Systems and methods for secure data backup

• US 20080226082A1
• Filed: 03/12/2008
• Published: 09/18/2008
• Est. Priority Date: 03/12/2007
• Status: Abandoned Application

• Current Assignee: Storage Appliance Corp.
• Original Assignee: Storage Appliance Corp.
• Inventors: Collins, Ian, Chowdhary, Yousuf, Brunet, Jeffrey
• Application Number:
  US12/075,727
• Publication Number:
  US 20080226082A1
• Time in Patent Office: Days
• US Class Current: 380/277
• CPC Class Codes: H04L 9/0897 involving additional devices, e.g. trusted platform module [TPM], smartcard or USB

Abstract

Systems and methods are provided for securely backing up data files of a computing system onto a backup device. An encryption key is generated using some identification found on and unique to the computing system. The encryption key is used to encrypt the data which is then stored on the backup device as encrypted backed up data. The encrypted backed up data stored on the backup device can later be accessed, e.g., for data recovery purposes, by once again using the computing system unique identification to generate the encryption key which can then be used to decrypt the encrypted backed up data. In this way, the backed up data remains secure even if the backup device is lost or stolen.

Claims

1. A secure backup method comprising:

locating, on a first computing system, identification unique to the first computing system;

creating a first encryption key using the located first computing system unique identification;

storing the first encryption key on a backup device;

encrypting, using the first encryption key, a data file from the first computing system; and

storing the encrypted data file from the first computing system on the backup device.

2. The method of claim 1, further comprising:

locating again, on the first computing system, identification unique to the first computing system;

creating a second encryption key using the again located computing system unique identification; and

decrypting, using either the first encryption key or the second encryption key, the encrypted data file from the first computing system stored on the backup device if the second encryption key matches the first encryption key stored on the backup device.

3. The method of claim 1, further comprising storing the first encryption key on an external source.

4. The method of claim 3, further comprising:

locating, on a second computing system, identification unique to the second computing system;

creating a second encryption key using the located second computing system unique identification;

obtaining the first encryption key from the external source, if the second encryption key does not match the first encryption key stored on the backup device; and

decrypting, using the obtained first encryption key, the encrypted data file from the first computing system stored on the backup device.

5. The method of claim 4, further comprising:

storing the second encryption key on the backup device;

encrypting, using the second encryption key, a data file from the second computing system; and

storing the encrypted data file from the second computing system on the backup device.

6. The method of claim 1 wherein the first computing system is a personal computer.

7. The method of claim 1 wherein locating, on a first computing system, identification unique to the first computing system comprises reading a serial number of the first computing system.

8. The method of claim 1 wherein locating, on a first computing system, identification unique to the first computing system comprises reading a serial number of a component of the first computing system.

9. The method of claim 1 wherein locating, on a first computing system, identification unique to the first computing system comprises reading a serial number of an operating system of the first computing system.

10. The method of claim 1 wherein storing the first encryption key on a backup device comprises storing the first encryption key on a hard disk.

11. The method of claim 1 wherein storing the first encryption key on a backup device comprises storing the first encryption key on an optical disc.

12. The method of claim 1 wherein storing the first encryption key on a backup device comprises storing the first encryption key on a flash memory.

13. The method of claim 3 wherein storing the first encryption key on an external source comprises storing the first encryption key on a removeable storage device.

14. The method of claim 3 wherein storing the first encryption key on an external source comprises storing the first encryption key on a flash memory.

15. The method of claim 3 wherein storing the first encryption key on an external source comprises storing the first encryption key on another computing system coupled to the first computing system via a computer network.

16. The method of claim 4 wherein storing the first encryption key on an external source comprises storing the first encryption key on the second computing system, the second computing system coupled to the first computing system via a computer network, and wherein obtaining the first encryption key from the external source comprises reading the stored first encryption key from the second computing system.

17. A computer readable medium having stored thereupon computing instructions comprising:

a code segment to locate, on a first computing system, identification unique to the first computing system;

a code segment to create a first encryption key using the located first computing system unique identification;

a code segment to store the first encryption key on a backup device;

a code segment to encrypt, using the first encryption key, a data file from the first computing system; and

a code segment to store the encrypted data file from the first computing system on the backup device.

18. A backup device comprising:

a computer readable medium having stored thereupon computing instructions including;

a code segment to locate, on a first computing system, identification unique to the first computing system;

a code segment to create a first encryption key using the located first computing system unique identification;

a code segment to store the first encryption key on a backup device;

a code segment to encrypt, using the first encryption key, a data file from the first computing system; and

a code segment to store the encrypted data file from the first computing system on the backup device.

19. The backup device of claim 18 wherein the computer readable medium further comprises having stored thereupon computing instructions including:

a code segment to locate again, on the first computing system, identification unique to the first computing system;

a code segment to create a second encryption key using the again located computing system unique identification; and

a code segment to decrypt, using either the first encryption key or the second encryption key, the encrypted data file from the first computing system stored on the backup device if the second encryption key matches the first encryption key stored on the backup device.

20. The backup device of claim 18 wherein the computer readable medium further comprises having stored thereupon computing instructions including a code segment to store the first encryption key on an external source.

21. The backup device of claim 20 wherein the computer readable medium further comprises having stored thereupon computing instructions including:

a code segment to locate, on a second computing system, identification unique to the second computing system;

a code segment to create a second encryption key using the located second computing system unique identification;

a code segment to obtain the first encryption key from the external source, if the second encryption key does not match the first encryption key stored on the backup device; and

a code segment to decrypt, using the obtained first encryption key, the encrypted data file from the first computing system stored on the backup device.

22. The backup device of claim 21 wherein the computer readable medium further comprises having stored thereupon computing instructions including:

a code segment to store the second encryption key on the backup device;

a code segment to encrypt, using the second encryption key, a data file from the second computing system; and

a code segment to store the encrypted data file from the second computing system on the backup device.

23. The backup device of claim 18 wherein the computer readable medium is a hard disk.

24. The backup device of claim 18 wherein the computer readable medium is an optical disc.

25. The backup device of claim 18 wherein the computer readable medium is a flash memory.