Secure storage and accelerated transmission of information over communication networks

• US 9,594,580 B2
• Filed: 04/09/2014
• Issued: 03/14/2017
• Est. Priority Date: 04/09/2014
• Status: Active Grant

• Current Assignee: BitSpray Corporation
• Original Assignee: BitSpray Corporation
• Inventors: Runkis, Walter H., Bromberger, Jeffrey J., Scott, Peter A.
• Primary Examiner(s): Boccio, Vincent
• Application Number:
  US14/249,268
• Publication Number:
  US 20150293896A1
• Time in Patent Office: 1,070 Days
• Field of Search: 707/755
• US Class Current: 1/1
• CPC Class Codes: G06F 3/06 Digital input from, or digital output to, record carriers , e.g. RAID, emulated record carriers or networked record carriers
• CPC Class Codes: G06F 3/061 Improving I/O performance
• CPC Class Codes: G06F 3/0623 in relation to content
• CPC Class Codes: G06F 3/0635 by changing the path, e.g. traffic rerouting, path reconfiguration
• CPC Class Codes: G06F 3/0665 at area level, e.g. provisioning of virtual or logical volumes
• CPC Class Codes: G06F 3/067 Distributed or networked storage systems, e.g. storage area networks [SAN], network attached storage [NAS]
• CPC Class Codes: G06F 9/45533 Hypervisors; Virtual machine monitors
• CPC Class Codes: H03M 7/30 Compression speech analysis-synthesis for redundancy reduction G10L19/00; for image communication H04N; Expansion; Suppression of unnecessary data, e.g. redundancy reduction
• CPC Class Codes: H04B 3/542 the information being in digital form
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
• CPC Class Codes: H04L 9/065 Encryption by serially and continuously modifying data stream elements, e.g. stream cipher systems, RC4, SEAL or A5/3
• CPC Class Codes: Y04S 40/20 Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Abstract

A system and method for securely obfuscating, storing, and transmitting digital information includes a computing device configured to parse at least a portion of one or more bit streams to form a plurality of first datasets. The computing device is configured to disperse the plurality of first datasets into multiple data blocks to form t volumes as part of a plurality of second bit streams such that m number of volumes contain a complete data set, wherein m<t. The computing device is also configured to output the t volumes to a plurality of local or distributed storage locations, such that no complete dataset is stored at a single storage location.

Claims

1. A system for securely storing and transmitting digital information including:

a plurality of datacenters;

a computing device connected to the plurality of datacenters, the computing device comprising a hardware processor; and

a communication network connected to the plurality of datacenters;

wherein the hardware processor is configured to;

parse at least a portion of each of one or more bit streams to form a plurality of first datasets, the one or more bit streams comprising a virtual machine, each of the plurality of first datasets including a portion of each of the one or more bit streams;

disperse the plurality of first datasets as no more than bits into multiple data blocks to form t volumes as part of a plurality of second bit streams such that m number of volumes contain the entirety of the plurality of the first datasets, wherein m<

t;

encrypt each of the t volumes with a different encryption key and/or a different encryption algorithm;

assign to each of the t volumes a different, randomly generated, alphanumeric string as a file name; and

output the t volumes to the plurality of datacenters such that each datacenter stores less than the entirety of the plurality of the first datasets.

2. The system of claim 1, wherein the datacenters are geographically distributed with respect to one another.

3. The system of claim 1, wherein the computing device is further configured to reassemble the m volumes to instantiate the virtual machine.

4. An apparatus for securely storing and transmitting digital information including:

a computing device connected to a communication network, the computing device comprising a hardware processor configured to;

parse at least a portion of each of one or more bit streams to form a plurality of first datasets, the one or more bit streams comprising a virtual machine, each of the plurality of first datasets including a portion of each of the one or more bit streams;

disperse the plurality of first datasets as no more than bits into multiple data blocks to form t volumes as part of a plurality of second bit streams such that m number of volumes contain the entirety of the plurality of the first datasets, wherein m<

t;

encrypt each of the t volumes with a different encryption key and/or a different encryption algorithm;

assign to each of the t volumes a different, randomly generated, alphanumeric string as a file name; and

output less than m volumes to each of a plurality of datacenters via the network such that each datacenter is sent less than the entirety of the plurality of the first datasets.

5. The apparatus of claim 4, wherein the computing device is further configured to reassemble the m volumes to instantiate the virtual machine.

6. An apparatus for securely storing and transmitting digital information including:

a computing device comprising a hardware processor configured to;

receive a request to store one or more bit streams;

parse at least a portion of each of the one or more bit streams to form a plurality of first datasets, each of the plurality of first datasets including a portion of each of the one or more bit streams;

disperse the plurality of first datasets as no more than bits into multiple data blocks to form t volumes as part of a plurality of second bit streams such that m number of volumes contain the entirety of the plurality of the first datasets, wherein m<

t;

output the t volumes to a plurality of local or distributed storage locations, such that no complete dataset is stored at a single storage location;

encrypt each of the t volumes with a different encryption key and/or a different encryption algorithm;

assign to each of the t volumes a different, randomly generated, alphanumeric string as a file name; and

generate a virtual reference stub (VRS) file associated with the t volumes.

7. The apparatus of claim 6, wherein the VRS file represents the t volumes as a single file.

8. The apparatus of claim 6, wherein the computing device is further configured to receive the request in response to a user interaction with a user interface comprising dragging and dropping a file into an on the fly (OEF) folder.

9. The apparatus of claim 6, wherein the computing device is further configured to:

receive a request to read the VRS file; and

reassemble the one or more bit streams from the volumes in response to the request.

10. The apparatus of claim 6, wherein the computing device comprises:

a secure user space configured to allow user interaction with data; and

a secure kernel space configured to parse, disperse, and output the data;

wherein the data is not contained within the secure user space at any time.

11. An apparatus for securely storing and transmitting digital information including:

a computing device comprising a hardware processor configured to;

parse at least a portion of each of one or more bit streams to form a plurality of first datasets, each of the plurality of first datasets including a portion of each of the one or more bit streams;

disperse the plurality of first datasets as no more than bits into multiple data blocks to form t volumes as part of a plurality of second bit streams such that m number of volumes contain the entirety of the plurality of the first datasets, wherein m<

t;

encrypt each of the t volumes with a different encryption key and/or a different encryption algorithm;

assign to each of the t volumes a different, randomly generated, alphanumeric string as a file name;

output the t volumes to a plurality of local or distributed storage locations, such that each storage location stores less than the entirety of the plurality of the first datasets;

parse at least a portion of each of the t volumes to form a plurality of third datasets, each of the plurality of third datasets including a portion of each of the t volumes;

disperse the plurality of third datasets as no more than bits into multiple data blocks to form v volumes as part of a plurality of second bit streams such that m number of volumes contain the entirety of the plurality of the third datasets, wherein m<

v;

encrypt each of the v volumes with a different encryption key and/or a different encryption algorithm;

assign to each of the v volumes a different, randomly generated, alphanumeric string as a file name;

output the v volumes to a plurality of local or distributed storage locations, such that each storage location stores less than the entirety of the plurality of the third datasets.

12. The apparatus of claim 11, wherein the computing device is further configured to repeat the parsing, dispersing, and outputting.

13. A system for securely storing and transmitting digital information including:

a computing device;

a broadband over powerline (BPL) communication network connected to the computing device, the BPL network comprising a plurality of powerlines; and

a cellular communication device connected to the BPL network;

wherein the computing device is configured to;

parse at least a portion of each of one or more bit streams to form a plurality of first datasets, each of the plurality of first datasets including a portion of each of the one or more bit streams;

disperse the plurality of first datasets as no more than bits into multiple data blocks to form t volumes as part of a plurality of second bit streams such that m number of volumes contain the entirety of the plurality of the first datasets, wherein m<

t;

encrypt each of the t volumes with a different encryption key and/or a different encryption algorithm;

assign to each of the t volumes a different, randomly generated, alphanumeric string as a file name; and

output the t volumes to a remote device via the BPL network such that each powerline within the BPL network transmits less than the entirety of the plurality of the first datasets; and

wherein the cellular communication device is configured to output the t volumes to a remote device via a cellular network.

14. The system of claim 13, wherein the computing device comprises a BPL head end unit.

15. The system of claim 13, wherein:

the system further comprises the remote device; and

the remote device comprises a head end server configured to receive the t volumes and reassemble the t volumes into the one or more bit streams.

16. The system of claim 13, wherein the cellular network is a low power network.

17. The system of claim 13, wherein the cellular communication device is configured to output the t volumes to the remote device using a plurality of cellular channels such that no complete dataset is transmitted over a single channel within the cellular network.

18. The system of claim 17, wherein the cellular communication device is configured to select the plurality of cellular channels using a BPL allocation table.

19. A system for securely storing and transmitting digital information including:

a computing device connected to at least one of a network device or a storage device or both, the computing device comprising a hardware processor; and

a communication network connected to the at least one of a network device or the at least one of a storage device, or both;

wherein;

the hardware processor is configured to;

parse at least a portion of each of one or more multimedia bit streams to form a plurality of first datasets, each of the plurality of first datasets including a portion of each of the one or more bit streams;

disperse the plurality of first datasets as no more than bits into multiple data blocks to form t volumes as part of a plurality of second bit streams such that m number of volumes contain the entirety of the plurality of the first datasets, wherein m<

t;

encrypt each of the t volumes with a different encryption key and/or a different encryption algorithm;

assign to each of the t volumes a different, randomly generated, alphanumeric string as a file name; and

output the t volumes either across a plurality of transmission paths or to a plurality of distributed storage locations in response to a request for display of multimedia content, such that each storage location stores less than the entirety of the plurality of the first datasets or each transmission path transmits less than the entirety of the plurality of the first datasets;

at least a first multimedia bit stream comprises key data;

at least a second multimedia bit stream comprises shared data; and

the key data comprises information required to access the shared data.

20. The system of claim 19, wherein the computing device is further configured to validate the request for display of multimedia content before outputting the t volumes.

21. The system of claim 19, wherein:

the system further comprises a remote device, the remote device comprising a distributed storage location;

each of the t volumes is distributed to the remote device; and

the remote device is configured to receive the t volumes and reassemble the t volumes into the one or more bit streams.

22. The system of claim 21, wherein the remote device is configured to zero or delete the one or more bit streams after receiving the one or more bit streams.

23. The system of claim 21, wherein:

the remote device comprises a subscriber device; and

the one or more multimedia bit streams comprise subscribed or previously purchased content associated with the subscriber device.

24. The system of claim 19, wherein:

the system further comprises a remote device, the remote device comprising a distributed storage location;

at least a first multimedia bit stream comprises a first portion of shared data;

at least a second multimedia bit stream comprises a second portion of the shared data;

the first multimedia bit stream and the second multimedia bit stream are sent successively to the remote device; and

the remote device is configured to reassemble the first multimedia bit stream and the second multimedia bit stream in order to stream the multimedia content.

25. The system of claim 24, wherein:

additional multimedia bit streams comprising additional portions of the shared data are sent to the remote device; and

the remote device is configured to reassemble the additional multimedia bit streams in order to continue to stream the multimedia content.

26. A system for securely storing and transmitting digital information including:

a computing device connected to at least one of a network device or a storage device or both, the computing device comprising a hardware processor; and

a communication network connected to the at least one of a network device or the at least one of a storage device, or both;

wherein the hardware processor is configured to;

parse at least a portion of each of the one or more bit streams to form a plurality of first datasets, each of the plurality of first datasets including a portion of each of the one or more bit streams;

disperse the plurality of first datasets as no more than bits into multiple data blocks to form t volumes as part of a plurality of second bit streams such that m number of volumes contain the entirety of the plurality of the first datasets, wherein m<

t;

encrypt each of the t volumes with a different encryption key and/or a different encryption algorithm;

assign to each of the t volumes a different, randomly generated, alphanumeric string as a file name; and

output the t volumes either across a plurality of transmission paths, such that each transmission path transmits less than the entirety of the plurality of the first datasets, wherein at least one of the t volumes is inserted into an email or chat message.

27. The system of claim 26, wherein the computing device is further configured to send a link providing access to at least one of the t volumes in the email or chat message.

28. The system of claim 26, wherein the computing device comprises a plugin for a communication program, the plugin configured to automatically trigger the parsing, dispersing, and outputting.

29. A method for securely storing and transmitting digital information including:

parsing, with a parsing module of a computing device connected to a plurality of datacenters, at least a portion of each of one or more bit streams to form a plurality of first datasets, the one or more bit streams comprising a virtual machine server, each of the plurality of first datasets including a portion of each of the one or more bit streams;

dispersing, with a dispersal module of the computing device, the plurality of first datasets as no more than bits into multiple data blocks to form t volumes as part of a plurality of second bit streams such that m number of volumes contain the entirety of the plurality of the first datasets, wherein m<

t;

encrypting, with the dispersal module, each of the t volumes with a different encryption key and/or a different encryption algorithm;

assigning, with the dispersal module, to each of the t volumes a different, randomly generated, alphanumeric string as a file name; and

outputting, with the dispersal module, the t volumes to the plurality of datacenters such that each datacenter stores less than the entirety of the plurality of the first datasets.

30. The method of claim 29, wherein the datacenters are geographically distributed with respect to one another.

31. The method of claim 29, further comprising reassembling, with the computing device, the m volumes to instantiate the virtual machine server.

32. A method for securely storing and transmitting digital information including:

receiving, with a computing device, a request to store one or more bit streams;

parsing, with a parsing module of the computing device, at least a portion of each of the one or more bit streams to form a plurality of first datasets, each of the plurality of first datasets including a portion of each of the one or more bit streams;

dispersing, with a dispersal module of the computing device, the plurality of first datasets as no more than bits into multiple data blocks to form t volumes as part of a plurality of second bit streams such that m number of volumes contain the entirety of the plurality of the first datasets, wherein m<

t;

encrypting, with the dispersal module, each of the t volumes with a different encryption key and/or a different encryption algorithm;

assigning, with the dispersal module, to each of the t volumes a different, randomly generated, alphanumeric string as a file name;

outputting, with the dispersal module, the t volumes to a plurality of local or distributed storage locations, such that each storage location stores less than the entirety of the plurality of the first datasets; and

generating a virtual reference stub (VRS) file associated with the t volumes.

33. The method of claim 32, wherein the computing device wherein the VRS file represents the t volumes as a single file.

34. The method of claim 32, further comprising receiving, with the computing device, the request in response to a user interaction with a user interface comprising dragging and dropping a file into an on the fly (OEF) folder.

35. The method of claim 32, further comprising:

receiving, with the computing device, a request to read the VRS file; and

reassembling, with the computing device, the one or more bit streams from the volumes in response to the request.

36. The method of claim 32, wherein the computing device comprises:

a secure user space configured to allow user interaction with data; and

a secure kernel space configured to parse, disperse, and output the data;

wherein the data is not contained within the secure user space at any time.

37. A method for securely storing and transmitting digital information including:

parsing, with a parsing module of a computing device, at least a portion of each of one or more bit streams to form a plurality of first datasets, each of the plurality of first datasets including a portion of each of the one or more bit streams;

dispersing, with a dispersal module of the computing device, the plurality of first datasets as no more than bits into multiple data blocks to form t volumes as part of a plurality of second bit streams such that m number of volumes contain the entirety of the plurality of the first datasets, wherein m<

t;

encrypting, with the dispersal module, each of the t volumes with a different encryption key and/or a different encryption algorithm;

assigning, with the dispersal module, to each of the t volumes a different, randomly generated, alphanumeric string as a file name;

outputting, with the dispersal module, the t volumes to a plurality of local or distributed storage locations, such that each storage location stores less than the entirety of the plurality of the first datasets;

parsing, with the parsing module, at least a portion of each of the t volumes to form a plurality of third datasets, each of the plurality of third datasets including a portion of each of the t volumes;

dispersing, with the dispersal module, the plurality of third datasets as no more than bits into multiple data blocks to form v volumes as part of a plurality of second bit streams such that m number of volumes contain the entirety of the plurality of the first datasets, wherein m<

v;

encrypting, with the dispersal module, each of the t volumes with a different encryption key and/or a different encryption algorithm;

assigning, with the dispersal module, to each of the t volumes a different, randomly generated, alphanumeric string as a file name; and

outputting, with the dispersal module, the t volumes to a plurality of local or distributed storage locations, such that each storage location stores less than the entirety of the plurality of the third datasets.

38. The method of claim 37, further comprising repeating, with the parsing module and the dispersal module, the parsing, dispersing, and outputting.

39. A method for securely storing and transmitting digital information including:

parsing, with a parsing module of a computing device connected to a broadband over powerline (BPL) network comprising a plurality of powerlines, at least a portion of each of one or more bit streams to form a plurality of first datasets, each of the plurality of first datasets including a portion of each of the one or more bit streams;

dispersing, with a dispersal module of the computing device, the plurality of first datasets as no more than bits into multiple data blocks to form t volumes as part of a plurality of second bit streams such that m number of volumes contain the entirety of the plurality of the first datasets, wherein m<

t;

encrypting, with the dispersal module, each of the t volumes with a different encryption key and/or a different encryption algorithm;

assigning, with the dispersal module, to each of the t volumes a different, randomly generated, alphanumeric string as a file name;

outputting, with the dispersal module, the t volumes to a remote device via the BPL network such that each powerline within the BPL network transmits less than the entirety of the plurality of the first datasets; and

outputting, with a cellular communication device connected to the BPL network, the t volumes to a remote device via a cellular network.

40. The method of claim 39, wherein the computing device comprises a BPL head end unit.

41. The method of claim 39, further comprising:

receiving, with a remote device comprising a head end server, the t volumes; and

reassembling, with the remote device, the t volumes into the one or more bit streams.

42. The method of claim 39, wherein the cellular network is a low power network.

43. The method of claim 39, further comprising outputting, with the cellular communication device, the t volumes to the remote device using a plurality of cellular channels such that no complete dataset is transmitted over a single channel within the cellular network.

44. The method of claim 43, further comprising selecting, with the cellular communication device, the plurality of cellular channels using a BPL allocation table.

45. A method for securely storing and transmitting digital information including:

parsing, with a parsing module of a computing device, at least a portion of each of one or more multimedia bit streams to form a plurality of first datasets, each of the plurality of first datasets including a portion of each of the one or more bit streams;

dispersing, with a dispersal module of the computing device, the plurality of first datasets as no more than bits into multiple data blocks to form t volumes as part of a plurality of second bit streams such that m number of volumes contain the entirety of the plurality of the first datasets, wherein m<

t;

encrypting, with the dispersal module, each of the t volumes with a different encryption key and/or a different encryption algorithm;

assigning, with the dispersal module, to each of the t volumes a different, randomly generated, alphanumeric string as a file name; and

outputting, with the dispersal module, the t volumes either across a plurality of transmission paths or to a plurality of distributed storage locations in response to a request for display of multimedia content, such that each storage location stores less than the entirety of the plurality of the first datasets or each transmission path transmits less than the entirety of the plurality of the first datasets;

wherein;

at least a first multimedia bit stream comprises key data;

at least a second multimedia bit stream comprises shared data; and

the key data comprises information required to access the shared data.

46. The method of claim 45, further comprising validating, with the computing device, the request for display of multimedia content before outputting the t volumes.

47. The method of claim 45, further comprising:

distributing each of the t volumes to a remote device comprising a distributed storage location;

receiving, with the remote device, the t volumes; and

reassembling, with the remote device the t volumes into the one or more bit streams.

48. The method of claim 47, further comprising zeroing or deleting, with the remote device the one or more bit streams after receiving the one or more bit streams.

49. The method of claim 47, wherein:

the remote device comprises a subscriber device; and

the one or more multimedia bit streams comprise subscribed or previously purchased content associated with the subscriber device.

50. The method of claim 47, wherein:

at least a first multimedia bit stream comprises a first portion of shared data;

at least a second multimedia bit stream comprises a second portion of the shared data; and

the first multimedia bit stream and the second multimedia bit stream are sent successively to a remote device comprising a distributed storage location;

the method further comprising;

reassembling, with the remote device, the first multimedia bit stream and the second multimedia bit stream in order to stream the multimedia content.

51. The method of claim 50, wherein:

additional multimedia bit streams comprising additional portions of the shared data are sent to the remote device;

the method further comprising

reassembling, with the remote device, the additional multimedia bit streams in order to continue to stream the multimedia content.

52. A method for securely storing and transmitting digital information including:

parsing, with a parsing module of a computing device, at least a portion of each of the one or more bit streams to form a plurality of first datasets, each of the plurality of first datasets including a portion of each of the one or more bit streams;

dispersing, with a dispersal module of the computing device, the plurality of first datasets as no more than bits into multiple data blocks to form t volumes as part of a plurality of second bit streams such that m number of volumes contain the entirety of the plurality of the first datasets, wherein m<

t;

encrypting, with the dispersal module, each of the t volumes with a different encryption key and/or a different encryption algorithm;

assigning, with the dispersal module, to each of the t volumes a different, randomly generated, alphanumeric string as a file name; and

outputting, with the dispersal module, the t volumes either across a plurality of transmission paths, such that each transmission path transmits less than the entirety of the plurality of the first datasets, wherein at least one of the t volumes is inserted into an email or chat message.

53. The method of claim 52, further comprising sending, with the communication device, a link providing access to at least one of the t volumes in the email or chat message.

54. The method of claim 52, further comprising automatically triggering, with a plugin for a communication program of the computing device, the parsing, dispersing, and outputting.

55. An apparatus for securely storing and transmitting digital information including:

a computing device comprising a hardware processor configured to;

parse at least a portion of each of one or more bit streams to form a plurality of first datasets, each of the plurality of first datasets including a portion of each of the one or more bit streams;

disperse the plurality of first datasets as no more than bits into multiple data blocks to form t volumes as part of a plurality of second bit streams such that m number of volumes contain a complete data set the entirety of the plurality of the first datasets, wherein m<

t;

encrypt each of the t volumes with a different encryption key and/or a different encryption algorithm;

assign to each of the t volumes a different, randomly generated, alphanumeric string as a file name; and

output less than m volumes to each of a plurality of storage locations such that each storage location receives less than the entirety of the plurality of the first datasets;

wherein;

each of the volumes has a filename that is different from the filename of any of the other volumes and is different from a filename of the one or more bit streams,

each of the volumes has a size that is different from the size of at least one of the other volumes,

each of the volumes has metadata that is different from the metadata of at least one of the other volumes, or

each of the volumes has a file attribute that is different from the file attribute of at least one of the other volumes, or

a combination thereof.

56. A method for securely storing and transmitting digital information including:

parsing, with a parsing module of a computing device, at least a portion of each of one or more bit streams to form a plurality of first datasets, each of the plurality of first datasets including a portion of each of the one or more bit streams;

dispersing, with a dispersal module of the computing device, the plurality of first datasets as no more than bits into multiple data blocks to form t volumes as part of a plurality of second bit streams such that m number of volumes contain the entirety of the plurality of the first datasets, wherein m<

t;

encrypting, with the dispersal module, each of the t volumes with a different encryption key and/or a different encryption algorithm;

assigning, with the dispersal module, to each of the t volumes a different, randomly generated, alphanumeric string as a file name; and

outputting, with the dispersal module of the computing device, less than m volumes to each of a plurality of storage locations such that each storage location receives less than the entirety of the plurality of the first datasets;

wherein;

each of the volumes has a filename that is different from the filename of any of the other volumes and is different from a filename of the one or more bit streams,

each of the volumes has a size that is different from the size of at least one of the other volumes,

each of the volumes has metadata that is different from the metadata of at least one of the other volumes, or

each of the volumes has a file attribute that is different from the file attribute of at least one of the other volumes, or

a combination thereof.