System and computer based method to automatically archive and retrieve encrypted remote client data files

• US 20020016912A1
• Filed: 10/04/2001
• Published: 02/07/2002
• Est. Priority Date: 11/19/1996
• Status: Active Grant

• Current Assignee: Johnson R. Brent
• Original Assignee: Johnson R. Brent
• Inventors: Johnson, R. Brent
• Granted Patent: US 7,080,260 B2
• Time in Patent Office: Days
• US Class Current: 713/165
• CPC Class Codes: G06F 11/1464 for networked environments
• CPC Class Codes: G06F 11/2294 by remote test
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: Y10S 707/99953 Recoverability
• CPC Class Codes: Y10S 707/99955 Archiving or backup

Abstract

A remote user establishes an interactive session. A pre-determined backup set is encrypted at a remote user site according to a key based upon the user'"'"'s password. Encrypted backup data is then transmitted to a backup archive server and decrypted utilizing the user'"'"'s password generated key and re-encrypted according to a user specified backup set key and stored upon an auxiliary storage unit. The present invention further embodies a retrieval process wherein a remote user designates one or more files to be retrieved and the backup set encryption key used during the initial backup operation. Software executing within the backup archive server CPU retrieves and decrypts the specified files according to the originally specified backup set key and re-encrypts the files according to the remote user'"'"'s password. Retrieved information is then transmitted to the remote user whereupon it is subsequently decrypted at the remote user site.

Claims

1. A system to automatically archive and retrieve encrypted remote client data files comprising:

at least one security administrator central processing unit communicably attached to at least one backup archive server central processing unit;

at least one auxiliary storage device communicably attached to said backup archive server central processing unit;

at least one client central processing unit communicably attached to said backup archive server central processing unit;

first software for transmitting at least one remote client backup file encrypted according to the remote client'"'"'s password from said client central processing unit to said backup archive server central processing unit and for processing encrypted data communicated from second software, said first software executing within said client central processing encrypted unit;

second software for processing encrypted data communicated from said first software, validating authorized remote client access and storing said transmitted client back-up file, said second software executing within said backup archive server central processing unit; and

third software for

(a) identifying remote client data which has been encrypted according to a remote user password key;

(b) decrypting the data identified in (a);

(c) re-encrypting the data decrypted in (b) ;

according to a remote user determined and specified backup set key;

(d) storing data re-encrypted in (c) to an auxiliary storage device;

(e) identifying and retrieving remote client data which has been encrypted according to a remote user determined and specified backup set key;

(f) decrypting the data identified in (a);

(g) re-encrypting the data decrypted in (b) according to a remote user password key; and

,

(h) transmitting data re-encrypted in (c) to a remote user authorized to receive said data.

3. The system to automatically archive and retrieve encrypted remote client data files in accordance with claim 1 further comprising at least one robotic CD rom, DVD, or other suitable data archival device and media recording and printing device communicably attached to said backup archive server central processing unit.

5. The system to automatically archive and retrieve encrypted remote client data files in accordance with claim 1 wherein said second software means further comprises a software instruction set for transmitting data between said backup archive server central processing unit and a robotic CD rom, DVD, or other suitable data archival device and media recording and printing device.

2. A system to automatically archive and retrieve encrypted remote client data files comprising:

at least one security administrator central processing unit communicably attached to at least one backup archive server central processing unit;

at least one auxiliary storage device communicably attached to said backup archive server central processing unit;

at least one client central processing unit communicably attached to said backup archive server central processing unit;

first software for transmitting at least one remote client backup file encrypted according to the remote client'"'"'s password from said client central processing unit to said backup archive server central processing unit and for processing encrypted data communicated from second software, said first software executing within said client central processing encrypted unit;

second software for processing encrypted data communicated from said first software, validating authorized remote client access and storing said transmitted client back-up file, said second software executing within said backup archive server central processing unit; and

third software wherein all data transmitted between said client and backup archive server central processing units is encrypted data; and

fourth software for initiating encrypted administrative support protocol;

said fourth software executing within said security administrator central processing unit.

4. The system to automatically archive and retrieve encrypted remote client data files in accordance with claim 2 further comprising at least one robotic CD rom, DVD, or other suitable data archival device and media recording and printing device communicably attached to said backup archive server central processing unit.

6. The system to automatically archive and retrieve encrypted remote client data files in accordance with claim 2 wherein said second software means further comprises a software instruction set for transmitting data between said backup archive server central processing unit and a robotic CD rom, DVD, or other suitable data archival device and media recording and printing device.

7. A computer based method for automatically archiving and retrieving remote client data files comprising:

(a). a remote user specifying a back-up set to archive;

(b). said remote user specifying to be archived or excluded;

(c). said remote user specifying the frequency and time of day of automated by archiving activity;

(d). said remote user specifying an encryption key for said defined backup set;

(e). said remote user scheduling or manually requesting a remote client machine log on to a backup archive server;

(f). said user specifying the identification of a backup server CPU to be utilized for backup purposes;

(g). transmitting to a backup archive server remote user defined files which have been modified since last backup;

(h) decrypting at said backup archive server data identified in (g);

(i) re-encrypting the data decrypted in (h) according to the remote user determined and specified backup set key in (d); and

(j) storing data re-encrypted in (i) to an auxiliary storage device.

8. The computer based method for automatically archiving and retrieving remote client data files according to claim 7 further comprising:

(a) a remote user logging on to a backup archive server using a pre-authorized user ID and password;

(b). said remote user specifying a client CPU file location to which retrieved files are to be stored;

(c). said remote user specifying an appropriate backup set from which to recover files;

(d). said remote user specifying the encryption key of the backup set to be restored;

(e). said remote user specifying files within said backup set to be retrieved;

(f). retrieving remote client data which has been encrypted according to a remote user determined and specified backup set key;

(g). decrypting the data retrieved in (f);

(h). re-encrypting the data decrypted in (g) according to said remote user'"'"'s password key; and

,

(i). transmitting data re-encrypted in (h) to a remote user authorized to receive said data.

9. A computer based method for automatically archiving and retrieving remote client data files comprising:

(a). a remote user specifying a back-up set to archive;

(b). said remote user specifying files to be archived or excluded;

(c). said remote user specifying the frequency and time of day of automated archiving activity;

(d). a remote user specifying an encryption key for said defined backup set;

(e). said remote user scheduling or manually requesting a remote client machine log on to a backup archive server;

(f). said user specifying the identification of a backup server CPU to be utilized for backup purposes;

(g). transmitting to a backup archive server remote user defined files which have been modified since last backup;

(h). decrypting the data identified in (g);

(i). re-encrypting the data decrypted in (h) according to the remote user determined and specified backup set key in (d);

(j). storing data re-encrypted in (i) to an auxiliary storage device;

(k). said remote user identifying a remote client CPU file location to which retrieved files are to be stored;

(l). said remote user identifying an appropriate backup set from which to recover files;

(m). said remote user identifying the encryption key of the backup set to be restored;

(n). said remote user identifying files within said backup set to be retrieved;

(o). retrieving remote client data which has been encrypted according to said remote user determined and specified backup set key;

(p). decrypting the data retrieved in (o);

(q) re-encrypting the data decrypted in (p) according to said remote user'"'"'s password key; and

,

(r) transmitting data re-encrypted in (q) to a remote user authorized to receive said data.

10. The computer based method of claim 9 further comprising the copying of encrypted user specific data between said backup archive server central processing unit to a robotic CD rom recording and printing device.

11. The computer based method of claim 9 further comprising the execution of administrative support protocol.