Secure storage system for distributed data

• US 9,135,464 B2
• Filed: 12/28/2011
• Issued: 09/15/2015
• Est. Priority Date: 12/28/2011
• Status: Active Grant

• Current Assignee: Samsung Eletrônica da Amazônia Ltda (Samsung Electronics Co. Ltd.)
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Sato, Paulo Vitor
• Primary Examiner(s): HENDERSON, ESTHER BENOIT
• Application Number:
  US13/339,068
• Publication Number:
  US 20130173916A1
• Time in Patent Office: 1,357 Days
• Field of Search: 713/165, 726 26- 28, 726/30
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: H04L 9/085 Secret sharing or secret splitting, e.g. threshold schemes

Abstract

The present invention relates to a system for distributed data storage that ensures the safety of the user data. In particular, the system of the present invention provides that the data stored in a cloud storage service are encrypted and their cryptographic keys are created from a remote device. In the context of the present invention, cloud is a set of servers that form an online service over the Internet, these servers are invisible to the user of the service pretending they form only a single server, thus forming a “cloud servers”. These keys will be divided and stored in cloud storage part and part on other devices.

Claims

1. A secure storage system for distributed data comprising:

a device comprising a non-transitory storage medium and connected to the Internet to access a distributed computing network (cloud),

wherein data stored in the cloud is encrypted using two symmetric keys, which are encrypted using three pairs of asymmetric keys, and

the asymmetric keys are created by the device and stored in a divided manner, such that a portion of each of the asymmetric keys is stored in the cloud and another portion is stored in the device itself,

wherein the encryption comprises;

using two symmetric keys that will encrypt the data;

using three pairs of asymmetric keys that will protect the symmetric keys;

encrypting both keys using the public asymmetric key of the first pair of asymmetric keys;

dividing the private asymmetric key of the first pair of asymmetric keys into two portions comprising a first portion and a second portion;

concatenating the first portion with the encrypted first symmetric key;

concatenating the second portion with the encrypted second symmetric key;

encrypting the first concatenated keys using the public asymmetric key of the second pair of asymmetric keys;

encrypting the second concatenated keys using the public asymmetric key of the third pair of asymmetric keys; and

storing the encrypted first concatenated key in the device and the encrypted second concatenated key in the cloud.

2. A secure storage system for distributed data comprising:

a device comprising a non-transitory storage medium and connected to the Internet to access a distributed computing network (cloud),

wherein data stored in the cloud is encrypted using two symmetric keys encrypted using each of three pairs of asymmetric keys, and

the keys are created by the device and stored in a divided manner, such that a portion of each of the keys is stored in the cloud and another portion is stored in the device itself,

wherein the three pairs of asymmetric keys comprise a first pair of asymmetric keys, a second pair of asymmetric keys, and a third pair of asymmetric keys, and

wherein the encryption comprises;

generating two symmetric keys;

generating the first pair of asymmetric keys comprising a first key and a second key;

encrypting both symmetric keys using the public (first key) asymmetric key of the first pair of asymmetric keys;

dividing the private (second key) asymmetric key of the first pair of asymmetric keys into two portions comprising a first portion and a second portion;

concatenating the first portion with the encrypted first symmetric key;

concatenating the second portion with the encrypted second symmetric key;

generating the second pair of asymmetric keys comprising a third key and a fourth key;

generating the third pair of asymmetric keys comprising a fifth key and a sixth key;

encrypting the first concatenated keys using the public (third key) asymmetric key of the second pair of asymmetric keys;

encrypting the second concatenated keys using the public (fifth key) asymmetric key of the third pair of asymmetric keys; and

storing the encrypted first concatenated key and the sixth key in the device and the encrypted second concatenated key and the fourth key in the cloud.