SYSTEMS AND METHODS FOR JURISDICTION INDEPENDENT DATA STORAGE IN A MULTI-VENDOR CLOUD ENVIRONMENT

• US 20150379292A1
• Filed: 06/30/2014
• Published: 12/31/2015
• Est. Priority Date: 06/30/2014
• Status: Active Grant

• Current Assignee: Calamu Technologies Corporation
• Original Assignee: Paul Lewis
• Inventors: Lewis, Paul
• Granted Patent: US 9,405,926 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 3/067 Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]

Abstract

The present invention relates to a cloud based system for providing data security. The system comprises a processor which receives a data file from a user. The data file is directed to a first file location and encrypted and segmented into a plurality of data blocks. The plurality of data blocks is then assigned with a unique identifier and redirected to a plurality of cloud based storage providers. The plurality of cloud based storage providers are located in a plurality of jurisdictions. Each of the plurality of data blocks is then assigned a second file location. The unique identifier and the file locations of each of the plurality of data blocks is updated in the system.

Claims

1. A cloud based system for providing data security, the system comprising;

a processor;

said processor receives a data file from a user; and

said data file is directed to a first file location; and

said data file is encrypted and segmented into a plurality of data blocks; and

wherein the plurality of data blocks is each assigned with a unique identifier;

wherein the plurality of data blocks is redirected to a plurality of cloud based storage providers;

said plurality of cloud based storage providers being located in a plurality of jurisdictions; and

wherein each of the plurality of data blocks is assigned a second file location; and

wherein the unique identifier and file locations of each of the plurality of data blocks is updated in the system.

2. The system of claim 1, wherein encryption occurs via a processing engine.

3. The system of claim 1, wherein each data block is assigned a unique identifier.

4. The system of claim 1, wherein redirection of the plurality of data blocks is executed according to a predetermined algorithm.

5. The system of claim 1, wherein redirection is controlled by a cloud queue engine.

6. The system of claim 1, wherein the first file location data of the data file and the second file location data of each of the plurality of data blocks is stored in a look up table of a storage director module.

7. The system of claim 1, wherein the plurality of cloud storage providers is located in a different physical location than the data file.

8. The system of claim 1, wherein the plurality of data blocks include a plurality of encrypted fragments.

9. The system of claim 1, wherein the plurality of data blocks and the plurality of encrypted fragments is stored in the lookup table of the cloud storage provider.

10. The system of claim 1, wherein the plurality of data blocks is transferred to the plurality of cloud storage providers via the storage director module.

11. The system of claim 1, wherein the storage director module is managing access to the plurality of data blocks to ensure that the plurality of cloud storage providers in the plurality of jurisdictions do not have complete data of any one data file.

12. The system of claim 1, wherein reassembly of the data file is prevented by the plurality of data blocks being located in the plurality of cloud storage providers.

13. A computer implemented method for providing data security in a cloud based system, the method comprising:

receiving, via a processor, a data file from a user;

directing, via a processor, the data file to a first file location;

encrypting, via a processor the data file, wherein said data file is split into a plurality of data blocks;

assigning, via a processor, the plurality of data blocks with a unique identifier;

updating, via a processor, the unique identifier of each of the plurality of data blocks within the system;

redirecting, via a processor, the plurality of data blocks to a plurality of cloud storage providers located in a plurality of jurisdictions;

storing, via a processor, the plurality of data blocks in the plurality of cloud storage providers;

assigning, via a processor, a second file location to the plurality of data blocks;

updating, via a processor, the unique identifier and the file locations of each of the plurality of data blocks in the system.

14. The method of claim 13, wherein encryption occurs via a processing engine.

15. The method of claim 13, wherein each data block is assigned a unique identifier.

16. The method of claim 13, wherein redirection of the plurality of data blocks is executed according to a predetermined algorithm.

17. The method of claim 13, wherein redirection is controlled by a cloud queue engine.

18. The method of claim 13, wherein the first file location data of the data file and the second file location data of each of the plurality of data blocks is stored in a look up table of a storage director module.

19. The method of claim 13, wherein the plurality of cloud storage providers is located in a different physical location than the data file.

20. The method of claim 13, wherein the plurality of data blocks include a plurality of encrypted fragments.