Secure data parser method and system
First Claim
Patent Images
1. A secure storage network comprising:
- a plurality of physical storage devices storing thereon a plurality of shares; and
a secure storage system configured to;
present to a client device a virtual disk, the virtual disk comprising a directory mapped to the plurality of physical storage devices such that physical locations of the shares are hidden from the client device;
receive a request from the client device via the network to store data to the virtual disk,receive the data via the network;
encrypt the data and split the data into the plurality of shares, wherein each of the plurality of shares comprises a subset of less than all of the data, and wherein splitting the data comprises rearranging the subset in each respective share from an original order, and wherein the plurality of shares includes data indicative of a key used to secure the data;
store the plurality of shares on the plurality of physical storage devices; and
receive a request from the client device to read second data from the virtual disk via the network, wherein the secure storage system responds by;
reading the second data from the virtual disk by reconstituting the second data from at least a portion of a second plurality of shares on the plurality of physical storage devices; and
sending the second data via the network to the client device.
4 Assignments
0 Petitions
Accused Products
Abstract
A secure data parser is provided that may be integrated into any suitable system for securely storing and communicating data. The secure data parser parses data and then splits the data into multiple portions that are stored or communicated distinctly. Encryption of the original data, the portions of data, or both may be employed for additional security. The secure data parser may be used to protect data in motion by splitting original data into portions of data that may be communicated using multiple communications paths.
-
Citations
18 Claims
-
1. A secure storage network comprising:
-
a plurality of physical storage devices storing thereon a plurality of shares; and a secure storage system configured to; present to a client device a virtual disk, the virtual disk comprising a directory mapped to the plurality of physical storage devices such that physical locations of the shares are hidden from the client device; receive a request from the client device via the network to store data to the virtual disk, receive the data via the network; encrypt the data and split the data into the plurality of shares, wherein each of the plurality of shares comprises a subset of less than all of the data, and wherein splitting the data comprises rearranging the subset in each respective share from an original order, and wherein the plurality of shares includes data indicative of a key used to secure the data; store the plurality of shares on the plurality of physical storage devices; and receive a request from the client device to read second data from the virtual disk via the network, wherein the secure storage system responds by; reading the second data from the virtual disk by reconstituting the second data from at least a portion of a second plurality of shares on the plurality of physical storage devices; and sending the second data via the network to the client device. - View Dependent Claims (2, 3, 4, 5, 15)
-
-
6. A secure storage system, the system comprising:
-
a memory; a programmed hardware processor configured to; present to a client device a virtual disk, the virtual disk comprising a directory mapped to a plurality of physical storage devices such that physical locations of a plurality of shares are hidden from the client device; receive a request from the client device via a network to store data to the virtual disk; receive, in response to receiving the request, the data via the network; encrypt the data and split the data into the plurality of shares, wherein each of the plurality of shares comprises a subset of less than all of the data, and wherein splitting the data comprises rearranging the subset in each respective share from an original order, and wherein the plurality of shares includes data indicative of a key used to secure the data; store the plurality of shares on the plurality of physical storage devices; receive a request from the client device to read second data from the virtual disk via the network, wherein the secure storage responds by; reading the second data from the virtual disk by reconstituting the second data from at least a portion of a second plurality of shares on the plurality of physical storage devices; and sending the second data to the client device via the network. - View Dependent Claims (7, 8, 9, 16)
-
-
10. A method of securely storing data on a network having a client device connected to a secure storage system via a network, the method comprising:
-
presenting a virtual disk via the network, wherein the virtual disk comprises a directory mapped to a plurality of physical storage devices such that physical locations of a plurality of shares are hidden from the client device; receiving a request to write data to the virtual disk via the network; and writing the data to the virtual disk by encrypting the data and splitting the data into the plurality of shares, wherein each of the plurality of shares comprises a subset of less than all of the data, and wherein splitting the data comprises rearranging the subset in each respective share from an original order, and wherein the plurality of shares include data indicative of a key used to secure the data; storing the plurality of shares on the plurality of physical storage devices; receiving a request to read second data from the virtual disk via the network; reading the second data from the virtual disk by reconstituting the second data from at least a portion of a second plurality of shares; and sending the second data to the client device via the network. - View Dependent Claims (11, 12, 17)
-
-
13. A method of securely accessing data the method comprising:
-
presenting, by processing circuitry, to a client device a virtual disk via a network, wherein the virtual disk comprises a directory mapped to a plurality of physical storage devices storing thereon a plurality of shares such that physical locations of the plurality of shares are hidden from the client device; receiving a request from the client device to read data from the virtual disk via the network; reading the data from the virtual disk by reconstituting the data from at least a portion of the plurality of shares, each of the plurality of shares comprising a subset of less than all of the data, and wherein splitting the data comprises rearranging the subset in each respective share from an original order, and wherein the plurality of shares include data indicative of a key used to secure the data; receiving a request to write second data to the virtual disk via the network; encrypting the data and splitting the second data into a second plurality of shares; and storing the second plurality of shares on the plurality of physical storage devices. - View Dependent Claims (14, 18)
-
Specification