SECURE STORAGE SYSTEM FOR DISTRIBUTED DATA

• US 20130173916A1
• Filed: 12/28/2011
• Published: 07/04/2013
• Est. Priority Date: 12/28/2011
• Status: Active Grant

• Current Assignee: Samsung Eletrônica da Amazônia Ltda (Samsung Electronics Co. Ltd.)
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Sato, Paulo Vitor
• Granted Patent: US 9,135,464 B2
• Time in Patent Office: Days
• US Class Current: 713/165
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: H04L 9/085 Secret sharing or secret splitting, e.g. threshold schemes

Abstract

The present invention relates to a system for distributed data storage that ensures the safety of the user data. In particular, the system of the present invention provides that the data stored in a cloud storage service are encrypted and their cryptographic keys are created from a remote device. In the context of the present invention, cloud is a set of servers that form an online service over the Internet, these servers are invisible to the user of the service pretending they form only a single server, thus forming a “cloud servers”. These keys will be divided and stored in cloud storage part and part on other devices.

Claims

1. ) Secure storage system for distributed data comprising a user (105), a device (110) having storage means (115) and connected to the Internet 120 to access the cloud 125, characterized by the fact that the data stored in said cloud are encrypted and their cryptographic keys are created on a device and stored in a divided manner, a portion in said storage cloud and another portion in device itself.

2. ) System according to claim 1, characterized by the fact that said device may be a portable, mobile or fixed.

3. ) System according to claim 1, characterized by the fact that the files stored in the cloud are divided into clusters and each cluster has its hash value computed.

4. ) System according to claim 1, characterized by the fact that, by comparing the calculated hash values with those stored in said cloud, it can be seen clusters which have been modified.

5. ) System in accordance with claim 1, characterized by the fact that when the system is initialized, if the first execution, the system automatically generates the encryption keys, otherwise the keys that are stored in the cloud will be loaded in the system, and the following decrypted symmetric key.

6. ) System in accordance with claim 1, characterized by the fact that, from said decrypted symmetric key, the system goes to the main menu, and stands by.

7. ) System in accordance with claim 1, characterized by the fact that, when a user interaction occurs, it is checked whether:

it is a request for writing to the file, otherwise the file is opened in read mode only;

it is a request for writing to, there are three options;

a) removing file, b) adding a new file or c) upgrading an existing file, and

after the operation, the system will return to the standby state.

8. ) System according to claim 1, characterized by the fact that, when the user wants to exit the system, as nothing was saved in the device, the memory used is released and all keys calculated and downloaded from the cloud will disappear from the device.

9. ) System according to claim 1, characterized in that it uses three pairs of asymmetric keys and a symmetric key, and to store a portion of these keys in the cloud will always be necessary that the user is actually logged into the system so that it is possible to decipher any information, requiring both keys stored on the device, and stored in the cloud storage.

10. ) System according to claim 1, characterized by the fact that the use of said hashed files, transmitting only the modified minimizes the transfer of data across the network.

11. ) System according to claim 1, characterized by the fact that when using a list containing the number of clusters for a particular file, it is not necessary that the clusters are sequential, making it more difficult to attack able to break the encryption.

12. ) System according to claim 1, characterized by the fact that all traffic between the device (110) and the cloud (125) is done using a method of secure data traffic type HTTPS.