted data in the non-volatile memory such that data that is encrypted is not accessible to an operator hosting the pod computing device; and

decrypt the encrypted data using the private key and store decrypted data in the volatile memory.