System and Methods for Jurisdiction Independent Data Storage in a Multi-Vendor Cloud Environment

• US 20180349619A1
• Filed: 08/06/2018
• Published: 12/06/2018
• Est. Priority Date: 04/15/2013
• Status: Abandoned Application

• Current Assignee: Calamu Technologies Corporation
• Original Assignee: Calamu Technologies Corporation
• Inventors: Lewis, Paul
• Application Number:
  US16/055,587
• Publication Number:
  US 20180349619A1
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 3/062 Securing storage systems
• CPC Class Codes: G06F 3/064 Management of blocks
• CPC Class Codes: G06F 3/067 Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
• CPC Class Codes: H04L 9/0819 Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) network architectures or network communication protocols for key distribution in a packet data network H04L63/062
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

A cloud based system for providing data security, the system having a processor which creates a source data file; wherein the source data file is split into at least one fragments; an encryption key associated with the at least one fragments; and wherein the at least one fragments is encrypted by the encryption key; a plurality of cloud storage providers; wherein the at least one fragments is distributed among the plurality of cloud storage providers whereby no single cloud storage provider possesses all of the at least one fragments; a pointer file which is created on a local computer; wherein the pointer file stores the location of the at least one fragments; and wherein the pointer file is accessed; the encryption key authenticates the plurality of cloud storage providers; the at least one fragments are transferred from the plurality of cloud storage providers to the local computer; and wherein the at least one fragments are reassembled; and the source data file is deleted.

Claims

1. A cloud based system for providing data security, the system comprising;

a processor;

said processor creates a source data file;

wherein said source data file is split into at least one fragments;

an encryption key;

said encryption key associated with the at least one fragments; and

wherein the at least one fragments is encrypted by the encryption key;

a plurality of cloud storage providers;

wherein the at least one fragments is distributed among the plurality of cloud storage providers whereby no single cloud storage provider possesses all of the at least one fragments;

a pointer file;

wherein said pointer file is created on a local computer;

wherein said pointer file stores the location of the at least one fragments; and

wherein said pointer file is accessed;

said encryption key authenticates the plurality of cloud storage providers;

the at least one fragments are transferred from the plurality of cloud storage providers to the local computer;

wherein the at least one fragments are reassembled; and

the source data file is deleted.

2. The system of claim 1, wherein the encryption key is created by the user.

3. The system of claim 1, further comprising, wherein the encryption key is auto generated by the processor.

4. The system of claim 1, wherein the pointer file is stored locally on a user'"'"'s computer.

5. The system of claim 1, wherein the pointer file further comprises a lookup table.

10. The system of claim 1, further comprising, wherein the encryption key is auto generated by the processor.

12. The system of claim 1, wherein the pointer file further comprises a lookup table.

6. A computer implemented method for providing data security in a cloud based system, the method comprising:

creating via a processor, a source data file;

splitting, via a processor said source data file into at least one fragments;

associating, via a processor an encryption key with the at least one fragments;

encrypting, via a processor the at least one fragments by the encryption key;

distributing, via a processor the at least one fragments among a plurality of cloud storage providers;

whereby no single cloud storage provider possesses all of the at least one fragments;

creating a pointer file on a local computer;

wherein said pointer file;

storing the location of the at least one fragments;

accessing said pointer file;

authenticating, via a processor the plurality of cloud storage providers by the encryption key;

transferring, via a processor;

the at least one fragments from the plurality of cloud storage providers to the local computer;

reassembling, via a processor the at least one fragments; and

wherein the source data file is deleted.

7. A cloud based system for providing data security, the system comprising;

a processor;

said processor creates a source data file;

wherein said source data file is split into at least one fragments;

an encryption key;

said encryption key created by a first user and associated with the at least one fragments; and

wherein the at least one fragments is encrypted by the encryption key;

a plurality of cloud storage providers;

wherein the at least one fragments is distributed among the plurality of cloud storage providers whereby no single cloud storage provider possesses all of the at least one fragments;

a pointer file;

wherein said pointer file is created on a first local computer and the source data file is deleted;

wherein said pointer files stores the location of the at least one fragments;

and wherein said pointer file and said encryption key is shared with a second user;

wherein said pointer file is accessed by the second user on a second local computer; and

wherein the second user uses said encryption key to authenticate the plurality of cloud storage providers;

the at least one fragments are transferred from the plurality of cloud storage providers to the second local computer of the second user;

wherein the at least one fragments are reassembled by the second user on the second local computer.

8. The system of claim 7, wherein the encryption key and pointer file is shared with the second user through encrypted transmission methods.

9. The system of claim 7, wherein the encryption key is created by the first user.

11. The system of claim 7, wherein the pointer file is stored locally on a first or second users computer.

13. A computer implemented method for providing data security in a cloud based system, the method comprising:

creating via a processor, a source data file on a first local computer of a first user;

splitting, via a processor said source data file into at least one fragments;

wherein the first user is creating an encryption key and Associating, via a processor the encryption key with the at least one fragments;

encrypting, via a processor the at least one fragments by the encryption key;

distributing, via a processor the at least one fragments among a plurality of cloud storage providers;

whereby no single cloud storage provider possesses all of the at least one fragments;

creating a pointer file on the first local computer whereby the source data file is deleted;

wherein said pointer file and the encryption is shared by the first user to a second user; and

wherein said pointer file stores the location of the at least one fragments; and

wherein the second user is accessing said pointer file and using said encryption key to authenticate the plurality of cloud storage provider; and

cause the transferring of the at least one fragments from the plurality of cloud storage providers to a second local computer of the second user; and

wherein the at least one fragments are reassembled on the second local computer of the second user.