Electromagnetic pulse (EMP) hardened information infrastructure with extractor, cloud dispersal, secure storage, content analysis and classification and method therefor

• US 8,655,939 B2
• Filed: 09/08/2009
• Issued: 02/18/2014
• Est. Priority Date: 01/05/2007
• Status: Active Grant

• Current Assignee: DigitalDoors, Inc.
• Original Assignee: DigitalDoors, Inc.
• Inventors: Nemzow, Martin A., Redlich, Ron M.
• Primary Examiner(s): Serrao, Ranodhi
• Assistant Examiner(s): Hussain, Farrukh
• Application Number:
  US12/584,588
• Publication Number:
  US 20100250497A1
• Time in Patent Office: 1,624 Days
• Field of Search: 709/201, 709/205, 709/212, 709/216, 709/217, 707/602
• US Class Current: 709/201
• CPC Class Codes: F41H 13/00 Means of attack or defence not otherwise provided for details of radar or sonar systems G01S7/00
• CPC Class Codes: F41H 13/0093 Devices generating an electromagnetic pulse, e.g. for disrupting or destroying electronic devices
• CPC Class Codes: G06F 11/2094 Redundant storage or storage space G06F11/2056 takes precedence
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 10/107 Computer-aided management of electronic mailing [e-mailing]
• CPC Class Codes: G06Q 50/18 Legal services
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 67/1095 Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes

Abstract

A method and system processes data in a distributed computing system to survive an electromagnetic pulse (EMP) attack. The computing system has proximal select content (SC) data stores and geographically distributed distal data stores, all with respective access controls. The data input or put through the computing system is processed to obtain the SC and other associated content. The process then extracts and stores such content in the proximal SC data stores and geographically distributed distal SC data stores. The system further processes data to geographically distribute the data with data processes including: copy, extract, archive, distribute, and a copy-extract-archive and distribute process with a sequential and supplemental data destruction process. In this manner, the data input is distributed or spread out over the geographically distributed distal SC data stores. The system and method permits reconstruction of the processed data only in the presence of a respective access control.

Claims

1. A method of processing data in a distributed computing system, coupled over a communications network, to survive an electromagnetic pulse (EMP) attack wherein said distributed computing system having select content important to an enterprise operating said distributed computing system, said select content represented by one or more predetermined words, characters, images, data elements or data objects, the method of processing data comprising:

as part of said distributed computing system, providing a proximal select content data store and a plurality of geographically distributed distal select content data stores, providing all stores with respective access controls thereat and all stores being operatively coupled over said communications network;

initiating a test for an EMP attack on said proximal select content data store;

processing a data input through said distributed computing system to obtain said select content and one or more of contextually and taxonomically associated select content;

during the test, extracting from said data input said select content and one or more of contextually and taxonomically associated select content found in one or more of said proximal select content data store;

during the test, storing said select content and contextually and taxonomically associated select content in one or more of said geographically distributed distal select content data stores of said plurality of geographically distributed distal select content data stores, said geographically distributed distal select content data stores being geographically remote from said proximal select content data store;

further processing said data input and geographically distributing, with at least one data process from the group of data processes, said data input over said plurality of geographically distributed distal select content data stores, said one data process being from the group of data processes including;

(i) a copy process, (ii) a data extract process, (iii) a data archive process, (iv) a data distribution process and (v) a copy, extract, archive and distribute process with a sequential and supplemental data destruction process; and

permitting reconstruction of the processed data only in the presence of a respective access control for each of said proximal select content data store and said plurality of geographically distributed distal select content data stores.

2. The method of processing data to survive an EMP attack as claimed in claim 1 wherein a sub-plurality of said geographically distributed distal select content data stores are EMP vaults.

3. The method of processing data to survive an EMP attack as claimed in claim 1 wherein a sub-plurality of said geographically distributed distal select content data stores are operated in a cloud computing configuration.

4. The method of processing data to survive an EMP attack as claimed in claim 1 including monitoring one or more of data in transit and data in storage when further processing said data input to geographically distribute said data input over said plurality of geographically distributed distal select content data stores.

5. The method of processing data to survive an EMP attack as claimed in claim 4 wherein geographic and flow and data storage displays are part of said monitoring one or more of data in transit and data in storage during said further processing said data input to geographically distribute said data input over said plurality of geographically distributed distal select content data stores.

6. The method of processing data to survive an EMP attack as claimed in claim 1 including monitoring for one or more predetermined radio frequency communications channels after a predetermined disruptive event.

7. The method A method of processing data to survive an EMP attack as claimed in claim 1 wherein said plurality of geographically distributed distal select content data stores are hierarchically organized into geographically distributed tiers of stores, and wherein the further processing includes a cascading process to geographically distribute into the geographically distributed tiers of stores the input data.

8. The method of processing data to survive an EMP attack as claimed in claim 7 wherein the cascading process for the input data, to geographically distribute data into the geographically distributed tiers of stores, includes at least one data process from the group of data processes including:

a copy process, a data extract process, a data archive process, a data distribution process and a copy, extract, archive and distribute process with a sequential and supplemental data destruction process.

9. The method of processing data to survive an EMP attack as claimed in claim 2 wherein said EMP vaults include switches which electrically isolate said EMP vaults upon command and the method including generating commands to open the EMP vault switches upon occurrence of one or more predetermined disruptive events.

10. A distributed computer system for processing data to survive an electromagnetic pulse (EMP) attack wherein said distributed computing system is coupled together over a communications network, said distributed computing system having select content important to an enterprise operating said distributed computing system, said select content represented by one or more predetermined words, characters, images, data elements or data objects, said distributed computer system comprising:

said distributed computing system having a proximal select content data store and a plurality of geographically distributed distal select content data stores, all stores with respective access controls thereat and all operatively coupled over said communications network;

a processor operating on a data input through said distributed computing system to obtain said select content and one or more of contextually and taxonomically associated select content;

a testing cycle extractor, used in a testing cycle for an EMP attack;

said testing cycle extractor having means for extracting from said data input said select content and one or more of contextually and taxonomically associated select content found in one or more of said proximal select content data stores,

said testing cycle extractor having means for storing said select content and one or more of contextually and taxonomically associated select content in one or more of said proximal select content data store and said plurality of geographically distributed distal select content data stores;

said means for storing, during said testing cycle, storing said select content and contextually and taxonomically associated select content in one or more of said geographically distributed distal select content data stores of said plurality of geographically distributed distal select content data stores, said geographically distributed distal select content data stores being geographically remote from said proximal select content data store;

means for further processing said data input to geographically distribute, with at least one data process from the group of data processes including;

a copy process,

a data extract process,

a data archive process,

a data distribution process and

a copy, extract, archive and distribute process with a sequential and supplemental data destruction process;

said data input over said plurality of geographically distributed distal select content data stores;

means for reconstructing the processed data only in the presence of a respective access control for each of said proximal select content data store and said plurality of geographically distributed distal select content data stores.

11. A method of processing data in a distributed computing system, coupled over a communications network, to survive a security breach related to an EMP attack wherein said distributed computing system having select content important to an enterprise operating said distributed computing system, said select content represented by one or more predetermined words, characters, images, data elements or data objects, the method of processing data comprising:

as part of said distributed computing system, providing a proximal select content data store and a plurality of geographically distributed distal select content data stores, providing all stores with respective access controls thereat and all stores being operatively coupled over said communications network;

initiating a security breach test related to the EMP attack on said proximal data store;

processing a data input through said distributed computing system to obtain said select content and one or more of contextually and taxonomically associated select content;

during the test, extracting from said data input said select content and one or more of contextually and taxonomically associated select content found in one or more of said proximal select content data store;

during the test, storing said select content and contextually and taxonomically associated select content in one or more of said geographically distributed distal select content data stores of said plurality of geographically distributed distal select content data stores, said geographically distributed distal select content data stores being geographically remote from said proximal select content data store;

further processing said data input and geographically distributing, with at least one data process from the group of data processes, said data input over said plurality of geographically distributed distal select content data stores, said one data process being from the group of data processes including;

(i) a copy process, (ii) a data extract process, (iii) a data archive process, (iv) a data distribution process and (v) a copy, extract, archive and distribute process with a sequential and supplemental data destruction process; and

permitting reconstruction of the processed data only in the presence of a respective access control for each of said select content data stores and based upon a data request profile which includes one or more of;

who is the requester;

what select content data is requested;

where is the requester located;

when does the requester need the select content data;

how long does the requester need access to the select content data;

how much select content data and contextual content about the select content data does the requester request;

the request history of the select content data requested by requester.