Authorization path secured electronic storage system

• US 9,912,642 B1
• Filed: 07/10/2015
• Issued: 03/06/2018
• Est. Priority Date: 07/10/2015
• Status: Active Grant

• Current Assignee: Erik L. Eidt
• Original Assignee: Erik L. Eidt
• Inventors: Eidt, Erik L.
• Primary Examiner(s): To, Baotran N
• Application Number:
  US14/796,951
• Time in Patent Office: 970 Days
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]

Abstract

A secure electronic storage system includes an authentication gateway, a user/system interface coupled to the authentication gateway, a secure digital storage including a plurality of memory blocks (Containers) that store at least one information resource (Fact), wherein a target Container can only be accessed by a Fact comprising a valid authorization path (Authorization), and a memory controller coupling the user/system interface to the secure digital storage. In a non-limiting example embodiment, the memory controller is operative to: (a) manage the creation, sharing and unsharing of Containers; and (b) determine if a request to access a target Container includes a valid Authorization for that Container.

Claims

1. A computer implemented process for secure electronic storage comprising:

authenticating a user to provide the user with access to a user account including at least one information resource that comprises an Authorization including

(a) a reference to a secure memory block,

(b) an access permission,

(c) an identifier (ID),

(d) a termination flag, and

(e) an embedded authorization path comprising an ordered list of authorization IDs;

receiving a request including an authorization path to access a target secure memory block; and

determining if the Authorization allows for valid access to the target secure memory block.

2. A computer implemented process for secure electronic storage as recited in claim 1 wherein the process maintains a state with a current-target secure memory block variable and a permission bit set.

3. A computer implemented process for secure electronic storage as recited in claim 1 wherein an embedded authorization path is processed recursively.

4. A computer implemented process for secure electronic storage as recited in claim 1 wherein the Authorization further includes an expiration expression.

5. A non-transitory computer readable medium including code segments implementing a process for secure electronic storage comprising:

code segments authenticating a user to provide the user with access to a user account including at least one information resource that comprises an Authorization data structure including

(a) a reference to a secure memory block,

(b) an access permission,

(c) an identifier (ID),

(d) a termination flag, and

(e) an embedded authorization path comprising an ordered list of authorization IDs;

code segments receiving a request including an authorization path to access a target secure memory block; and

code segments determining if the Authorization allows for valid access to the target secure memory block.

6. A non-transitory computer readable medium including code segments implementing a process for secure electronic storage as recited in claim 5 wherein the process maintains a state with a current-target secure memory block variable and a permission bit set.

7. A non-transitory computer readable medium including code segments implementing a process for secure electronic storage as recited in claim 5 wherein an embedded authorization path is processed recursively.

8. A non-transitory computer readable medium including code segments implementing a process for secure electronic storage as recited in claim 5 wherein the Authorization further includes an expiration expression.