METHODS, DEVICES, AND MEDIA FOR SECURELY UTILIZING A NON-SECURED, DISTRIBUTED, VIRTUALIZED NETWORK RESOURCE WITH APPLICATIONS TO CLOUD-COMPUTING SECURITY AND MANAGEMENT

• US 20160134675A1
• Filed: 12/28/2015
• Published: 05/12/2016
• Est. Priority Date: 09/23/2009
• Status: Abandoned Application

• Current Assignee: Porticor Ltd. (Intuit, Inc.)
• Original Assignee: Porticor Ltd. (Intuit, Inc.)
• Inventors: Parann-Nissany, Gilad
• Application Number:
  US14/980,324
• Publication Number:
  US 20160134675A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 65/765 intermediate

Abstract

The present invention discloses methods for securing information by transforming the information into individually-unintelligible parts, methods include: dividing an original data stream into a set of split data streams; applying a first invertible transformation function to the split data streams, the step of applying producing an intermediate set of data streams; and extracting a final set of data streams from the intermediate set by applying a selection rule which produces the final set, thereby transforming the original data stream into individually-unintelligible parts in the final set. Preferably, the method further includes: applying a second invertible transformation function to the final set to produce the intermediate set, wherein the second invertible transformation is an inverse function of the first invertible transformation; extracting the split streams from the intermediate set by applying a selection rule which produces the split data streams; and reconstructing the original data stream from the split data streams.

Claims

1. A method for securing information by transforming the information into individually-unintelligible parts, the method comprising the steps of:

(a) dividing an original data stream into a set of split data streams;

(b) applying a first invertible transformation function to said split data streams, said step of applying producing an intermediate set of data streams; and

(c) extracting a final set of data streams from said intermediate set by applying a selection rule which produces said final set, thereby transforming said original data stream into individually-unintelligible parts in said final set.

2. The method of claim 1, wherein said first invertible transformation function requires all elements of said final set to be available in order to reconstruct said original data stream.

3. The method of claim 1, the method further comprising the steps of:

(d) applying a second invertible transformation function to said final set to produce said intermediate set, wherein said second invertible transformation is an inverse function of said first invertible transformation;

(e) extracting said split streams from said intermediate set by applying a selection rule which produces said split data streams; and

(f) reconstructing said original data stream from said split data streams.

4. The method of claim 1, the method further comprising the steps of:

(d) associating a key set with said final set such that every element of said final set has an associated key;

(e) storing said final set on a computing-service resource, wherein said key set specifies locations of said elements in said computing-service resource; and

(f) ensuring that no intelligible reference regarding a key relationship between said key set and said final set is present on said computing-service resource, thereby preventing detection of said elements by masking an element relationship among said elements.

5. A non-transitory computer-readable storage medium having computer-readable code embodied on the non-transitory computer-readable storage medium, the computer-readable code comprising:

(a) program code for dividing an original data stream into a set of split data streams;

(b) program code for applying a first invertible transformation function to said split data streams, said applying producing an intermediate set of data streams; and

(c) program code for extracting a final set of data streams from said intermediate set by applying a selection rule which produces said final set, thereby transforming said original data stream into individually-unintelligible parts in said final set.

6. The non-transitory computer-readable storage medium of claim 5, wherein said first invertible transformation function requires all elements of said final set to be available in order to reconstruct said original data stream.

7. The non-transitory computer-readable storage medium of claim 5, the computer-readable code further comprising:

(d) program code for applying a second invertible transformation function to said final set to produce said intermediate set, wherein said second invertible transformation is an inverse function of said first invertible transformation;

(e) program code for extracting said split streams from said intermediate set by applying a selection rule which produces said split data streams; and

(f) program code for reconstructing said original data stream from said split data streams.

8. The non-transitory computer-readable storage medium of claim 5, the computer-readable code further comprising:

(d) program code for associating a key set with said final set such that every element of said final set has an associated key;

(e) program code for storing said final set on a computing-service resource, wherein said key set specifies locations of said elements in said computing-service resource; and

(f) program code for ensuring that no intelligible reference regarding a key relationship between said key set and said final set is present on said computing-service resource, thereby preventing detection of said elements by masking an element relationship among said elements.

9. A device for securing information by transforming the information into individually-unintelligible parts, the device comprising:

(a) a data-processing unit including;

(i) a CPU for performing computational operations; and

(ii) a memory module for storing data; and

(b) a deployed security mechanism, residing on said data-processing unit, configured for;

(i) dividing an original data stream into a set of split data streams;

(ii) applying a first invertible transformation function to said split data streams, said step of applying producing an intermediate set of data streams; and

(iii) extracting a final set of data streams from said intermediate set by applying a selection rule which produces said final set, thereby transforming said original data stream into individually-unintelligible parts in said final set.

10. The device of claim 9, wherein said first invertible transformation function requires all elements of said final set to be available in order to reconstruct said original data stream.

11. The device of claim 9, wherein said deployed security mechanism is further configured for:

(iv) applying a second invertible transformation function to said final set to produce said intermediate set, wherein said second invertible transformation is an inverse function of said first invertible transformation;

(v) extracting said split streams from said intermediate set by applying a selection rule which produces said split data streams; and

(vi) reconstructing said original data stream from said split data streams.

12. The device of claim 9, wherein said deployed security mechanism is further configured for:

(iv) associating a key set with said final set such that every element of said final set has an associated key;

(v) storing said final set on a computing-service resource, wherein said key set specifies locations of said elements in said computing-service resource; and

(vi) ensuring that no intelligible reference regarding a key relationship between said key set and said final set is present on said computing-service resource, thereby preventing detection of said elements by masking an element relationship among said elements.