Data security for digital data storage

• US 20020141588A1
• Filed: 03/27/2001
• Published: 10/03/2002
• Est. Priority Date: 03/27/2001
• Status: Active Grant

• Current Assignee: Micron Technology, Inc.
• Original Assignee: Micron Technology, Inc.
• Inventors: Rollins, Doug L.
• Granted Patent: US 7,526,795 B2
• Time in Patent Office: Days
• US Class Current: 380/277
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 63/104 Grouping of entities
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]

Abstract

A computing system includes data encryption in the data path between a data source and data storage devices. The data storage devices may be local or they may be network resident. The data encryption may utilize a key which is derived at least in part from an identification code stored in a non-volatile memory. The key may also be derived at least in part from user input to the computer. In a LAN embodiment, public encryption keys may be automatically transferred to a network server for file encryption prior to file transfer to a client system.

Claims

1. A method of transferring files over a computer network comprising:

storing a public encryption key and a private encryption key in a client computer system;

sending a request for a data file from said client to a network server; and

in response to said request, (1) checking a file attribute to determine that said file is to be encrypted with said public encryption key, (2) automatically retrieving said public encryption key from said client computer system, (3) encrypting said data file with said public encryption key in said server automatically and without user intervention; and

sending said encrypted data file to said client computer system.

2. A method of storing a data file comprising:

encrypting said data with an encryption key;

storing said encrypted data on a local data storage medium;

copying said encrypted data to a remote network server;

storing said data file on a data storage medium in said remote network server in association with a file attribute that designates said data as encrypted.

3. The method of claim 2, additionally comprising retrieving said data file from said network server by a method comprising checking said file attribute prior to routing said data file back to said local data storage medium.

4. A computer network having one or more servers storing data created by one or more clients, said computer network comprising:

at least one data storage device located on a network server;

at least one data storage device located on a client computer system;

data files encrypted with a public key associated with said client computer system stored on both said network server and said client computer system, said data files including a file attribute indicating said data files are encrypted.

5. A method of data storage and retrieval comprising:

automatically generating a public key and a corresponding private key in a client computer system;

storing said public key and said private key in said client computer system;

requesting an unenerypted data file from a network server using said client computer system;

requesting said public key from said client computer system automatically and without user intervention;

encrypting, in said network server, said unencrypted data file with said public key to create an encrypted data file;

routing said encrypted data file to said client computer system; and

storing said encrypted data file on a storage medium in said client computer system.

6. The method of claim 5, additionally comprising the step of associating an attribute with said file, said attribute indicating said file is unencrypted when stored on said network server.

7. The method of claim 5, wherein said public key and said private key are based on a password entered by a user when logging on to said client computer system.

8. A computer readable data storage medium having stored thereon commands that are operative to cause a general purpose computer configured as a network server to perform a method of data retrieval comprising the steps of:

receiving a request for a data file from a client computer system;

in response thereto, automatically requesting a public key from said client computer system;

automatically encrypting said data file using said public key; and

routing said encrypted data to said client computer system.

9. The data storage medium of claim 8, wherein the method additionally comprises the step of checking a file attribute indicating said file is in unencrypted form prior to performing said encrypting.