System and method for data recovery and protection

• US 20020069363A1
• Filed: 12/05/2000
• Published: 06/06/2002
• Est. Priority Date: 12/05/2000
• Status: Abandoned Application

• Current Assignee: Modus Operandi, Inc.
• Original Assignee: Modus Operandi, Inc.
• Inventors: Winburn, Michael Lee
• Application Number:
  US09/730,049
• Publication Number:
  US 20020069363A1
• Time in Patent Office: Days
• US Class Current: 713/200
• CPC Class Codes: G06F 11/1446 Point-in-time backing up or restoration of persistent data
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2151 Time stamp

Abstract

A protected data file currently in use is duplicated as an authentic backup file, while changing the current file'"'"'s data appearance and separating the location of the authentic backup file from the original and current file, to camouflage its identity from an unauthorized intruder intending to modify or destroy the original file. A series of indica is generated and stored in a recovery address group or file. The indica represent the original current file and is used to reconstruct the authentic backup file and to write a restored file into the current protected data file. The recovery process may be initiated on a schedule or whenever the original current file is accessed or whenever an unauthorized use of the current file is detected and a comparison of the authentic backup file indicates the original current file has been modified. In this way, the authentic data saved from the original current file may be used to restore the protected data file as originally written and saved in the authentic backup.

Claims

1. In a data processor, a system for making an authentic backup file from an authorized protected data file, with the data in said authentic backup file translated from said authorized protected data file to camouflage the source or identity of said authentic backup file or its relationship with said authorized protected data file and with indicia produced by said translation representing said translation, stored in a recovery address group for comparison with a test identifier produced from the current protected data file to determine if the current protected data file is the same or different from the authorized protected data file and for access and use of said recovery address group for translation of said authentic backup file to said authorized data file and restoration of said authorized protected file, comprising,

a) means for translation of an authorized protected data file to an authentic backup file, camouflaged to hide its relationship to said authorized protected data file, and for storing said authentic backup file;

b) means for producing an identifier from aid authorized protected data file and for storing said identifier;

c) means for producing a test identifier from a current protected data file for comparison with said identifier for determining if said current protected file is the same or is different from said authorized protected data file; and

d) means responsive to said comparison for translating said authentic backup file to said authorized protected data file for restoring said authorized protected file.

2. The system of claim 1, comprising,

e) means responsive to said translation of said authorized protected data file, and for producing indicia representing said translation and for storing said indicia in a recovery address group.

3. The system of claim 2, comprising

f) means for accessing said indicia from said recovery data group, and

g) means for using said indicia for translation of said authentic data file to said authorized protected data file.

4. The system of claim 1, wherein, said means for producing an identifier comprises,

h) means for producing said identifier from at least one attribute of said authorized protected data file.

5. The system of claim 4, wherein,

i) said at least one attribute is unique for said authorized protected data file.

6. The system of claim 1, wherein,

j) means responsive to said comparison for producing an indication of an unauthorized change to said authorized protected data file.

7. The system of claim 1, wherein,

k) said means for translation includes means for compression or encrypting of said authorized protected data file and producing indica representing said respective compression or encryption .

8. The system of claim 7, comprising,

l) means for storing said indicia in a recovery address group in an active memory.

9. The system of claim 1, wherein,

n) said means for translation includes means for creating a new file name or file location for said authentic backup file and storing said new file name or location in a recovery address group.

10. The system of claim 1, comprising,

o) means for producing indicia representing said translation of said authorized protected data file, and for storing said indicia in a recovery address group in active memory.

11. A system for restoring an authorized protected data file from an authentic backup file, comprising,

a) means for making an authentic backup file from an authorized protected data file;

b) means for monitoring a current protected data file for a change in said current protected file and for making a new authentic backup file in response to an authorized change to said current protected data file;

c) said means for monitoring including means for restoring said authorized protected data file with said authentic backup file in response to an unauthorized change to said current protected data file.

12. The system of claim 11, wherein,

d) said means for making an authentic backup file includes means for camouflaging the identity of said authentic backup file by translation of said authorized protected data file.

13. The system of claim 11, wherein,

e) said means for making an authentic backup file includes means for translating said authorized protected file to said authentic backup file and for producing indicia representing said translation.

14. The system of claim 13, wherein, said means for storing said indica includes means for storing said indicia in a recovery address group in an active memory.

15. The system of claim 14, wherein said means for restoring said authorized protected data file includes means for accessing and using said indicia for translating said data from said authentic backup file to said authorized protected data file.

16. The system of claim 13, wherein, said means for making said authentic backup file includes means to camouflage identity of said authorized backup file.

17. The system of claim 11, wherein,

said means for making an authentic backup file from an authorized protected data file includes,

means for producing an identifier from said authorized protected data file;

said means for monitoring the current protected data file for a change in said current

protected file includes means for producing a test identifier for comparison with said identifier;

means for comparison of said identifier with said test identifier; and

said means for restoring said authorized protected data file with said authentic backup file, restoring said authorized protected data file in response to said means for comparison indicating an unauthorized change to said current protected data file.

19. The system of claim 18, wherein,

f) said means for translating an authorized protected data file into an authentic backup file includes means to camouflage the identify of said authentic backup file.

20. The system of claim 19, wherein,

g) said means for making an authentic backup file includes means for producing indica representing said translation of at least some of the data in said authorized protected data file and for storing said indica.

21. The system of claim 20, wherein, said means for storing said indica includes means for storing said indicia in a recovery address group in an active memory.

22. The system of claim 20, wherein said means for restoring said authorized protected data file includes means for accessing and using said indicia for translating said data from said authentic backup file to said authorized protected data file.

23. The system of claim 19, wherein, said means to camouflage the identify of said backup file includes means for changing the relationship between said authorized protected data file and said authentic backup file.

24. The system of claim 18, wherein,

said means for producing a test identifier includes means for monitoring said current protected data file and producing said test identifier in response to a sensing time or an event.

27. The method claim 26, wherein,

d) said step of making an authentic backup file includes the step of camouflaging the identity of said authentic backup file by translation of said authorized protected data file.

28. The method of claim 27, wherein,

e) said step of making an authentic backup file includes the step of producing indica representing said translation of the data in said authorized protected data file into said authentic backup file and the step of storing said indica.

29. The method of claim 28, including,

the step of storing said indica in a recovery address group in an active memory.

30. The method of claim 26, wherein said step of restoring said authorized protected data file includes the step of accessing and using said indicia for translating said data from said authentic backup file to said authorized protected data file.

31. The method of claim 26, wherein, said step of making said authentic backup file includes the step of camouflaging the identify of said authentic backup file.

18. A computer program recorded on a medium for use in a data processing system, comprising,

a) means for translating an authorized protected data file into an authentic backup file;

b) means for producing an identifier for said authorized protected data file;

c) means for producing a test identifier for a current protected data file;

d) means for comparing said test identifier with said identifier;

e) means responsive to a said comparison for translating said authentic backup file into said authorized protected data file and for restoring said current protected data file with said authorized protected data file.

25. A data processing system, comprising,

a data processor;

an active memory;

a static memory;

an operating system for transferring data to or from said active memory, said data processor or said static memory, for data processing or storage;

a program stored in said active or static memory;

said data processor responsive to said program for translating an authorized protected data file into a camouflaged authentic backup file;

said data processor responsive to said program for comparing said authorized protected data file with a current protected data file and producing an indication of a change in said current protected data file relative to said authorized protected data file; and

said data processor responsive to said indication of a change for reconstructing said authorized protected data file from said camouflaged authentic backup file and restoring said authorized protected data file.

26. A method for restoring an authorized protected data file from an authentic backup file, comprising the steps of,

a) the step of making an authentic backup file from an authorized protected data file;

b) the step of monitoring the current protected data file for a change in said current protected file and making a new authentic backup file in response to an authorized change to said current protected data file or producing an indication of an unauthorized change made in said current protected data file; and

c) the step of restoring said authorized protected data file with said authentic backup file in response to said indication of an unauthorized change made in said current protected data file.