SECURE STORAGE SYSTEM AND METHOD FOR SECURE STORING

• US 20090187723A1
• Filed: 04/17/2007
• Published: 07/23/2009
• Est. Priority Date: 04/27/2006
• Status: Abandoned Application

• Current Assignee: NXP B.V. (NXP Semiconductors NV)
• Original Assignee: NXP B.V. (NXP Semiconductors NV)
• Inventors: Brinkman, Richard, Maubach, Stefan Jean, Jonker, Willem
• Application Number:
  US12/298,731
• Publication Number:
  US 20090187723A1
• Time in Patent Office: Days
• US Class Current: 711/163
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database

Abstract

According to an exemplary embodiment a method for securely storing a message comprises dividing a first message into a first plurality of shares, and storing the first plurality of shares on a storing host together with a second plurality of shares of at least a second message, wherein the storing is performed in a mixed manner.

Claims

1. A method for securely storing a message, the method comprising:

dividing a first message into a first plurality of shares; and

storing the first plurality of shares on a storing host together with a second plurality of shares of at least a second message, wherein the storing is performed in a mixed manner.

2. The method according claim 1, wherein the storing host is a remote host, and wherein the method further comprises:

transmitting the first plurality of shares to the remote host.

3. The method according to claim 1, the method further comprising:

labelling each of the first plurality of shares with a respective label out of a third plurality of labels before storing the first plurality of shares on the storing host.

4. The method according claim 3,

wherein the labelling is done before transmitting the first plurality of shares.

5. The method according to claim 1, further comprising:

receiving the third plurality of labels from the storing host.

6. The method according to claim 1, further comprising:

comparing at least one of the first plurality of shares with the shares of the second plurality of shares, and

in case the at least one of the first plurality of shares is identical to one of the shares of the second plurality of shares;

not storing the at least one of the first plurality of shares on the storing host; and

associating the label of the at least one of the first plurality of shares with the one of the shares of the second plurality of shares.

7. The method according claim 6, further comprising:

in case the at least one of the first plurality of shares is identical to one of the shares of the second plurality of shares;

increasing a reference counter for the at least one of the plurality of shares.

8. A method for retrieving a securely stored message, wherein the securely stored message is divided into a first plurality of shares, which is stored on a storing host in a mixed manner, wherein each of the shares is labelled:

sending a list comprising a fourth plurality of labels from a client to the storing host; and

transmitting the shares associated with the labels of the fourth plurality of labels from the storing host to the client host.

9. The method according to claim 8,

wherein the fourth plurality comprises more elements than the first plurality.

10. The method according to claim 8, wherein to each share stored on the storing host a reference counter is associated, the reference counter counts the number of times the associated share is used as a part of a message, the method further comprising:

decreasing the reference counter for a specific share each time a deletion of the corresponding specific share is demanded.

11. The method according claim 10, further comprising:

deleting the specific share on the storing host only when the reference counter is zero.

12. Secure storage system for private messages, the system comprising:

a storing host,

wherein the storing host is adapted to store a plurality of private messages in a mixed manner, wherein each of the plurality of private messages is divided into a plurality of message shares.

13. The secure storage system according claim 12, further comprising:

a client connectable to the storing host,

wherein the client is adapted to divide the private message into a first plurality of message shares.

14. The secure storage system according claim 13;

wherein the client is adapted to associate a respective label out of a plurality of labels to each share out of the first plurality of message shares; and

wherein the client is further adapted to store a list of the respective labels associated with the private message.

15. The secure storage system according claim 14,

wherein the client is further adapted to add bogus labels to the list.

16. The secure storage system according to claim 13,

wherein the client has a higher level of security than the storing host.

17. A computer readable medium in which a program for secure storing a private message is stored, which program, when executed by a processor, is adapted to control a method comprising:

dividing a first message into a first plurality of shares; and

storing the first plurality of shares on a storing host together with a second plurality of shares of at least a second message in a mixed manner.

18. A computer readable medium in which a program for retrieving a securely stored private message, which program, when executed by a processor, is adapted to control a method comprising:

sending a list comprising a fourth plurality of labels from a client to the storing host; and

transmitting the shares associated with the labels of the fourth plurality of labels from the storing host to the client host.

19. A program element for secure storing a private message is stored, which program, when executed by a processor, is adapted to control a method comprising:

dividing a first message into a first plurality of shares; and

storing the first plurality of shares on a storing host together with a second plurality of shares of at least a second message in a mixed manner.

20. A program element for retrieving a securely stored private message, which program, when executed by a processor, is adapted to control a method comprising:

dividing a first message into a first plurality of shares; and

storing the first plurality of shares on a storing host together with a second plurality of shares of at least a second message in a mixed manner.