Virtual storage system and file encryption methods

• US 9,331,987 B2
• Filed: 04/06/2015
• Issued: 05/03/2016
• Est. Priority Date: 01/28/2013
• Status: Active Grant

• Current Assignee: Virtual Strongbox, Inc.
• Original Assignee: Virtual Strongbox
• Inventors: Daly, Ronald M Jr., Giambalvo, Leonard, Smilie, Robert Jacob
• Primary Examiner(s): NGUYEN, TU T
• Application Number:
  US14/679,797
• Publication Number:
  US 20150222610A1
• Time in Patent Office: 393 Days
• Field of Search: 713/165
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/80 in storage media based on magnetic or optical technology, e.g. disks with sectors preventing unauthorised reproduction or copying of disc-type recordable media G11B20/00
• CPC Class Codes: H04L 63/0457 wherein the sending and receiving network entities apply dynamic encryption, e.g. stream encryption cryptographic mechanisms or cryptographic arrangements for stream encryption H04L9/065
• CPC Class Codes: H04L 63/0471 applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding

Abstract

A virtual storage system in data communication with a user computing device via a communication network and file encryption methods for encrypting electronic documents to be uploaded into a virtual storage system where the virtual storage system includes at least one processor which captures a data stream corresponding to an electronic document retrieved from an external system, to be uploaded to the virtual storage system, and creates at least one encryption parameter and encrypts the data stream captured using the at least one encryption parameter created. The virtual storage system further includes a plurality of redundant physical storage devices in data communication with the at least one processor and each configured to store the encrypted data stream corresponding to the electronic document.

Claims

1. A virtual storage system in data communication with a user computing device via a communication network, the virtual storage system comprising:

at least one processor configured to;

capture a data stream corresponding to an electronic document retrieved from an external system, to be uploaded to the virtual storage system, and

encrypt the captured data stream using an encryption parameter; and

a plurality of redundant physical storage devices in data communication with the at least one processor, comprising;

a first data location temporarily storing the captured data stream, and

a second data location permanently storing the encrypted data stream.

2. The virtual storage system of claim 1, further comprising a web services unit comprising:

at least one web services processor configured to;

transmit a web interface to the user computing device, and

Interface the virtual storage system with the external system and the user computing device, via at least one communication network; and

an internal storage unit storing the encryption parameter.

3. The virtual storage system of claim 1, wherein the external system comprises a web services unit, comprising:

at least one web services processor configured to;

transmit a web interface to the user computing device, and

interface the virtual storage system with the external system and the user computing device, via at least one communication network; and

an internal storage unit storing the encryption parameter.

4. The virtual storage system of claim 1, wherein the user computing device comprises a web application configured to interface the user computing device with the virtual storage system, via the external system.

5. The virtual storage system of claim 1, wherein the user computing device comprises a native application configured to interface the user computing device directly with the virtual storage system.

6. The virtual storage system of claim 1, wherein the external system is an online document retrieval and storage system.

7. The virtual storage system of claim 6, wherein the online document retrieval and storage system is a banking system and the electronic document is a bank statement.

8. The virtual storage system of claim 1, wherein the data stream corresponding to the electronic document is captured and encrypted in segments of a predetermined data size.

9. The virtual storage system of claim 1, wherein the least one processor configured to capture the data stream is further configured to temporarily encrypt the captured data stream using another encryption parameter prior and store the temporarily encrypted captured data stream in the first data location;

and

wherein the least one processor configured to encrypt the captured data stream is further configured to decrypting the temporarily encrypted captured data stream stored in the first data location, re-encrypting the decrypted data using the encryption parameter and permanently storing the re-encrypted data stream in the second data location.

10. The virtual storage system of claim 1, wherein the first data location resides in a first data center and the second data location resides in another data center.

11. A method implemented by a computer system to effect the encryption of electronic documents uploaded into a virtual storage system including a plurality of redundant physical storage devices and in data communication via a communication network, with an external system, the method comprising:

capturing a data stream comprising at least one segment of an electronic document to be uploaded;

temporarily storing the captured data stream in a first location in the plurality of redundant physical storage devices;

encrypting the captured data stream captured using an encryption parameter; and

permanently storing the encrypted data stream in a second location in the plurality of redundant physical storage devices.

12. The method of claim 11, wherein the a virtual storage system further comprises a web services unit comprising an internal storage unit and the encryption parameter is stored on the internal storage unit of the web services unit.

13. The method of claim 11, wherein the external system is a banking system and the electronic document is a bank statement.

14. The method of claim 11, further comprising determining when the uploading process is complete, wherein when it is determined that the uploading process is complete, the method further comprises:

opening a data stream to a third location of the plurality of redundant physical storage devices within the virtual storage system;

reading an encrypted segment from the second location;

decrypting the encrypted segment read;

creating another encryption parameter;

re-encrypting the decrypted segment using the other encryption parameter, and appending the re-encrypted segment to the open data stream; and

permanently storing the re-encrypted segment corresponding to the electronic document in the third location of the plurality of redundant physical storage devices within the virtual storage system.

15. The method of claim 14, wherein if the uploading process is cancelled, storing the encrypted segment of the data stream within the virtual storage system.

16. The method of claim 11, wherein capturing the data stream further comprises temporarily encrypting the captured data stream using another encryption parameter prior to storing the temporarily encrypted captured data stream in the first data location;

and

wherein encrypting the captured data stream further comprises decrypting the temporarily encrypted captured data stream stored in the first data location, re-encrypting the decrypted data using the encryption parameter and storing the re-encrypted data stream in the second data location.

17. The method of claim 11, wherein the first data location resides in a first data center and the second data location resides in another data center.

18. A non-transitory computer readable medium storing computer executable instructions that, when executed, cause a computing device to perform a file encryption method for encrypting electronic documents to be uploaded into a virtual storage system including a plurality of redundant physical storage devices and in data communication via a communication network, with an external system, the method comprising:

capturing a data stream comprising at least one segment of an electronic document to be uploaded;

temporarily storing the captured data stream in a first location in the plurality of redundant physical storage devices;

encrypting the captured data stream captured using an encryption parameter; and

permanently storing the encrypted data stream in a second location in the plurality of redundant physical storage devices.

19. The non-transitory computer readable medium of claim 18, wherein capturing the data stream further comprises temporarily encrypting the captured data stream using another encryption parameter prior to storing the temporarily encrypted captured data stream in the first data location;

and

wherein encrypting the captured data stream further comprises decrypting the temporarily encrypted captured data stream stored in the first data location, re-encrypting the decrypted data using the encryption parameter and storing the re-encrypted data stream in the second data location.

20. The non-transitory computer readable medium of claim 18, wherein the first data location resides in a first data center and the second data location resides in another data center.