Data repository and method for promoting network storage of data

• US 7,587,617 B2
• Filed: 01/07/2004
• Issued: 09/08/2009
• Est. Priority Date: 02/18/2000
• Status: Expired due to Fees

• Current Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Original Assignee: Burnside Acquisition, LLC
• Inventors: Margolus, Norman H., Knight, Thomas F. Jr.
• Primary Examiner(s): Truong; Thanhnga B
• Application Number:
  US10/752,775
• Publication Number:
  US 20040162808A1
• Time in Patent Office: 2,071 Days
• Field of Search: 713/186, 713/193, 713/165, 713/176, 382/116, 382/124, 340/5.53, 709/225, 707/2, 707/204, 707 9- 10, 707/200, 711/100, 711161-162, 369/13.01, 369/13.56
• US Class Current: 713/193
• CPC Class Codes: G06F 16/137 Hash-based content-based indexing of textual data G06F16/31
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6272 by registering files or documents with a third party
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 21/645 using a third party
• CPC Class Codes: Y10S 707/959 Network
• CPC Class Codes: Y10S 707/99932 Access augmentation or optimizing
• CPC Class Codes: Y10S 707/99953 Recoverability

Abstract

In general, the invention features methods by which more-than one client program connected to a network stores the same data item on a storage device of a data repository connected to the network. In one aspect, the method comprises encrypting the data item using a key derived from the content of the data item, determining a digital fingerprint of the data item, and storing the data item on the storage device at a location or locations associated with the digital fingerprint. In a second aspect, the method comprises determining a digital fingerprint of the data item, testing for whether the data item is already stored in the repository by comparing the digital fingerprint of the data item to the digital fingerprints of data items already in storage in the repository, and challenging a client that is attempting to deposit a data item already stored in the repository, to ascertain that the client has the full data item.

Claims

1. A method by which a client connected to a network deposits data items into persistent storage, relying on a public data repository connected to the network for storage of data items that duplicate data already stored there and storing non-duplicate data items in a private data repository, the method comprising:

determining a digital fingerprint of a data item that uniquely identifies the content of the data item;

testing for whether an identical data item, identical in content with the data item, is already stored in the public repository by comparing the digital fingerprint of the data item to the digital fingerprints of data items already stored in the public repository; and

if an identical data item is already stored in the public repository, creating an access authorization credential for the public repository associating the client with the identical data item and relying on storage of the identical data item in the public repository; and

if an identical data item is not already stored in the public repository, depositing the data item in the private repository;

wherein data items already stored in the public repository were transmitted to the public repository by clients of the public repository;

wherein at least some clients of the public repository cannot access data items stored in the private repository;

wherein access authorization credentials for the public repository are credentials that allow the client to retrieve data items from the public repository;

wherein the digital fingerprint of the data item is a cryptographic hash of the content of the data item;

wherein the client determines that some data items will be deposited only in the private repository based at least in part on the absence of identical content in the public repository, and

wherein the client determines that some data items will be deposited in the public repository based at least in part on the presence of identical content in the public repository.

2. The method of claim 1 wherein the step of depositing the data item in the private repository comprises using the digital fingerprint to test for whether the data item is already stored in the private repository.

3. The method of claim 2 wherein the client creates an access authorization credential for the data item exclusively either in the public or the private repository.

4. The method of claim 1 wherein the step of depositing the data item in the private repository does not make use of the digital fingerprint.

5. The method of claim 1 wherein the client is a program operating on behalf of an individual or organization unwilling to let private data be stored outside of its direct control.

6. The method of claim 1 wherein data items are transmitted to the public repository by a plurality of independent individuals and organizations.

7. The method of claim 1 wherein the data item is encrypted using a key derived from the content of the data item.

8. The method of claim 7 wherein a plurality of data items are grouped into a family of data items and the key generation algorithm used for the family of data items differs from that used for data items that are not part of the family.

9. The method of claim 1 wherein no information is persistently stored in the public repository that would, by itself, allow identification of a client for which an access authorization credential has been created.

10. The method of claim 1 wherein access authorization credentials are uniquely associated with a user of the public data repository or a group of users.