ENCRYPTION OF DATA FRAGMENTS IN A PEER-TO-PEER DATA BACKUP AND ARCHIVAL NETWORK

• US 20100088268A1
• Filed: 10/02/2008
• Published: 04/08/2010
• Est. Priority Date: 10/02/2008
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Hutzler, Richard, Garrett, Richard C., Buller, Steven J.
• Application Number:
  US12/244,764
• Publication Number:
  US 20100088268A1
• Time in Patent Office: Days
• US Class Current: 707/609
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload

Abstract

Embodiments of the present invention address deficiencies of the art in respect to data backup and archival tools and provide a method, system and computer program product for securing fragments in a peer-to-peer data backup and archival network. In an embodiment of the invention, a method for securing fragments in a peer-to-peer data backup and archival network can include partitioning a file into multiple, different fragments in a byte stream for storage in a peer-to-peer data backup and archival network, encrypting each of the fragments in the byte stream individually, and storing the encrypted fragments for the byte stream in different peer hosts in the peer-to-peer data backup and archival network.

Claims

1. A method for securing fragments in a peer-to-peer data backup and archival network, the method comprising:

partitioning a file into multiple, different fragments in a byte stream for storage in a peer-to-peer data backup and archival network;

encrypting each of the fragments in the byte stream individually; and

,

storing the encrypted fragments for the byte stream in different peer hosts in the peer-to-peer data backup and archival network.

2. The method of claim 1, further comprising re-ordering each of the fragments prior to storing the encrypted fragments in the different peer hosts.

3. The method of claim 1, wherein encrypting each of the fragments individually, comprises:

computing an encryption seed from a first fragment in the byte stream; and

,

encrypting each of the fragments in the byte stream with the encryption seed.

4. The method of claim 2, wherein re-ordering each of the fragments prior to storing the encrypted fragments in the different peer hosts, comprises computing a random new position for each encrypted one of the fragments in an encrypted form of the byte stream according to a random number provided to a split algorithm.

5. The method of claim 3, wherein encrypting each of the fragments in the byte stream with the encryption seed, comprises encrypting each of the fragments in the byte stream with the encryption seed, a first random number and a modulo of a second random number.

6. A peer-to-peer data backup and archival network configured for securing fragments in a peer-to-peer data backup and archival network a, the network comprising:

a data backup and archival tool providing an interface for providing a file to be stored in the peer-to-peer backup and archival network;

a plurality of peer hosts coupled to the tool; and

,

encryption and decryption logic coupled to the data backup and archival tool, the logic comprising program code enabled to encrypt fragments in a byte stream from the file individually prior to the tool storing the encrypted fragments for the byte stream in different peer hosts in the peer-to-peer data backup and archival network.

7. The network of claim 6, wherein the program code of the logic is further enabled to re-order the fragments in an encrypted form of the byte stream prior to the tool storing the encrypted fragments for the byte stream in different peer hosts in the peer-to-peer data backup and archival network.

8. A computer program product comprising a computer usable medium embodying computer usable program code for securing fragments in a peer-to-peer data backup and archival network, the computer program product comprising:

computer usable program code for partitioning a file into multiple, different fragments in a byte stream for storage in a peer-to-peer data backup and archival network;

computer usable program code for encrypting each of the fragments in the byte stream individually; and

,

computer usable program code for storing the encrypted fragments for the byte stream in different peer hosts in the peer-to-peer data backup and archival network.

9. The computer program product of claim 8, further comprising computer usable program code for re-ordering each of the fragments prior to storing the encrypted fragments in the different peer hosts.

10. The computer program product of claim 8, wherein the computer usable program code for encrypting each of the fragments individually, comprises:

computer usable program code for computing an encryption seed from a first fragment in the byte stream; and

,

computer usable program code for encrypting each of the fragments in the byte stream with the encryption seed.

11. The computer program product of claim 9, wherein the computer usable program code for re-ordering each of the fragments prior to storing the encrypted fragments in the different peer hosts, comprises computer usable program code for computing a random new position for each encrypted one of the fragments in an encrypted form of the byte stream according to a random number provided to a split algorithm.

12. The computer program product of claim 10, wherein the computer usable program code for encrypting each of the fragments in the byte stream with the encryption seed, comprises computer usable program code for encrypting each of the fragments in the byte stream with the encryption seed, a first random number and a modulo of a second random number.