MSSAN

• US 20100058054A1
• Filed: 06/01/2009
• Published: 03/04/2010
• Est. Priority Date: 12/01/2006
• Status: Abandoned Application

• Current Assignee: David Irvine
• Original Assignee: David Irvine
• Inventors: IRVINE, David
• Application Number:
  US12/476,162
• Publication Number:
  US 20100058054A1
• Time in Patent Office: Days
• US Class Current: 713/165
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/1095 Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes
• CPC Class Codes: H04L 69/40 for recovering from a failure of a protocol instance or entity, e.g. service redundancy protocols, protocol state redundancy or protocol service redirection management of faults, events, alarms or notifications in data switching networks H04L41/06

Abstract

This invention allows users to maximise their use of existing storage, processing power and network bandwidth resources. This is achieved through providing an enhanced level of data backup and restore that employs the initial encryption of data and storing one user'"'"'s data on another user'"'"'s hard drives through an anonymsing process. The efficiency of this process is enhanced when this invention is used in conjunction with self authentication which then provides the ability to log into a network anonymously from potentially anywhere.

Claims

1. A system with granular accessibility to data in distributed network or corporate network that allows one to access any computer via this system and have their own data and desktop represented to them as well as the ability to access digital resources without involving third party access controls or dedicated servers, the system comprising the following steps:

providing a perpetual data system to ensure there are several copies of each piece of data at several geographic locations generated by algorithms which monitor each other and create further copies on any type of failure or corruption of a single copy;

providing an anonymous authentication system to allow authentication access to a distributed system comprising the steps of;

receiving a user identifier;

retrieving an encrypted validation record identified by the user identifier;

decrypting the encrypted validation record so as to provide decrypted information; and

authenticating access to data in the distributed file system using the decrypted information to provide anonymous authentication; and

providing a n+p key sharing system to allow users to log in with a created base ID, the ID is validated from a supervising node—

a manager, users are provided with a further key (Manager'"'"'s key) to allow access by manager and the corporate structure decided upon can be viewed as a tree and accessed as such to provide access to all users'"'"' data beneath or equivalent in some cases to the current user level;

wherein the above combination provides a unique system with cumulative and synergistic benefits to allow people to effectively control access to their own digital resources without using servers, anonymous authentication of users, with an assurity of a self healing, fault resistant, and duplicate removal network and corporate tree network.

3. The system of claim 1 further comprising a self-encryption system that allows one to access any computer via this system and have their own data and desktop represented to them as well as the ability to secure digital resources without involving third party access controls or dedicated servers, the self-encryption system comprising the following steps:

providing a perpetual data system to ensure there are several copies of each piece of data at several geographic locations generated by algorithms which monitor each other and create further copies on any type of failure or corruption of a single copy;

providing a self encryption system to allow the data to be chunked, renamed, byte or bit swapped, encrypted and compressed through algorithms seeded by elements derived from the data itself so that data holds the key to reversing the processes used and these are recorded for later use and aids security and duplicate removal on a network wide basis;

providing a n+p key sharing system to allow users to log in with a created base ID, the ID is validated from a supervising node—

a manager, users are provided with a further key (Manager'"'"'s key) to allow access by manager and the corporate structure decided upon can be viewed as a tree and accessed as such to provide access to all users'"'"' data beneath or equivalent in some cases to the current user level; and

providing an anonymous authentication system to allow authentication access to a distributed system comprising the steps of;

receiving a user identifier;

retrieving an encrypted validation record identified by the user identifier;

decrypting the encrypted validation record so as to provide decrypted information; and

authenticating access to data in the distributed file system using the decrypted information to provide anonymous authentication;

wherein, the above combination provides a unique system with cumulative and synergistic benefits to allow people to effectively control access to their own digital resources and securely store data without using servers, anonymous authentication of users, with an assurity of a self healing, fault resistant, and duplicate removal network and corporate tree network.

5. The system of claim 1 further comprising a data maps system that allows one to access any computer via this system and have their own data and desktop represented to them as well as the ability to secure digital resources without involving third party access controls or dedicated servers, the system comprising the following steps:

providing a perpetual data system to ensure there are several copies of each piece of data at several geographic locations generated by algorithms which monitor each other and create further copies on any type of failure or corruption of a single copy;

providing a self encryption system to allow the data to be chunked, renamed, byte or bit swapped, encrypted and compressed through algorithms seeded by elements derived from the data itself so that data holds the key to reversing the processes used and these are recorded for later use and aids security and duplicate removal on a network wide basis;

providing a n+p key sharing system to allow users to log in with a created base ID, the ID is validated from a supervising node—

a manager, users are provided with a further key (Manager'"'"'s key) to allow access by manager and the corporate structure decided upon can be viewed as a tree and accessed as such to provide access to all users'"'"' data beneath or equivalent in some cases to the current user level;

providing a data maps system to allow creation of a database or ‘

map’

of associated file chunks and their identifiers and provides a mechanism that allows data that has preferably been split into chunks, to be stored, managed and accessed in a way that guarantees its convenient and secure availability to its owner(s); and

providing an anonymous authentication system to allow authentication access to a distributed system comprising the steps of;

receiving a user identifier;

retrieving an encrypted validation record identified by the user identifier;

decrypting the encrypted validation record so as to provide decrypted information; and

authenticating access to data in the distributed file system using the decrypted information to provide anonymous authentication;

wherein, the above combination provides a unique system with cumulative and synergistic benefits to allow people to effectively control access to their own digital resources and securely store data without using servers, anonymous authentication of users, with an assurity of a self healing, fault resistant, and duplicate removal network and corporate tree network.

7. The system of claim 1 further comprising shared access to private system that allows one to access any computer via this system and have their own data and desktop represented to them as well as the ability to securely share digital resources without involving third party access controls or dedicated servers, the system comprising the following steps:

providing a perpetual data system to ensure there are several copies of each piece of data at several geographic locations generated by algorithms which monitor each other and create further copies on any type of failure or corruption of a single copy;

providing a self encryption system to allow the data to be chunked, renamed, byte or bit swapped, encrypted and compressed through algorithms seeded by elements derived from the data itself so that data holds the key to reversing the processes used and these are recorded for later use and aids security and duplicate removal on a network wide basis;

providing a n+p key sharing system to allow users to log in with a created base ID, the ID is validated from a supervising node—

a manager, users are provided with a further key (Manager'"'"'s key) to allow access by manager and the corporate structure decided upon can be viewed as a tree and accessed as such to provide access to all users'"'"' data beneath or equivalent in some cases to the current user level;

providing a Data maps system to allow creation of a database or ‘

map¹ of associated file chunks and their identifiers and provides a mechanism that allows data that has preferably been split into chunks, to be stored, managed and accessed in a way that guarantees its convenient and secure availability to its owner(s);

providing an anonymous authentication system to allow authentication access to a distributed system comprising the steps of;

receiving a user identifier;

retrieving an encrypted validation record identified by the user identifier;

decrypting the encrypted validation record so as to provide decrypted information; and

authenticating access to data in the distributed file system using the decrypted information to provide anonymous authentication; and

providing a hared access to private files system to allow users to share concatenated data maps in a shared environment without requiring any additional physical resources such as servers, discs etc. by steps of, provision of public ID₁ encrypted communication and identifying data with very small file;

wherein, the above combination provides a unique system with cumulative and synergistic benefits to allow people to effectively control access to their own digital resources and securely store data, share private files &

secure data without using servers, anonymous authentication of users, with an assurity of a self healing, fault resistant, and duplicate removal network and corporate tree network.

9. The system of claim 1 further comprising MS messenger system that allows one to access any computer via this system and have their own data and desktop represented to them as well as the ability to communicate securely and share digital resources without involving third party access controls or dedicated servers, the system comprising the following steps:

providing a Perpetual data system to ensure there are several copies of each piece of data at several geographic locations generated by algorithms which monitor each other and create further copies on any type of failure or corruption of a single copy;

providing a self encryption system to allow the data to be chunked, renamed, byte or bit swapped, encrypted and compressed through algorithms seeded by elements derived from the data itself so that data holds the key to reversing the processes used and these are recorded for later use and aids security and duplicate removal on a network wide basis;

providing a n+p key sharing system to allow users to log in with a created base ID, the ID is validated from a supervising node—

a manager, users are provided with a further key (Manager'"'"'s key) to allow access by manager and the corporate structure decided upon can be viewed as a tree and accessed as such to provide access to all users'"'"' data beneath or equivalent in some cases to the current user level;

providing a data maps system to allow the creation of a database or ‘

map’

of associated file chunks and their identifiers and provides a mechanism that allows data that has preferably been split into chunks, to be stored, managed and accessed in a way that guarantees its convenient and secure availability to its owner(s);

providing an anonymous authentication system to allow authentication access to a distributed system comprising the steps of;

receiving a user identifier;

retrieving an encrypted validation record identified by the user identifier;

decrypting the encrypted validation record so as to provide decrypted information; and

authenticating access to data in the distributed file system using the decrypted information to provide anonymous authentication;

providing a shared access to private files system to allow users to share concatenated data maps in a shared environment without requiring any additional physical resources such as servers, discs etc. by steps of, provision of public ID, encrypted communication and identifying data with very small file;

providing a MS messenger system to allow synchronisation of system and user messages in an irrefutable manner, by allowing messaging where identity is validated to prevent spam and further uses this identity to allow digitally validated document signing and accounts are created from a very good known source of personal account information which need not be a public account and can be a private account as in a maidsafe.net account and communications are via a digital contract which is digitally signed and the conversation is subject to the contract terms;

wherein, the above combination provides a unique system with cumulative and synergistic benefits to allow people to effectively control access to their own digital resources and secure communications, store data &

share resources, share private files &

secure data without using servers, anonymous authentication of users, with an assurity of a self healing, fault resistant, and duplicate removal network and corporate tree network.

11. The system of claim 1, said method further comprising of the following steps;

logging in with a created base ID;

validating the ID from a supervising node (this is a manager); and

providing a further key (manager'"'"'s key) to allow access by manager.

12. The system of claim 11, wherein the corporate structure decided upon can be viewed as a tree and accessed as such, to provide access to all users'"'"' data beneath or equivalent in some cases to the current user level.

13. The system of claim 11, wherein the method further comprises providing file sharing via the implementation of the shared access to private files.

14. The system of claim 11, wherein all or some copies of data can be stored on the Internet to allow users access from any internet location, removing the requirement for VPN.

15. The system of claim 11, wherein the method further comprises providing contract conversations and an encrypted irrefutable messaging system.

16. The system of claim 11, wherein the method further comprises implementing a one time ID authentication process to ensure the safety of users and the obfuscation of particular user files and data, thereby dramatically enhancing security.

17. The system of claim 11, wherein the method further comprises implementing granular security levels comprising the following options:

all data merely backed up and local copy untouched;

all data backed up and local copy of chunks maintained (off line mode); and

all data removed from computer and only accessible from msSAN.

18. The system of claim 17 wherein the supervisor or maid ID can be replicated in an shared mechanism such as n+p key sharing, allowing a key to be split across many parties but require only a percentage to retrieve the main key.

2. A product with granular accessibility to data in distributed network or corporate network that allows one to access any computer via this product and have their own data and desktop represented to them as well as the ability to access digital resources without involving 3^rd party access controls or dedicated servers, the product comprising the following steps:

providing a perpetual data product to ensure there are several copies of each piece of data at several geographic locations generated by algorithms which monitor each other and create further copies on any type of failure or corruption of a single copy, and comprises of synergistic steps of storage &

retrieval, self-healing, security availability and peer ranking;

providing an anonymous authentication product to allow authentication access to a distributed system comprising of;

receiving a user identifier;

retrieving an encrypted validation record identified by the user identifier;

decrypting the encrypted validation record so as to provide decrypted information; and

authenticating access to data in the distributed file system using the decrypted information to provide anonymous authentication; and

providing a n+p key sharing product to allow users to log in with a created base ID, the ID is validated from a supervising node—

a manager, users are provided with a further key (Manager'"'"'s key) to allow access by manager and the corporate structure decided upon can be viewed as a tree and accessed as such to provide access to all users'"'"' data beneath or equivalent in some cases to the current user level;

wherein, the above combination provides a unique product with cumulative and synergistic benefits to allow people to effectively control access to their own digital resources without using servers, anonymous authentication of users, with an assurity of a self healing, fault resistant, and duplicate removal network and corporate tree network.

4. The product of claim 2 further comprising a self-encryption system that allows one to access any computer via this system and have their own data and desktop represented to them as well as the ability to secure digital resources without involving third party access controls or dedicated servers, the self-encryption system comprising the following steps:

providing a perpetual data system to ensure there are several copies of each piece of data at several geographic locations generated by algorithms which monitor each other and create further copies on any type of failure or corruption of a single copy;

providing a self encryption system to allow the data to be chunked, renamed, byte or bit swapped, encrypted and compressed through algorithms seeded by elements derived from the data itself so that data holds the key to reversing the processes used and these are recorded for later use and aids security and duplicate removal on a network wide basis;

providing a n+p key sharing system to allow users to log in with a created base ID, the ID is validated from a supervising node—

a manager, users are provided with a further key (Manager'"'"'s key) to allow access by manager and the corporate structure decided upon can be viewed as a tree and accessed as such to provide access to all users'"'"' data beneath or equivalent in some cases to the current user level; and

providing an anonymous authentication system to allow authentication access to a distributed system comprising the steps of;

receiving a user identifier;

retrieving an encrypted validation record identified by the user identifier;

decrypting the encrypted validation record so as to provide decrypted information; and

authenticating access to data in the distributed file system using the decrypted information to provide anonymous authentication;

wherein, the above combination provides a unique system with cumulative and synergistic benefits to allow people to effectively control access to their own digital resources and securely store data without using servers, anonymous authentication of users, with an assurity of a self healing, fault resistant, and duplicate removal network and corporate tree network.

6. The product of claim 2 further comprising data maps product that allows one to access any computer via this product and have their own data and desktop represented to them as well as the ability to secure digital resources without involving third party access controls or dedicated servers, the product comprising the following steps:

providing a perpetual data system to ensure there are several copies of each piece of data at several geographic locations generated by algorithms which monitor each other and create further copies on any type of failure or corruption of a single copy;

providing a self encryption system to allow the data to be chunked, renamed, byte or bit swapped, encrypted and compressed through algorithms seeded by elements derived from the data itself so that data holds the key to reversing the processes used and these are recorded for later use and aids security and duplicate removal on a network wide basis;

providing a n+p key sharing system to allow users to log in with a created base ID, the ID is validated from a supervising node—

a manager, users are provided with a further key (Manager'"'"'s key) to allow access by manager and the corporate structure decided upon can be viewed as a tree and accessed as such to provide access to all users'"'"' data beneath or equivalent in some cases to the current user level;

providing a data maps system to allow creation of a database or ‘

map’

of associated file chunks and their identifiers and provides a mechanism that allows data that has preferably been split into chunks, to be stored, managed and accessed in a way that guarantees its convenient and secure availability to its owner(s); and

providing an anonymous authentication system to allow authentication access to a distributed system comprising the steps of;

receiving a user identifier;

retrieving an encrypted validation record identified by the user identifier;

decrypting the encrypted validation record so as to provide decrypted information; and

authenticating access to data in the distributed file system using the decrypted information to provide anonymous authentication;

wherein, the above combination provides a unique system with cumulative and synergistic benefits to allow people to effectively control access to their own digital resources and securely store data without using servers, anonymous authentication of users, with an assurity of a self healing, fault resistant, and duplicate removal network and corporate tree network.

8. The product of claim 2 further comprising shared access to private product that allows one to access any computer via this product and have their own data and desktop represented to them as well as the ability to securely share digital resources without involving third party access controls or dedicated servers, the product comprising the following steps:

providing a perpetual data system to ensure there are several copies of each piece of data at several geographic locations generated by algorithms which monitor each other and create further copies on any type of failure or corruption of a single copy;

providing a self encryption system to allow the data to be chunked, renamed, byte or bit swapped, encrypted and compressed through algorithms seeded by elements derived from the data itself so that data holds the key to reversing the processes used and these are recorded for later use and aids security and duplicate removal on a network wide basis;

providing a n+p key sharing system to allow users to log in with a created base ID, the ID is validated from a supervising node—

a manager, users are provided with a further key (Manager'"'"'s key) to allow access by manager and the corporate structure decided upon can be viewed as a tree and accessed as such to provide access to all users'"'"' data beneath or equivalent in some cases to the current user level;

providing a Data maps system to allow creation of a database or ‘

map¹ of associated file chunks and their identifiers and provides a mechanism that allows data that has preferably been split into chunks, to be stored, managed and accessed in a way that guarantees its convenient and secure availability to its owner(s);

providing an anonymous authentication system to allow authentication access to a distributed system comprising the steps of;

receiving a user identifier;

retrieving an encrypted validation record identified by the user identifier;

decrypting the encrypted validation record so as to provide decrypted information; and

authenticating access to data in the distributed file system using the decrypted information to provide anonymous authentication; and

providing a hared access to private files system to allow users to share concatenated data maps in a shared environment without requiring any additional physical resources such as servers, discs etc. by steps of, provision of public ID₁ encrypted communication and identifying data with very small file;

wherein, the above combination provides a unique system with cumulative and synergistic benefits to allow people to effectively control access to their own digital resources and securely store data, share private files &

secure data without using servers, anonymous authentication of users, with an assurity of a self healing, fault resistant, and duplicate removal network and corporate tree network.

10. The product of claim 2 further comprising a MS messenger product that allows one to access any computer via this product and have their own data and desktop represented to them as well as the ability to communicate securely and share digital resources without involving third party access controls or dedicated servers, the product comprising the following steps:

providing a Perpetual data system to ensure there are several copies of each piece of data at several geographic locations generated by algorithms which monitor each other and create further copies on any type of failure or corruption of a single copy;

providing a self encryption system to allow the data to be chunked, renamed, byte or bit swapped, encrypted and compressed through algorithms seeded by elements derived from the data itself so that data holds the key to reversing the processes used and these are recorded for later use and aids security and duplicate removal on a network wide basis;

providing a n+p key sharing system to allow users to log in with a created base ID, the ID is validated from a supervising node—

a manager, users are provided with a further key (Manager'"'"'s key) to allow access by manager and the corporate structure decided upon can be viewed as a tree and accessed as such to provide access to all users'"'"' data beneath or equivalent in some cases to the current user level;

providing a data maps system to allow the creation of a database or ‘

map’

of associated file chunks and their identifiers and provides a mechanism that allows data that has preferably been split into chunks, to be stored, managed and accessed in a way that guarantees its convenient and secure availability to its owner(s);

providing an anonymous authentication system to allow authentication access to a distributed system comprising the steps of;

receiving a user identifier;

retrieving an encrypted validation record identified by the user identifier;

decrypting the encrypted validation record so as to provide decrypted information; and

authenticating access to data in the distributed file system using the decrypted information to provide anonymous authentication;

providing a shared access to private files system to allow users to share concatenated data maps in a shared environment without requiring any additional physical resources such as servers, discs etc. by steps of, provision of public ID, encrypted communication and identifying data with very small file;

providing a MS messenger system to allow synchronisation of system and user messages in an irrefutable manner, by allowing messaging where identity is validated to prevent spam and further uses this identity to allow digitally validated document signing and accounts are created from a very good known source of personal account information which need not be a public account and can be a private account as in a maidsafe.net account and communications are via a digital contract which is digitally signed and the conversation is subject to the contract terms;

wherein, the above combination provides a unique system with cumulative and synergistic benefits to allow people to effectively control access to their own digital resources and secure communications, store data &

share resources, share private files &

secure data without using servers, anonymous authentication of users, with an assurity of a self healing, fault resistant, and duplicate removal network and corporate tree network.

19. A computer program product for granular accessibility to data in distributed network or corporate network that allows one to access any computer via the product and have their own data and desktop represented to them as well as the ability to access digital resources without involving a third party access controls or dedicated servers, the product comprising:

a storage medium readable by a processing circuit and storing instructions for execution by the processing circuit;

a perpetual data system, wherein the perpetual data system ensures there are several copies of each piece of data at several geographic locations generated by algorithms which monitor each other and create further copies on any type of failure or corruption of a single copy;

an anonymous authentication system, wherein the anonymous authentication system allows authentication access to a distributed system comprising the steps of;

receiving a user identifier, retrieving an encrypted validation record identified by the user identifier, decrypting the encrypted validation record so as to provide decrypted information, and authenticating access to data in the distributed file system using the decrypted information to provide anonymous authentication; and

an n+p key sharing system, wherein the n+p sharing system allows users to log in with a created base ID, the ID is validated from a supervising node—

a manager, users are provided with a further key (Manager'"'"'s key) to allow access by manager and the corporate structure decided upon can be viewed as a tree and accessed as such to provide access to all user'"'"'s data beneath or equivalent in some cases to the current user level;

wherein the computer program product provides cumulative and synergistic benefits to allow people to effectively control access to their own digital resources without using servers, anonymous authentication of users, with an assurity of a self healing, fault resistant, and duplicate removal network and corporate tree network.