Method and system to archive data

• US 7,577,689 B1
• Filed: 06/15/2005
• Issued: 08/18/2009
• Est. Priority Date: 06/15/2005
• Status: Active Grant

• Current Assignee: Adobe Inc.
• Original Assignee: Adobe Systems Incorporated (Adobe Inc.)
• Inventors: Welch, Michael J., Masinter, Larry
• Primary Examiner(s): Rones; Charles
• Assistant Examiner(s): Hotelling; Harold A
• Application Number:
  US11/153,100
• Time in Patent Office: 1,525 Days
• Field of Search: None
• US Class Current: 1/1
• CPC Class Codes: G06F 11/1464 for networked environments
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules

Abstract

A method and a system is provided of to process data. For example, the method and system may be used to archive documents. In an embodiment, the method includes receiving original data for archiving and converting the original data into a plurality of shares using secret sharing. The plurality of shares may be distributed (e.g., to a plurality of remote repositories that each store a share. The plurality of shares may be distributed via a wide area network to a plurality of Internet Service Providers, for example, via an email message which is stored thereby to archive the share. A header of the email message may be used as a time stamp for each share. The repositories may be independent and geographically dispersed and a monitor may be provided to monitor a share stored at each repositories.

Claims

1. A computer implemented method to archive data, the computer implemented method comprising:

receiving original data for archiving in a first format;

converting the original data into N shares and storing each of the N shares at one of N repositories;

constructing a secondary copy of the original data in a second format, the second format being an archive suitable format;

combining the original data and the secondary copy of the original data into archive data;

converting the archive data into shares using secret sharing;

distributing the shares to a plurality of repositories, the distributing including storing each share at one of the plurality of repositories; and

checking at a predetermined interval that at least K shares and a safety-factor number of further shares are recoverable from the N repositories, the at least K shares used to recover a document associated with the original data.

2. The computer implemented method of claim 1, wherein the combining of the original data and the secondary copy includes embedding the original data into the secondary copy.

3. The computer implemented method of claim 1, wherein the combining of the original data and the secondary copy includes packaging the original data and the secondary copy into an archive document.

4. The computer implemented method of claim 1, wherein the secondary format is a PDF/A.

5. The computer implemented method of claim 1, wherein the shares are distributed via a wide area network to a plurality of Internet service providers.

6. The computer implemented method of claim 5, wherein each of the shares is distributed via an email message which is stored by the Internet service provider thereby to archive the share.

7. The computer implemented method of claim 6, wherein a header of the email message is used as a time stamp for each share.

8. The computer implemented method of claim 1, wherein the repositories are independent and geographically dispersed.

9. The computer implemented method of claim 1, said computer implemented method further comprising:

providing an access control list defining access privileges associated to one or more users.

10. The method of claim 1, which includes a first handle to control access to the share and a second handle for use by a monitor application that monitors the status of the share during an archive period.

11. A tangible machine-readable medium embodying instructions which, when executed by one or more processors of a machine, cause the machine to perform a method comprising:

receiving original data for archiving in a first format;

converting the original data into N shares and storing each of the N shares at one of N repositories;

identifying metadata associated with the original data;

constructing a secondary copy of the original data in a second format;

the second format being an archive suitable format;

combining the original data, the metadata, and the secondary copy of the original data to form archive data for storage;

converting the archive data for storage into shares using secret sharing;

distributing the shares to a plurality of repositories, the distribution including sharing each share at one of the plurality of repositories; and

checking at a predetermined interval that at least K shares and a safety-factor number of further shares are recoverable from the N repositories, the at least K shares used to recover a document associated with the original data.

12. The tangible machine-readable medium of claim 11, wherein the identifying of the metadata associated with the original data includes extracting the metadata from the original data.

13. The tangible machine-readable medium of claim 11, wherein the identifying of the metadata associated with the original data includes receiving user submitted metadata from a submitter user interface.

14. The tangible machine-readable medium of claim 11, wherein the metadata identifies an author of the original data.

15. A computer system to archive data, the computer system comprising:

a processor for executing instructions;

a memory device holding data including instructions, the instructions, when executed by said processor, implement;

a submitter interface module to receive original data for archiving in a first format, the original data converted into N shares and the submitter interface module to store each share at one of N repositories;

a processing module to construct a secondary copy of the original data in a second format, the second format being in an archive suitable format, said processing module converting the secondary copy of the original data into a plurality of shares using secret sharing;

a distribution module to distribute the plurality of shares to a plurality of remote repositories that each store a share of the plurality of shares; and

a monitoring module to monitor a share stored at each of the N repositories, wherein the monitoring module is to check at a predetermined interval that at least K shares and a safety-factor number of further shares are recoverable from the N repositories, and wherein the at least K shares are used to recover a document associated with the original data.

16. The computer system of claim 15, wherein the monitoring module is to receive at least one share-check and at least one share-check answer, and the monitoring module is to verify the original data by issuing a share-check request to at least one of the N repositories.