METHOD AND SYSTEM FOR ELECTRONIC CONTENT STORAGE AND RETRIEVAL USING GALOIS FIELDS AND INFORMATON ENTROPY ON CLOUD COMPUTING NETWORKS

• US 20140189792A1
• Filed: 11/21/2013
• Published: 07/03/2014
• Est. Priority Date: 04/29/2011
• Status: Active Grant

• Current Assignee: Stephen Lesavich, Zachary C. Lesavich
• Original Assignee: Stephen Lesavich, Zachary C. Lesavich
• Inventors: LESAVICH, Stephen, Lesavich, Zachary C.
• Granted Patent: US 9,137,250 B2
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: G06F 16/951 Indexing; Web crawling techniques
• CPC Class Codes: G06F 16/9554 by using bar codes
• CPC Class Codes: G06F 16/958 Organisation or management of web site content, e.g. publishing, maintaining pages or automatic linking
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04W 4/60 Subscription-based services using application servers or record carriers, e.g. SIM application toolkits
• CPC Class Codes: H04W 80/045 involving different protocol versions, e.g. MIPv4 and MIPv6

Abstract

A method and system for electronic content storage and retrieval using Galois Fields and information entropy on cloud computing networks. Electronic content is divided into plural portions and stored in plural cloud storage objects based on determined information entropy of the electronic content thereby reducing location guessing of the electronic content using information gain and mutual information. Storage locations for the plural cloud storage objects are selected using a Galois field. The plural cloud storage objects are distributed across the cloud network. The Galois filed and information entropy providing various levels of security and privacy for the electronic content.

Claims

1. A method for automatic storage of electronic content with cloud computing, comprising:

receiving electronic content on a first cloud application and storing in a first non-transitory computer readable medium on a cloud server network device with the one or more processors via a cloud communications network comprising;

one or more public communication networks, one or more private networks, one or more community networks and one or more hybrid networks;

determining with the first cloud application a set of plurality of information entropy probabilities for a pre-determined set of symbols for a pre-determined alphabet on a first plurality of portions of the received electronic content;

splitting with the first cloud application the received electronic content into a second plurality of portions based on a selected set of information entropy probabilities from the determined set of plurality of information entropies with the first cloud application,

thereby providing a first level of security and privacy for storing the received electronic content based on the determined set of plurality of information entropies;

saving with the first cloud application the second plurality of portions in a plurality of cloud storage objects;

determining with the first cloud application a plurality of address locations of selected ones of a plurality of other different cloud server network devices each with one or more processors with a Galois field,

wherein an input to the Galois field produces an output including a address location of a desired cloud server on the cloud communications network, and

wherein the address location can be located anywhere on the one or more public communication networks, one or more private networks, one or more community networks and one or more hybrid networks of the cloud communications network;

storing securely with the first cloud application the determined plurality of address locations in a cloud content location map in the first non-transitory computer readable medium on the cloud server network device; and

sending securely with the first cloud application the plurality of cloud storage objects to the determined selected ones of the plurality of other different cloud servers on the cloud communications network with the determined plurality of address locations,

thereby providing a second level of security and privacy for storing the received electronic content based on use of the Galois field,

wherein the plurality of cloud storage objects are distributed and located in a plurality of different locations on the cloud communications network, and

wherein none of the selected ones of plurality of other cloud server network devices can individually determine locations of all portions of the received electronic content on the cloud communications network, thereby providing a third level of security and privacy for storing the received electronic content on the cloud communications network.

3. The method of claim 1 wherein the step of determining a plurality of address locations includes determining a plurality of virtual cloud communication network addresses, a plurality of Internet Protocol (IP) addresses, a plurality of Medium Access Control (MAC) addresses, Transmission Control Protocol (TCP) port designations, User Datagram Protocol (UDP) port designations, other networking protocol port designations or a combination thereof, of the selected ones of the plurality of other cloud server network devices on the cloud communications network.

4. The method of claim 1 wherein the Galois field produces the output by completing one or more field operations including field multiplication operations on two or more inputs to the Galois field and wherein the Galois field includes two or more polynomials and field operations are completed over the two or more polynomials.

5. The method of claim 1 wherein the pre-determined alphabet includes an English language alphabet, a QR code alphabet, a binary alphabet, a hexadecimal alphabet, an octal alphabet, a text messaging alphabet, a binary encoded ASCII alphabet, or a plaintext alphabet or a cipher text alphabet for an encryption method or security method.

6. The method of claim 1 wherein the step of determining with the first cloud application a set of plurality of information entropy probabilities on a first plurality of portions of the received electronic content comprises:

creating with the first cloud application the first plurality of portions by determining an average message size (m) in the received electronic content in terms of probabilities of various patterns of symbols in a pre-determined language occurring in a selected portion (m) of the received electronic content comprising a total message space (M); and

determining the plurality of information entropy probabilities from the first cloud application as I(m)=−

log_p(m), where p(m)=P_r(M=m) is a probability that message (m) is chosen from all possible choices in the total message space (M).

7. The method of claim 1 wherein the step of determining with the first cloud application a set of plurality of information entropy probabilities on a first plurality of portions of the received electronic content comprises:

creating with the first cloud application the first plurality of portions by determining an average message size (m) in the received electronic content in terms of probabilities of various patterns of symbols in a pre-determined language occurring in a selected portion (m) of the received electronic content comprising a total message space (M); and

determining the plurality of information entropy probabilities from the first cloud application as a set mutual information I(X;

Y) values of two discrete random variables X and Y obtained from selected portions m_X and m_Y of the received of the received electronic content (M), as

8. The method of claim 1 wherein the cloud storage object includes one or more of a REpresentational State Transfer (REST) or Simple Object Access Protocol (SOAP), Lightweight Directory Access Protocol (LDAP) cloud storage objects, portions thereof, or combinations thereof.

9. The method of claim 1 wherein the step of storing securely includes securely storing the cloud content location map in an encrypted format including using a Discrete Logarithm Integrated Encryption Scheme (DLIES), a Elliptic Curve Integrated Encryption Scheme (ECIES), a user generated biometric encryption method, or a Homomorphic encryption method.

10. The method of claim 1 wherein the sending securely step includes securely sending using a Wireless Encryption Protocol (WEP), Wireless-Wi-Fi Protected Access (WPA), Robust Security Network (RSN), Advanced Encryption Standard (AES), Data Encryption Standard (DES), Triple Data Encryption Standard (3DES), Secure Hash Algorithm (SHA), Message Digest-5 (MD-5), Electronic Code Book (ECB), Diffie and Hellman (DH), HyperText Transport Protocol Secure, (HTTPs), Secure Sockets Layer (SSL), one-time pad (OTP), Transport Layer Security (TLS) security method, Discrete Logarithm Integrated Encryption Scheme (DLIES), a Elliptic Curve Integrated Encryption Scheme (ECIES), biometric or a Homomorphic encryption method.

11. The method of claim 1 wherein the cloud server network device and the target network device include a wireless networking interface comprising a Worldwide Interoperability for Microwave Access (WiMax) wireless networking interface with 4^th generation (4G) wireless speeds or faster for communicating with the cloud communications network.

12. The method of claim 1 wherein the cloud communications network includes an electronic content storage and retrieval service, a cloud computing platform for the electronic content storage and retrieval service and a cloud computing infrastructure for the an electronic content storage and retrieval service and wherein the cloud communications network includes on-demand electronic content storage and retrieval services, broadband network access, resource pooling, rapid elasticity and measured network services for an electronic content storage and retrieval services.

13. The method of claim 1 wherein the first cloud application offers a cloud computing Infrastructure as a Service (IaaS), a cloud Platform as a Service (PaaS) and offers a Specific cloud software service as a Service (SaaS) including a specific cloud software service for electronic content storage and retrieval.

14. The method of claim 1 further comprising:

receiving in real-time a first request message on the first cloud application on the cloud server network device with the one or more processors from a second cloud application stored in a second non-transitory computer readable medium on a target network device with one or more processors via the cloud communications network,

wherein the first request message includes a request for desired cloud electronic content stored in the plurality of cloud storage objects stored on the selected ones of the plurality of other different cloud server network devices distributed across one or more of the network comprising the cloud communications network, and

wherein the plurality of different cloud storage objects function as a single, transparent secure storage object for electronic content on the cloud communications network;

retrieving securely the cloud content location map on the first cloud application on the cloud server network device, wherein the cloud content location map includes address locations of the selected ones of the plurality of other different cloud server network devices on the cloud communications network;

sending from the first cloud application on the cloud server network device a plurality of second request messages for the desired cloud electronic content to the selected ones of the plurality of other different cloud server network devices identified in the retrieved cloud content location map and located on the public communication network, the one or more private networks, community networks and hybrid networks comprising the cloud communications network;

receiving on the cloud computing application on the server network device a plurality of response messages including one or more individual portions of the desired cloud electronic content in the plurality of cloud storage objects from the selected ones of the plurality of other different cloud server network devices on the public communication network, the one or more private networks, community networks and hybrid networks comprising the cloud communications network;

combining transparently on the first cloud application on the first server network device the one or more individual components of the desired cloud electronic content from the plurality of cloud storage objects from the received plurality of response messages into a final desired electronic cloud content component; and

sending securely in real-time the final desired cloud electronic content component as the requested desired cloud electronic content from the first cloud application on the cloud server network device to the target network device via the cloud communications network,

wherein the second cloud application on the target network device cannot determine the desired cloud electronic content was stored in the retrieved plurality of cloud storage objects and cannot determine which of the selected ones of the plurality of other different cloud server network devices on which the one or more public, private, community or hybrid networks on the cloud communications network may have stored portions of the desired cloud electronic content,

thereby providing a fourth layer of security and privacy for the desired cloud electronic content on the cloud communications network.

15. The method of claim 14 wherein the first and second cloud applications include access to a plurality of television sites, Internet television sites, social media networking sites, music distribution sites or search engine sites.

16. The method of claim 14 wherein the desired cloud electronic content can be requested from the cloud communications network and displayed by the second cloud application on the target network device anywhere the target network device is physically located near or in communications with, any server network device on of the plurality of networks comprising the cloud communications network.

17. The method of claim 14 further comprising:

sending from the first cloud application on the cloud server network device a plurality of third request messages to the selected ones of the plurality of other different cloud server network devices identified in the retrieved cloud content location map to de-activate the plurality of portions of desired cloud electronic content stored in the plurality of cloud storage objects stored on the selected ones of the plurality of other different cloud server network devices;

determining from the first cloud application a new plurality of address locations of new selected ones of a plurality of other different cloud server network devices each with one or more processors with the Galois field;

storing securely with the first cloud application the determined new plurality of address locations in the cloud content location map with the first cloud application in the first non-transitory computer readable medium on the cloud server network device; and

sending securely from the first cloud application the received plurality of cloud storage objects to the new determined selected ones of the plurality of other different cloud servers on the cloud communications network with the determined plurality of address locations,

wherein the retrieved plurality of cloud storage objects are distributed and located in a new plurality of different locations on one or more public, private, community or hybrid networks on the cloud communications network.

18. The method of claim 17 wherein de-activating the plurality of portions of desired cloud electronic content stored in the plurality of cloud storage objects includes encrypting the plurality of cloud storage objects or deleting the plurality of cloud storage objects.

19. The method of claim 17 wherein the input to the Galois field includes physical location information of the target network device and the output of the Galois field includes a new plurality of address locations of new selected ones of the plurality of other different cloud server network devices which are the closest to a current physical location of the target network device.

2. A computer readable medium having stored therein a plurality of instructions for causing one more processors on one more network devices connected to a cloud communications network to execute the steps of:

receiving electronic content on a first cloud application and storing in a first non-transitory computer readable medium on a cloud server network device with the one or more processors via a cloud communications network comprising;

one or more public communication networks, one or more private networks, one or more community networks and one or more hybrid networks;

determining with the first cloud application a set of plurality of information entropy probabilities for a pre-determined set of symbols for a pre-determined alphabet on a first plurality of portions of the received electronic content;

splitting with the first cloud application the received electronic content into a second plurality of portions based on a selected set of information entropy probabilities from the determined set of plurality of information entropies with the first cloud application,

thereby providing a first level of security and privacy for storing the received electronic content based on the determined set of plurality of information entropies;

saving with the first cloud application the second plurality of portions in a plurality of cloud storage objects;

determining with the first cloud application a plurality of address locations of selected ones of a plurality of other different cloud server network devices each with one or more processors with a Galois field,

wherein an input to the Galois field produces an output including a address location of a desired cloud server on the cloud communications network, and

wherein the address location can be located anywhere on the one or more public communication networks, one or more private networks, one or more community networks and one or more hybrid networks of the cloud communications network;

storing securely with the first cloud application the determined plurality of address locations in a cloud content location map in the first non-transitory computer readable medium on the cloud server network device; and

sending securely with the first cloud application the plurality of cloud storage objects to the determined selected ones of the plurality of other different cloud servers on the cloud communications network with the determined plurality of address locations,

thereby providing a second level of security and privacy for storing the received electronic content based on use of the Galois field,

wherein the plurality of cloud storage objects are distributed and located in a plurality of different locations on the cloud communications network, and

wherein none of the selected ones of plurality of other cloud server network devices can individually determine locations of all portions of the received electronic content on the cloud communications network, thereby providing a third level of security and privacy for storing the received electronic content on the cloud communications network.

20. A system for electronic content storage and retrieval on a cloud computing network, comprising in combination for:

one or more network devices each with one or more processors connected to a cloud communications network, the one or more network devices executing a plurality of instructions in one or more non-transitory computer readable mediums and configured for;

for receiving electronic content on a first cloud application and storing in a first non-transitory computer readable medium on a cloud server network device with the one or more processors via a cloud communications network comprising;

one or more public communication networks, one or more private networks, one or more community networks and one or more hybrid networks;

for determining with the first cloud application a set of plurality of information entropy probabilities for a pre-determined set of symbols for a pre-determined alphabet on a first plurality of portions of the received electronic content;

for splitting with the first cloud application the received electronic content into a second plurality of portions based on a selected set of information entropy probabilities from the determined set of plurality of information entropies with the first cloud application,

thereby providing a first level of security and privacy for storing the received electronic content based on the determined set of plurality of information entropies;

for saving with the first cloud application the second plurality of portions in a plurality of cloud storage objects;

for determining with the first cloud application a plurality of address locations of selected ones of a plurality of other different cloud server network devices each with one or more processors with a Galois field,

wherein an input to the Galois field produces an output including a address location of a desired cloud server on the cloud communications network, and

wherein the address location can be located anywhere on the one or more public communication networks, one or more private networks, one or more community networks and one or more hybrid networks of the cloud communications network;

for storing securely with the first cloud application the determined plurality of address locations in a cloud content location map in the first non-transitory computer readable medium on the cloud server network device;

for sending securely with the first cloud application the plurality of cloud storage objects to the determined selected ones of the plurality of other different cloud servers on the cloud communications network with the determined plurality of address locations,

thereby providing a second level of security and privacy for storing the received electronic content based on use of the Galois field,

wherein the plurality of cloud storage objects are distributed and located in a plurality of different locations on the cloud communications network, and

wherein none of the selected ones of plurality of other cloud server network devices can individually determine locations of all portions of the received electronic content on the cloud communications network, thereby providing a third level of security and privacy for storing the received electronic content on the cloud communications network;

for receiving in real-time a first request message on the first cloud application on the cloud server network device with the one or more processors from a second cloud application stored in a second non-transitory computer readable medium on a target network device with one or more processors via the cloud communications network,

wherein the first request message includes a request for desired cloud electronic content stored in the plurality of cloud storage objects stored on the selected ones of the plurality of other different cloud server network devices distributed across one or more of the network comprising the cloud communications network, and

wherein the plurality of different cloud storage objects function as a single, transparent secure storage object for electronic content on the cloud communications network;

for retrieving securely the cloud content location map on the first cloud application on the cloud server network device, wherein the cloud content location map includes address locations of the selected ones of the plurality of other different cloud server network devices on the cloud communications network;

for sending from the first cloud application on the cloud server network device a plurality of second request messages for the desired cloud electronic content to the selected ones of the plurality of other different cloud server network devices identified in the retrieved cloud content location map and located on the public communication network, the one or more private networks, community networks and hybrid networks comprising the cloud communications network;

for receiving on the cloud computing application on the server network device a plurality of response messages including one or more individual portions of the desired cloud electronic content in the plurality of cloud storage objects from the selected ones of the plurality of other different cloud server network devices on the public communication network, the one or more private networks, community networks and hybrid networks comprising the cloud communications network;

for combining transparently on the first cloud application on the first server network device the one or more individual components of the desired cloud electronic content from the plurality of cloud storage objects from the received plurality of response messages into a final desired electronic cloud content component; and

for sending securely in real-time the final desired cloud electronic content component as the requested desired cloud electronic content from the first cloud application on the cloud server network device to the target network device via the cloud communications network,

wherein the second cloud application on the target network device cannot determine the desired cloud electronic content was stored in the retrieved plurality of cloud storage objects and cannot determine which of the selected ones of the plurality of other different cloud server network devices on which the one or more public, private, community or hybrid networks on the cloud communications network may have stored portions of the desired cloud electronic content,

thereby providing a third layer of security and privacy for the desired cloud electronic content on the cloud communications network.