Data Control Method of Cloud Storage

• US 20120134494A1
• Filed: 12/01/2010
• Published: 05/31/2012
• Est. Priority Date: 11/29/2010
• Status: Active Grant

• Current Assignee: Beijing Z & W Technology Consulting Company Limited
• Original Assignee: Beijing Z & W Technology Consulting Company Limited
• Inventors: Liu, Hui
• Granted Patent: US 8,595,512 B2
• Time in Patent Office: Days
• US Class Current: 380/44
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: H04L 9/0656 Pseudorandom key sequence combined element-for-element with data sequence, e.g. one-time-pad [OTP] or Vernam's cipher
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage

Abstract

The present application relates to the field of technology of cloud storage data security, and in particular, relates to a data control method of cloud storage. The method comprises: converting the original data by a preset method into irreversible data blocks to form a physical part of the original data, and storing it in the cloud storage data center; outputting information necessary for data restoration of the process of converting the original data to the physical part, as a logical part of the original data, and storing the logical part of the original data in an original data owner controlled storage media. In this invention, the original data to be stored is converted into the physical part, which is then stored in a cloud storage data center. The logical part of the original data required for restoring the physical part to the original data is controlled by owners of the original data. Therefore, the original data owners can control the physical part of data, which physically occupies a large space by controlling the logical part, which physically occupies a small space and therefore, control their data in a cloud storage data center.

Claims

1. A data control method for cloud storage comprising:

converting original data into irreversible data blocks via a preset method to form a physical part of the original data;

storing the physical part of the original data in a cloud storage data center;

outputting information, which is necessary for restoring the physical part back to the original data, as a logical part of the original data; and

storing the logical part of the original data in a storage media, which is controlled by the owner of the original data.

2. The method of claim 1 wherein the physical part of the original data is a string of computer-readable 0, 1 values without the characteristics of the original data;

the physical part of the original data is not reversible in the absence of the logical part of the original data.

3. The method of claim 1 wherein the logical part of the original data comprises information concerning the attribute, access right and verification value of the original data.

4. The method of claim 1 wherein the storage media is selected from the group consisting of a portable storage media, alocal server, a server that is not being used for the storage of the physical part of the original data, and combinations thereof.

5. The method of claim 1 wherein the converting step comprises:

dividing the original data, starting from the data head by a predetermined length, into several data blocks, and de-duplicating the data blocks before forming source data;

restructuring contents of the source data to form new data; and

encrypting the new data with a one-time pad encryption algorithm to form the physical part of the original data.

6. The method of claim 5 wherein the restructuring step comprises:

acquiring data in the same position of each source data, based on queuing discipline of preset fixed order; and

combining the acquired data in order to form new data.

7. The method of claim 5 wherein the restructuring step comprises:

traversing the source data corresponding to the new data to be formed, based on preset rules for data restructuring;

acquiring data from the source data, based on preset rules for data acquisition; and

combining the acquired data in order to form new data.

8. The method claim 5 wherein the encrypting step comprises:

generating and storing true random numbers with the predetermined length and the random seed with a predetermined length consisting of said random numbers, based on a preset method;

acquiring the random data for several times from the random seed, and cascading the data acquired every time into a true random data string with no less than the length of the plaintext;

generating a true random cryptographic key with the same length as the plaintext, based on the true random data string; and

encrypting each new data with the true random cryptographic key.

9. The method of claim 8 wherein the encrypting step comprises:

outputting and saving information of the corresponding relationship between the new data and source data, between the source data and the original data, and between the new data and true random cryptographic key, into the logical part of the original data.