System, Method and Apparatus for Securely Saving/Retrieving Data on a Data Storage

• US 20140082376A1
• Filed: 09/13/2013
• Published: 03/20/2014
• Est. Priority Date: 09/14/2012
• Status: Abandoned Application

• Current Assignee: Texas Tech University System
• Original Assignee: Texas Tech University System
• Inventors: Roden, Timothy E., Gray, Mathew, Wallace, Andy
• Application Number:
  US14/026,119
• Publication Number:
  US 20140082376A1
• Time in Patent Office: Days
• US Class Current: 713/193
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6272 by registering files or documents with a third party
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/062 for key distribution, e.g. centrally by trusted party cryptographic mechanisms or cryptographic arrangements for key distribution involving a central third party H04L9/0819
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics

Abstract

A system, method and apparatus securely save data by receiving a file from a user device, wherein the file contains an encrypted data and has a file name. The encrypted data is then split into two or more encrypted data chunks having a specified size. A chunk number is assigned to each of the two or more encrypted data chunks. Each of the two or more encrypted data chunks is saved in a chunk file having a chunk file name comprising a combination of the file name and the chunk number. Each chunk file name is then encrypted, and each chunk file having the encrypted chunk file name is sent to the data storage. The process is essentially reversed to retrieve the data.

Claims

1. A method for securely saving a data on a data storage using a server device having a one or more processors and one or more communication interfaces, the method comprising the steps of:

receiving a file from a user device via the one or more communication interfaces, wherein the file contains an encrypted data and has a file name;

splitting the encrypted data into two or more encrypted data chunks having a specified size;

assigning a chunk number to each of the two or more encrypted data chunks;

saving each of the two or more encrypted data chunks in a chunk file having a chunk file name comprising a combination of the file name and the chunk number;

encrypting each chunk file name; and

sending each chunk file having the encrypted chunk file name to the data storage via the one or more interfaces.

2. The method as recited in claim 1, further comprising the steps of:

generating an encryption/decryption key for the user device or a user of the user device; and

providing the encryption/decryption key to the user device.

3. The method as recited in claim 1, wherein the encrypted data was compressed prior to being encrypted.

4. The method as recited in claim 1, further comprising the step of saving a meta data about the received file.

5. The method as recited in claim 4, wherein the meta data comprises a length of the received file.

6. The method as recited in claim 1, wherein the specified size comprises 64 KB.

7. The method as recited in claim 1, further comprising the step of initializing the server device using one or more parameters.

8. The method as recited in claim 1, further comprising the step of accepting a secure connection from the user device via the one or more interfaces.

9. The method as recited in claim 1, further comprising the step of establishing a connection with the data storage via the one or more interfaces.

10. The method as recited in claim 1, wherein the data storage comprises a remote data storage device, a network data storage device or a cloud data storage server.

11. The method as recited in claim 1, wherein the user device comprises a mobile phone, a mobile computing device, a computer, a workstation, a laptop, a tablet, a handheld computing device, a handheld communications device, a personal data assistant, an entertainment device or a data storage device.

12. The method as recited in claim 1, further comprising the step of creating an account for a user.

13. The method as recited in claim 1, further comprising the steps of:

receiving a login data from the user device; and

authenticating the login data.

14. The method as recited in claim 1, further comprising the step of determining whether another file having the file name has been received.

15. The method as recited in claim 1, further comprising the step of sending a message to the user device that the file cannot be accepted because the file name has already been used.

16. The method as recited in claim 1, wherein the user device creates the encrypted data using an encryption/decryption key based on a user key and a dynamic variable.

17. The method as recited in claim 16, wherein the dynamic variable is based on one or more characteristics of the file.

18. The method as recited in claim 16, wherein the user device compresses the data prior to encrypting the data.

19. The method as recited in claim 16, wherein the encryption/decryption key is destroyed after it is used.

20. A method for retrieving a data on a data storage using a server device having a one or more processors and one or more communication interfaces, the method comprising the steps of:

receiving a request for a file from a user device via the one or more communication interfaces, wherein the file contains an encrypted data and has a file name;

retrieving two or more chunk file names associated with the file;

encrypting each chunk file name;

retrieving each chunk file using the encrypted chunk file names from the data storage via the one or more interfaces, wherein each chunk file contains an encrypted data chunk having a specified size;

combining the encrypted data chunks into the file having the file name; and

sending the file to the user device via the one or more communication interfaces.

21. The method as recited in claim 20, further comprising the step of retrieving a meta data about the file.

22. The method as recited in claim 21, wherein the meta data comprises a length of the file.

23. The method as recited in claim 20, wherein the specified size comprises 64 KB.

24. The method as recited in claim 20, further comprising the step of accepting a secure connection from the user device via the one or more interfaces.

25. The method as recited in claim 20, further comprising the step of establishing a connection with the data storage via the one or more interfaces.

26. The method as recited in claim 20, wherein the data storage comprises a remote data storage device, a network data storage device or a cloud data storage server.

27. The method as recited in claim 20, wherein the user device comprises a mobile phone, a mobile computing device, a computer, a workstation, a laptop, a tablet, a handheld computing device, a handheld communications device, a personal data assistant, an entertainment device or a data storage device.

28. The method as recited in claim 20, wherein the user device decrypts the encrypted data using an encryption/decryption key based on a user key and a dynamic variable.

29. The method as recited in claim 28, wherein the dynamic variable is based on one or more characteristics of the file.

30. The method as recited in claim 28, wherein the user device decompresses the data after decrypting the encrypted data.

31. The method as recited in claim 28, wherein the encryption/decryption key is destroyed after it is used.

32. An apparatus for securely saving a data on a data storage comprising:

one or more interfaces;

one or more processors communicably coupled to the one or more interfaces; and

wherein the one or more processors;

receive a file from a user device via the one or more communication interfaces, wherein the file contains an encrypted data and has a file name,

split the encrypted data into two or more encrypted data chunks having a specified size,

assign a chunk number to each of the two or more encrypted data chunks,

save each of the two or more encrypted data chunks in a chunk file having a chunk file name comprising a combination of the file name and the chunk number,

encrypt each chunk file name, and

send each chunk file having the encrypted chunk file name to the data storage via the one or more interfaces.

33. The apparatus as recited in claim 32, wherein the one or more processors further:

generate an encryption/decryption key for the user device or a user of the user device; and

provide the encryption/decryption key to the user device.

34. The apparatus as recited in claim 32, wherein the encrypted data was compressed prior to being encrypted.

35. The apparatus as recited in claim 32, wherein the one or more processors further save a meta data about the received file.

36. The apparatus as recited in claim 35, wherein the meta data comprises a length of the received file.

37. The apparatus as recited in claim 32, wherein the specified size comprises 64 KB.

38. The apparatus as recited in claim 32, wherein the one or more processors further initialize the server device using one or more parameters.

39. The apparatus as recited in claim 32, wherein the one or more processors further accept a secure connection from the user device via the one or more interfaces.

40. The apparatus as recited in claim 32, wherein the one or more processors further establish a connection with the data storage via the one or more interfaces.

41. The apparatus as recited in claim 32, wherein the data storage comprises a remote data storage device, a network data storage device or a cloud data storage server.

42. The apparatus as recited in claim 32, wherein the user device comprises a mobile phone, a mobile computing device, a computer, a workstation, a laptop, a tablet, a handheld computing device, a handheld communications device, a personal data assistant, an entertainment device or a data storage device.

43. The apparatus as recited in claim 32, wherein the one or more processors further create an account for a user.

44. The apparatus as recited in claim 32, wherein the one or more processors further:

receive a login data from the user device; and

authenticate the login data.

45. The apparatus as recited in claim 32, wherein the one or more processors further determine whether another file having the file name has been received.

46. The apparatus as recited in claim 32, wherein the one or more processors further send a message to the user device that the file cannot be accepted because the file name has already been used.

47. The apparatus as recited in claim 32, wherein the user device creates the encrypted data using an encryption/decryption key based on a user key and a dynamic variable.

48. The apparatus as recited in claim 47, wherein the dynamic variable is based on one or more characteristics of the file.

49. The apparatus as recited in claim 47, wherein the user device compresses the data prior to encrypting the data.

50. The apparatus as recited in claim 47, wherein the encryption/decryption key is destroyed after it is used.

51. An apparatus for retrieving a data on a data storage comprising:

one or more interfaces;

one or more processors communicably coupled to the one or more interfaces; and

wherein the one or more processors;

receive a request for a file from a user device via the one or more communication interfaces, wherein the file contains an encrypted data and has a file name,

retrieve two or more chunk file names associated with the file,

encrypt each chunk file name,

retrieve each chunk file using the encrypted chunk file names from the data storage via the one or more interfaces, wherein each chunk file contains an encrypted data chunk having a specified size,

combine the encrypted data chunks into the file having the file name, and

send the file to the user device via the one or more communication interfaces.

52. The apparatus as recited in claim 51, wherein the one or more processors further retrieve a meta data about the file.

53. The apparatus as recited in claim 52, wherein the meta data comprises a length of the file.

54. The apparatus as recited in claim 51, wherein the specified size comprises 64 KB.

55. The apparatus as recited in claim 51, wherein the one or more processors further accept a secure connection from the user device via the one or more interfaces.

56. The apparatus as recited in claim 51, wherein the one or more processors further establish a connection with the data storage via the one or more interfaces.

57. The apparatus as recited in claim 51, wherein the data storage comprises a remote data storage device, a network data storage device or a cloud data storage server.

58. The apparatus as recited in claim 51, wherein the user device comprises a mobile phone, a mobile computing device, a computer, a workstation, a laptop, a tablet, a handheld computing device, a handheld communications device, a personal data assistant, an entertainment device or a data storage device.

59. The apparatus as recited in claim 51, wherein the user device decrypts the encrypted data using an encryption/decryption key based on a user key and a dynamic variable.

60. The apparatus as recited in claim 59, wherein the dynamic variable is based on one or more characteristics of the file.

61. The apparatus as recited in claim 59, wherein the user device decompresses the data after decrypting the encrypted data.

62. The apparatus as recited in claim 59, wherein the encryption/decryption key is destroyed after it is used.

63. A system for securely saving a data comprising:

one or more user devices;

a data storage;

one or more networks; and

a server device communicably coupled to the one or more user devices and the data storage via the one or more networks, wherein the server device;

receives a file from the one or more user devices, wherein the file contains an encrypted data and has a file name,

splits the encrypted data into two or more encrypted data chunks having a specified size,

assigns a chunk number to each of the two or more encrypted data chunks,

saves each of the two or more encrypted data chunks in a chunk file having a chunk file name comprising a combination of the file name and the chunk number,

encrypts each chunk file name, and

sends each chunk file having the encrypted chunk file name to the data storage.

64. The system as recited in claim 63, wherein the one or more processors further:

generate an encryption/decryption key for the user device or a user of the user device; and

provide the encryption/decryption key to the user device.

65. The system as recited in claim 63, wherein the encrypted data was compressed prior to being encrypted.

66. The system as recited in claim 63, wherein the one or more processors further save a meta data about the received file.

67. The system as recited in claim 66, wherein the meta data comprises a length of the received file.

68. The system as recited in claim 63, wherein the specified size comprises 64 KB.

69. The system as recited in claim 63, wherein the one or more processors further initialize the server device using one or more parameters.

70. The system as recited in claim 63, wherein the one or more processors further accept a secure connection from the user device via the one or more interfaces.

71. The system as recited in claim 63, wherein the one or more processors further establish a connection with the data storage via the one or more interfaces.

72. The system as recited in claim 63, wherein the data storage comprises a remote data storage device, a network data storage device or a cloud data storage server.

73. The system as recited in claim 63, wherein the user device comprises a mobile phone, a mobile computing device, a computer, a workstation, a laptop, a tablet, a handheld computing device, a handheld communications device, a personal data assistant, an entertainment device or a data storage device.

74. The system as recited in claim 63, wherein the one or more processors further create an account for a user.

75. The system as recited in claim 63, wherein the one or more processors further:

receive a login data from the user device; and

authenticate the login data.

76. The system as recited in claim 63, wherein the one or more processors further determine whether another file having the file name has been received.

77. The system as recited in claim 63, wherein the one or more processors further send a message to the user device that the file cannot be accepted because the file name has already been used.

78. The system as recited in claim 63, wherein the user device creates the encrypted data using an encryption/decryption key based on a user key and a dynamic variable.

79. The system as recited in claim 78, wherein the dynamic variable is based on one or more characteristics of the file.

80. The system as recited in claim 78, wherein the user device compresses the data prior to encrypting the data.

81. The system as recited in claim 78, wherein the encryption/decryption key is destroyed after it is used.

82. A system for securely retrieving a data comprising:

one or more user devices;

a data storage;

one or more networks; and

a server device communicably coupled to the one or more user devices and the data storage via the one or more networks, wherein the server device;

receives a request for a file from a user device, wherein the file contains an encrypted data and has a file name,

retrieves two or more chunk file names associated with the file,

encrypts each chunk file name,

retrieves each chunk file using the encrypted chunk file names from the data storage, wherein each chunk file contains an encrypted data chunk having a specified size,

combines the encrypted data chunks into the file having the file name, and

sends the file to the user device via the one or more communication interfaces.

83. The system as recited in claim 82, wherein the one or more processors further retrieve a meta data about the file.

84. The system as recited in claim 83, wherein the meta data comprises a length of the file.

85. The system as recited in claim 82, wherein the specified size comprises 64 KB.

86. The system as recited in claim 82, wherein the one or more processors further accept a secure connection from the user device via the one or more interfaces.

87. The system as recited in claim 82, wherein the one or more processors further establish a connection with the data storage via the one or more interfaces.

88. The system as recited in claim 82, wherein the data storage comprises a remote data storage device, a network data storage device or a cloud data storage server.

89. The system as recited in claim 82, wherein the user device comprises a mobile phone, a mobile computing device, a computer, a workstation, a laptop, a tablet, a handheld computing device, a handheld communications device, a personal data assistant, an entertainment device or a data storage device.

90. The system as recited in claim 82, wherein the user device decrypts the encrypted data using an encryption/decryption key based on a user key and a dynamic variable.

91. The system as recited in claim 90, wherein the dynamic variable is based on one or more characteristics of the file.

92. The system as recited in claim 90, wherein the user device decompresses the data after decrypting the encrypted data.

93. The system as recited in claim 90, wherein the encryption/decryption key is destroyed after it is used.