DATA ENCRYPTION METHOD AND SYSTEM FOR USE WITH CLOUD STORAGE

• US 20170046531A1
• Filed: 12/28/2015
• Published: 02/16/2017
• Est. Priority Date: 08/14/2015
• Status: Abandoned Application

• Current Assignee: STRONG BEAR, LLC
• Original Assignee: STRONG BEAR, LLC
• Inventors: ROBERTS, RODNEY B.
• Application Number:
  US14/980,131
• Publication Number:
  US 20170046531A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: H04L 2209/12 Details relating to cryptographic hardware or logic circuitry
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 9/00 Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
• CPC Class Codes: H04L 9/0631 Substitution permutation network [SPN], i.e. cipher composed of a number of stages or rounds each involving linear and nonlinear transformations, e.g. AES algorithms
• CPC Class Codes: H04L 9/0863 involving passwords or one-time passwords network architectures or network communication protocols for using one-time keys in a packet data network H04L63/067
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms

Abstract

A system providing cloud storage with enhanced data security. The system includes a cloud storage system with a server storing a cloud data folder with data associated with a data storage user. The system also includes a client device operable to communicate over a digital communications network with the cloud storage system to access the cloud data folder. The system further includes a self-contained encryption unit with an executable encryption program and a data file, and a user of the cloud storage can define which portions of their data is stored in the data file. The encryption unit is provided in the cloud data folder. The encryption program includes an encryption tool that encrypts the data file prior to the data file being stored in memory on the client device or being stored in the cloud data folder in the cloud storage system.

Claims

1. A system for providing cloud storage of digital data, comprising:

a cloud storage provider system including at least one server storing a cloud data folder with data associated with a data storage user;

a client device operable to communicate over a digital communications network with the cloud storage provider system to access the cloud data folder on the at least one server; and

an encryption unit comprising an executable encryption program and a data file, wherein the encryption unit is provided in the cloud data folder, wherein the data file of the encryption unit includes a subset of the data associated with the data storage user, and wherein the executable encryption program includes an encryption tool encrypting the data file prior to storing the data file in memory on the client device and prior to storing the data file in the cloud data folder in the at least one server of the cloud storage provider system.

2. The system of claim 1, wherein the encryption tool comprises a 128 or 256-bit AES encryption algorithm.

3. The system of claim 2, wherein the encryption tool performs the encrypting of the data file using one or more passwords provided by the data storage user via operation of the client device and associated with one or more subsets of the data file.

4. The system of claim 3, wherein the one or more subsets of the data file are identified by the data storage user by selection of portions of the data in the cloud data folder presently outside the encryption unit or selection of data stored in memory of the client device or memory accessible by the client device.

5. The system of claim 1, wherein, after the storage of the data file, the executable encryption program generates a user interface on a display device of the client device prompting entry of an encryption instance password assigned to the executable encryption program and, only when a user-provided password is received matching the encryption instance password, providing access to the encrypted data file in the cloud data folder.

6. The system of claim 1, wherein, after the storage of the data file, the executable encryption program generates a user interface on a display device of the client device first prompting user selection of a portion of the encrypted data file to access, second prompting user entry of a password associated with the portion of the encrypted data file, and, in response to receipt of a user-entered password, using the encryption tool to decrypt the encrypted data file, when the user-entered password matches the password associated with the portion of the encrypted data file, using the user-entered password.

7. The system of claim 6, wherein the portion of the encrypted data file is a folder including a plurality of files.

8. The system of claim 6, wherein the portion of the encrypted data file is a single file of data and wherein a different password is assignable by an operator of the client device to each file of data in the encrypted data file.

9. A method of providing data security when using cloud storage, comprising:

with a client device, accessing via a network a cloud storage folder on a data storage device in a cloud storage system;

in the cloud storage folder, loading a data security folder comprising an encryption program executable and a data file;

inserting a set of user data into the data file;

assigning a password to the set of user data;

executing the encryption program executable to encrypt the set of user data with an encryption algorithm using the password; and

after the executing step, storing the cloud storage folder in memory of the client device or on the data storage device of the cloud storage system,

10. The method of claim 9, wherein the password is assigned to the set of user data based on user input via a user interface on the client device.

11. The method of claim 9, wherein the set of user data comprises a file or a folder of files.

12. The method of claim 9, wherein the encryption algorithm comprises a 128 or 256-bit AES encryption algorithm.

13. The method of claim 9, further comprising, after the storing step, second accessing the cloud storage folder with the client device or another client device, activating the encryption program executable, and only when the password is received using the encryption algorithm to decrypt the encrypted set of user data.

14. The method of claim 9, further comprising generating a link to the data security folder in the cloud storage folder in the cloud storage system and operating the client device to communicate the link to an additional client device, wherein the additional client device is operable to select the communicated link to access the data security folder.

15. The method of claim 9, further comprising operating the client device to generate and transmit an e-mail over the network to an additional client device, wherein the e-mail includes all or a portion of the encrypted set of user data.

16. An encryption method for cloud storage systems, comprising:

receiving a request to open an encrypted file in a cloud storage folder;

prompting the user to input a password associated with the encrypted file;

determining the password is valid; and

only when the password is determined valid, decrypting the encrypted file using the password, wherein the decrypting of the encrypted file is performed by an encryption program associated with the encrypted file in the cloud storage folder.

17. The method of claim 16, further comprising, prior to the receiving of the request, encrypting an unecrypted data file selected via user input on a client device with an encryption algorithm using a password matching the password that is determined to be valid.

18. The method of claim 16, wherein the encrypted file is decrypted using a 128 or 256-bit AES encryption algorithm.

19. The method of claim 16, further comprising, prior to the receiving of the request, storing an executable version of the encryption program and a data file including the encrypted file in a folder within the cloud storage folder.

20. The method of claim 16, wherein the decrypting is performed on a client device in communication with a cloud storage system storing the cloud storage folder and further comprising, after the decrypting, running the encryption program on the client device to encrypt the decrypted file to create a secondly encrypted file and storing the secondly encrypted file in local memory of the client device prior to synchronizing of the cloud storage folder with the cloud storage system.