Method and arrangement for securing a digital data file having financial value, terminal operating in the arrangement, and software application employing the method

• US 20030005244A1
• Filed: 06/27/2002
• Published: 01/02/2003
• Est. Priority Date: 06/29/2001
• Status: Active Grant

• Current Assignee: Gula Consulting Limited Liability Company (Intellectual Ventures LLC)
• Original Assignee: Nokia Corporation
• Inventors: Markkanen, Panu S.
• Granted Patent: US 7,240,079 B2
• Time in Patent Office: Days
• US Class Current: 711/162
• CPC Class Codes: G06F 11/1469 Backup restoration techniques
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 67/1095 Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes
• CPC Class Codes: Y10S 707/99953 Recoverability
• CPC Class Codes: Y10S 707/99955 Archiving or backup

Abstract

The invention relates to a method and hardware arrangement which can be used to provide secure and efficient backup copying of a file on a terminal (13) operating in a data communication network (11), assisted by a server (12) connected with the data communication network. The invention also relates to software applications for implementing the method. A backup copy (electronic data file) according to the invention is created in a non-trusted device (14) from which it can be once restored to a trusted device (13) by means of a server (12). The server connected with the data communication network stores only the identification information for the trusted terminal (13) and for the backed-up file. That information is removed from the server'"'"'s memory as soon as a permission has been given to restore the backup copy. This prevents unauthorized duplication of the backed-up file.

Claims

1. A method for creating an electronic data file from information residing in the memory of a first device operating in a data communication system so that said electronic data file is created in a second device and when creating and saving the electronic data file it comprises a step in which information identifying the owner who made the request for the creation of the electronic data file is stored in a backup service in addition to the information concerning the electronic data file to be created.

2. A method according to claim 1 which method further comprises

a step in which instructions concerning the procedure used in the creation of the electronic data file are sent from the backup service to said first device, and

a step in which the first device saves into said second device the electronic data file processed according to the instructions received.

3. A method according to claim 1 wherein the phase for creating and saving the electronic data file comprises

a step in which the first device saves the processed electronic data file into a second device,

steps for establishing a communication connection with a backup service and identifying the first device,

a step in which the first device sends to the backup service information describing the type of the electronic data file, and

a step in which the backup service saves the information received from the first device.

4. A method according to claim 1 wherein the first device is identified as a trusted device by a backup service associated with the data communication system.

5. A method according to claim 2 wherein the second device is a non-trusted device.

6. A method according to claim 4 wherein when the first device contacts the backup service for creating an electronic data file, it is identified as a trusted device by the backup service.

7. A method according to claim 2 wherein the instructions concerning the procedure used in the creation of the electronic data file comprise information on how the electronic data file to be created will be altered during its creation such that it becomes unusable.

8. A method according to claim 7 wherein the instructions concerning the procedures used in the creation of the electronic data file comprise a cipher key which is used for encrypting the electronic data file to be created.

9. A method according to claim 7 wherein the instructions concerning the procedures used in the creation of the electronic data file further comprise instructions specifying that a certain part of the electronic data file is only saved into the backup service.

10. A method according to claim 9 wherein said part to be saved into the backup service is an electronic signature used to verify the electronic data file.

11. A method according to claim 1 wherein at least the first device is a terminal of a radio network.

13. A method according to claim 12 which method further comprises, following the step for establishing a connection,

a step in which the backup service checks whether the first device is a trusted device,

a step in which the first device sends a restore request, and

a step in which the restore request is accepted.

14. A method according to claim 13 wherein the restore request sent by the first device to the backup service comprises identification information concerning an electronic data file stored in the memory of a second device.

15. A method according to claim 14 wherein the backup service compares the information received from the first device against information stored in the memory of the backup service) and if they are identical, the backup service sends to the first device instructions for opening the electronic data file.

16. A method according to claim 15 wherein the backup service erases from its memory the information concerning the electronic data file after the opening instructions for the electronic data file have been conveyed to the first device.

17. A method according to claim 15 wherein the instructions sent by the backup service to the first device comprise instructions specifying how the electronic data file should be processed in order to modify it such that it can be used by the first device.

18. A method according to claim 17 wherein the instructions sent by the backup service to the first device comprise a cipher key which is used for opening the electronic data file.

19. A method according to claim 17 wherein the instructions sent by the backup service to the first device comprise a part which was removed from the electronic data file when the latter was created, which part is used for restoring the electronic data file.

20. A method according to claim 12 wherein said electronic data file is used to restore data back to the first device from which it was transferred to a second device.

21. A method according to claim 12 wherein the first device is a terminal of a cellular network.

22. A method according to claim 1 or 12 wherein the electronic data file is one of the following:

a music file, video file, text file, balance data for electronic money or an application program installed in a device.

24. A hardware arrangement according to claim 23 wherein the information to be stored in the backup service comprises a cipher key used for creating the electronic data file.

25. A hardware arrangement according to claim 23 wherein the backup service comprises a separate server in connection with the data communication system.

26. A hardware arrangement according to claim 23 wherein part of the memory of the first device is arranged to be secure memory into which the instruction/information obtained from the backup service is to be stored in order to enable the opening of the electronic data file.

27. A hardware arrangement according to claim 23 wherein the data communication system is a cellular telephone network.

28. A hardware arrangement according to claim 23 wherein the first device is a terminal of a cellular network.

30. A terminal according to claim 29 which terminal further comprises

means for receiving a saving instruction from the backup service, and

means for transferring an electronic data file which has been rendered unusable, to a second electronic device.

31. A terminal according to claim 30 which terminal further comprises means for restoring an electronic data file stored in a second electronic device to the terminal in usable form.

32. A terminal according to claim 31 wherein the means for restoring an electronic data file comprise

means for contacting a backup service in the cellular network,

means for sending a restore request message to the backup service,

means for receiving a data file restore instruction from the backup service, and

means for restoring an existing electronic data file into the memory of the terminal according to the restore instruction received from the backup service.

12. A method for restoring an existing electronic data file to a first device operating in a data communication network from a second device, which method comprises

a step for establishing a connection from the first device to a backup service in the data communication system, and

a step in which information is restored to the first device from an electronic data file in a second device according to an instruction sent by the backup service.

23. A hardware arrangement for creating an electronic data file from information stored in a first device operating in a data communication system, which hardware arrangement comprises

a data communication system,

a backup service in association with the data communication system in which backup service information concerning the owner of the electronic data file as well as information concerning the electronic data file to be created is stored,

at least one first device connected with the data communication system, and

at least one second device to which the electronic data file is to be transferred from the first device, assisted by the backup service.

29. A terminal of a data communication network, comprising

means for transmitting signals,

means for receiving signals,

means for saving information and using it in the terminal,

a control unit for controlling the operation of the terminal, and

means for creating an electronic data file from information residing in the memory of the terminal, which means comprise

means for establishing a connection with a backup service associated with the data communication network, and

means for sending a save request message to the backup service.

33. A software application for creating an electronic data file, residing on a server associated with a data communication system, which software application comprises

means for verifying the reliability of a terminal,

means for saving information used for identifying the owner of the electronic data file, and

means for saving information associated with the electronic data file.

34. A software application according to claim 33 which software application further comprises means for conveying instructions concerning the creation of an electronic data file to the terminal.

36. A software application on a storage or transfer medium for loading an application according to claims 34 or 35 into computer memory.

38. A software application according to claim 37 which software application further comprises means for receiving instructions for creating an electronic data file from a backup service.

35. A software application for restoring an electronic data file, residing on a server associated with a data communication system, which software application comprises

means for verifying the validity of information residing in a trusted terminal that made the restore request,

means for conveying restore instructions to the terminal, and

means for removing information associated with the electronic data file from the server after the restore instructions have been sent.

37. A software application for creating an electronic data file, residing in a trusted terminal associated with a data communication network, which software application comprises

means for presenting information concerning the electronic data file to a backup service,

means for conveying information identifying the owner of the electronic data file to the backup service when the electronic data file is being created, and

means for saving the electronic data file to a second device.

40. A software application on a storage or transfer medium for loading an application according to claims 37, 38 or 39 into the memory of the terminal.

39. A software application for restoring an electronic data file, residing in a trusted terminal associated with a data communication network, which software application comprises

means for presenting a restore request concerning the electronic data file to a backup service,

means for receiving from the backup service restore instructions concerning the electronic data file,

means for transferring the electronic data file into the memory of a trusted terminal from the memory of a second device, and

means for restoring the electronic data file in usable form into the memory of the trusted terminal.