File management apparatus and method

• US 20040064485A1
• Filed: 08/13/2003
• Published: 04/01/2004
• Est. Priority Date: 09/30/2002
• Status: Abandoned Application

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Seki, Toshibumi, Kanai, Tatsunori, Yoshida, Hideki
• Application Number:
  US10/639,578
• Publication Number:
  US 20040064485A1
• Time in Patent Office: Days
• US Class Current: 707/201
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00

Abstract

A first calculation unit calculates a first content hash based on a file to be written in response to a write request of the file. An encryption unit encrypts the file by using the first content hash, and generates an encrypted file. A second calculation unit calculates a second content hash based on the encrypted file. An encryption file memory correspondingly stores the encrypted file and the second content hash. A content hash pair memory correspondingly stores the first content hash and the second content hash.

Claims

1. A file management apparatus, comprising:

a first calculation unit configured to calculate a first content hash based on a file to be written in response to a write request of the file;

an encryption unit configured to encrypt the file by using the first content hash;

a second calculation unit configured to calculate a second content hash based on an encrypted file which is encrypted by said encryption unit;

an encryption file memory configured to correspondingly store the encrypted file and the second content hash; and

a content hash pair memory configured to correspondingly store the first content hash and the second content hash.

2. The file management apparatus according to claim 1, further comprising:

a first read unit configured to read the second content hash corresponding to the first content hash from said content hash pair memory in response to a read request of the file by indicating the first content hash;

a second read unit configured to read the encrypted file corresponding to the second content hash from said encryption file memory;

a decryption unit configured to decrypt the encrypted file as a decryption result by using the first content hash as a decryption key; and

a supply unit configured to supply the file to a request source of the read request.

3. The file management apparatus according to claim 1,

wherein said supply unit supplies the first content hash to a request source of the write request.

4. The file management apparatus according to claim 3,

wherein the request source of the write request is a first application program and the request source of the read request is a second application program.

5. The file management apparatus according to claim 3,

wherein the request source of the write request is the same as the request source of the read request.

6. The file management apparatus according to claim 2,

wherein said first calculation unit calculates the first content hash by a first hash function,

wherein said second calculation unit calculates the second content hash by a second hash function, and

wherein the first hash function and the second hash function respectively represent a predetermined calculation method.

7. The file management apparatus according to claim 1,

wherein the encryption unit, the first calculation unit and the second calculation unit are distributed among a plurality of computers;

and

wherein at least one of said encryption file memory and said content hash pair memory is located on one of the plurality of computers which most protects an invasion from outside.

8. The file management apparatus according to claim 1,

wherein at least one of said encryption file memory and said content hash pair memory is a portable memory device.

9. The file management apparatus according to claim 2,

if each of the first calculation unit, the encryption unit, the second calculation unit, the encryption file memory, the content hash memory, the first read unit, the second read unit, the decryption unit and the supply unit is distributed between a server side network and a client side network,

wherein said first calculation unit, said encryption unit, said second calculation unit, said encryption file memory and said content hash pair memory, are located on the server side network, and

wherein said first read unit, said second read unit, said decryption unit and said supply unit, are located on the client side network.

10. The file management apparatus according to claim 9,

wherein the request source of the read request is a client application program existing on the client side network.

11. The file management apparatus according to claim 10,

when the client application program generates a read request of the file with a URL associated with the file,

wherein a client side proxy server of the client side network sends the URL to a server side proxy server of the server side network, and receives the first content hash of the file associated with the URL from the server side proxy server of the server side network.

12. The file management apparatus according to claim 11,

wherein said first read unit of the client side network sends the first content hash to said content hash pair memory of the server side network, and receives the second content hash corresponding to the first content hash from said content hash pair memory of the server side network.

13. The file management apparatus according to claim 12,

wherein said second read unit of the client side network sends the second content hash to said encryption file memory of the server side network, and receives the encrypted file corresponding to the second content hash from said encryption file memory of the server side network.

14. The file management apparatus according to claim 13,

further comprising a cache memory configured to correspondingly store the encrypted file and the second content hash on the client side network, and

wherein said second read unit first retrieves the encrypted file corresponding to the second content hash from said cache memory unit.

15. The file management apparatus according to claim 14,

if said second read unit cannot retrieve the encrypted file corresponding to the second content hash from said cache memory unit,

wherein said second read unit sends the second content hash to said encryption file memory unit of the server side network.

16. The file management apparatus according to claim 15,

wherein said decryption unit of the client side network decrypts the encrypted file by using the first content hash, and

wherein said supply unit of the client side network outputs the file to the client application program.

17. A method for managing a file, comprising:

receiving a write request of the file;

calculating a first content hash based on the file in response to the write request of the file;

encrypting the file by using the first content hash;

calculating a second content hash based on an encrypted file;

correspondingly storing the encrypted file and the second content hash in an encryption file memory; and

correspondingly storing the first content hash and the second content hash in a content hash pair memory.

18. The method according to claim 17, further comprising:

receiving a read request of the file;

reading the second content hash corresponding to the first content hash from the content hash pair memory in response to the read request of the file by indicating the first content hash;

reading the encrypted file corresponding to the second content hash from the encryption file memory;

decrypting the encrypted file as a decryption result by using the first content hash as a decryption key; and

supplying the file to a request source of the read request.

19. A computer program product, comprising:

a computer readable program code embodied in said product for causing a computer to manage a file, said computer readable program code comprising;

a first program code to calculate a first content hash based on the file to be written in response to a write request of the file;

a second program code to encrypt the file by using the first content hash;

a third program code to calculate a second content hash based on an encrypted file;

a fourth program code to correspondingly store the encrypted file and the second content hash in an encryption file memory; and

a fifth program code to correspondingly store the first content hash and the second content hash in a content hash pair memory.

20. The computer program product according to claim 19, further comprising:

a sixth program code to read the second content hash corresponding to the first content hash from the content hash pair memory in response to a read request of the file by indicating the first content hash;

an seventh program code to read the encrypted data corresponding to the second content hash from the encryption file memory;

a eighth program code to decrypt the encrypted file as a decryption result by using the first content hash as a decryption key; and

a ninth program code to supply the file to a request source of the read request.