Method And Apparatus For Applying A Customer Owned Encryption

• US 20160147999A1
• Filed: 11/20/2014
• Published: 05/26/2016
• Est. Priority Date: 11/20/2014
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Fontanetta, Amee, Rios, Roque
• Granted Patent: US 10,043,015 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06Q 20/14 specially adapted for billing systems
• CPC Class Codes: G06Q 20/24 Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 40/12 Accounting

Abstract

A method, computer-readable storage device and apparatus for customer owned encryption at a centralized storage server are disclosed. For example, the method receives a data file for storage and a customer owned encryption method from the customer, applies the customer owned encryption method to the data file at the centralized storage server to create a customer encrypted data file, deletes the customer owned encryption method from the centralized storage server and applies a general encryption method to the customer encrypted data file, wherein the general encryption method is applied to all data files stored in the centralized storage server.

Claims

1. A method for applying a customer owned encryption method at a centralized storage server, the method comprising:

receiving, PA at a processor associated with the centralized storage server, a data file and first instructions for executing the customer owned encryption method from a first customer;

applying, by executing at least some of the first instructions with the processor, the customer owned encryption method to the data file at the centralized storage server to create a customer encrypted data file;

deleting, by executing an instruction with the processor, the customer owned encryption method from the centralized storage server; and

after the applying of the customer owned encryption method to create the customer encrypted data file, applying, by executing an instruction with the processor, a general encryption method, different from the customer owned encryption method, to the customer encrypted data file, the general encryption method applied to a plurality of data files stored in the centralized storage server, the plurality of data files associated with a plurality of different customers including the first customer.

2. The method of claim 1, further including:

receiving, PA at the processor, a request from the first customer to retrieve the data file, wherein the request includes the first instructions for executing the customer owned encryption method that was used to encrypt the data file;

decrypting, by executing an instruction with the processor, the general encryption method applied to the customer encrypted data file;

decrypting, by executing at least some of the first instructions with the processor, the customer owned encryption method applied to the data file;

deleting, by executing an instruction with the processor, the customer owned encryption method from the centralized storage server; and

sending, the data file from the processor to the first customer.

3. The method of claim 1, further including:

sending, a request from the processor to the first customer to access the customer encrypted data file;

receiving, PA at the processor, the first instructions for executing the customer owned encryption method from the first customer;

decrypting, by executing an instruction with the processor, the general encryption method applied to the customer encrypted data file;

decrypting, by executing at least some of the first instructions with the processor, the customer owned encryption method applied to the data file;

accessing, by executing an instruction with the processor, information in the data file;

applying, by executing at least some of the first instructions with the processor, the customer owned encryption method to the data file to re-create the customer encrypted data file;

deleting, by executing an instruction with the processor, the customer owned encryption method from the centralized storage server; and

applying, by executing an instruction with the processor, the general encryption method to the customer encrypted data file that was re-created.

4. The method of claim 3, wherein the request to access the customer encrypted data file includes a request to obtain credit card information in the data file for a repeat billing.

5. The method of claim 1, wherein the centralized storage server is maintained by a retailer.

6. The method of claim 1, wherein the centralized storage server is maintained by a cloud storage service provider.

7. The method of claim 1, wherein the customer owned encryption method is created on an endpoint device of the first customer.

8. The method of claim 1, wherein the general encryption method includes a secure hash algorithm.

9. A tangible computer-readable storage device including a first plurality of computer executable instructions, which when executed by a processor associated with a centralized storage server, causes the processor to perform operations for applying a customer owned encryption method at the centralized storage server, the operations comprising:

receiving a data file and second computer executable instructions for executing the customer owned encryption method from a first customer;

executing at least some of the second instructions to apply the customer owned encryption method to the data file at the centralized storage server to create a customer encrypted data file;

deleting the customer owned encryption method from the centralized storage server; and

after the executing of the at least some of the second instructions to apply the customer owned encryption method to create the customer encrypted data file, applying a general encryption method, different from the customer owned encryption method, to the customer encrypted data file, the general encryption method applied to a plurality of data files stored in the centralized storage server, the plurality of data files associated with a plurality of different customers including the first customer.

10. The tangible computer-readable storage device of claim 9, wherein the operations further include:

receiving a request from the first customer to retrieve the data file, wherein the request includes the second instructions for executing the customer owned encryption method that was used to encrypt the data file;

decrypting the general encryption method applied to the customer encrypted data file;

decrypting the customer owned encryption method applied to the data file;

deleting the customer owned encryption method from the centralized storage server; and

sending the data file to the first customer.

11. The tangible computer-readable storage device of claim 9, wherein the operations further include:

sending a request to the first customer to access the customer encrypted data file;

receiving the second instructions for executing the customer owned encryption method from the first customer;

decrypting the general encryption method applied to the customer encrypted data file;

decrypting the customer owned encryption method applied to the data file;

accessing information in the data file;

applying the customer owned encryption method to the data file to re-create the customer encrypted data file;

deleting the customer owned encryption method from the centralized storage server; and

applying the general encryption method to the customer encrypted data file that was re-created.

12. The tangible computer-readable storage device of claim 11, wherein the request to access the customer encrypted data file includes a request to obtain credit card information in the data file for a repeat billing.

13. The tangible computer-readable storage device of claim 9, wherein the centralized storage server is maintained by a retailer.

14. The tangible computer-readable storage device of claim 9, wherein the centralized storage server is maintained by a cloud storage service provider.

15. The tangible computer-readable storage device of claim 9, wherein the encryption method is created on an endpoint device of the first customer.

16. The tangible computer-readable storage device of claim 9, wherein the general encryption method includes a secure hash algorithm.

17. An apparatus for applying customer owned encryption at a centralized storage server, comprising:

a processor associated with the centralized storage server; and

a computer-readable storage device including a first plurality of computer executable instructions which, when executed by the processor, causes the processor to perform operations, the operations including;

receiving a data file and second computer executable instructions for executing a customer owned encryption method from a first customer;

executing at least some of the second instructions to apply the customer owned encryption method to the data file at the centralized storage server to create a customer encrypted data file;

deleting the customer owned encryption method from the centralized storage server; and

after the executing of the at least some of the second instructions to apply the customer owned encryption method to create the customer encrypted data file, applying a general encryption method, different from the customer owned encryption method, to the customer encrypted data file, the general encryption method applied to a plurality of data files stored in the centralized storage server, the plurality of data files associated with a plurality of different customers including the first customer.

18. The apparatus of claim 17, wherein the operations further include:

receiving a request from the first customer to retrieve the data file, wherein the request includes the second instructions for executing the customer owned encryption method that was used to encrypt the data file;

decrypting the general encryption method applied to the customer encrypted data file;

decrypting the customer owned encryption method applied to the data file;

deleting the customer owned encryption method from the centralized storage server; and

sending the data file to the first customer.

19. The apparatus of claim 17, wherein the operations further include:

sending a request to the first customer to access the customer encrypted data file;

receiving the second instructions for executing the customer owned encryption method from the first customer;

decrypting the general encryption method applied to the customer encrypted data file;

decrypting the customer owned encryption method applied to the data file;

accessing information in the data file;

applying the customer owned encryption method to the data file to re-create the customer encrypted data file;

deleting the customer owned encryption method from the centralized storage server; and

applying the general encryption method to the customer encrypted data file that was re-created.

20. The apparatus of claim 19, wherein the request to access the customer encrypted data file includes a request to obtain credit card information in the data file for a repeat billing.