System and method for synchronizing an encrypted file with a remote storage

• US 9,208,341 B2
• Filed: 10/08/2013
• Issued: 12/08/2015
• Est. Priority Date: 08/14/2013
• Status: Active Grant

• Current Assignee: Secudrive Co., Ltd.
• Original Assignee: Brainzquare Incorporated
• Inventors: Kang, Seon Geun, Park, Jeong Hwan
• Primary Examiner(s): Abrishamkar, Kaveh
• Assistant Examiner(s): Wilcox, James J
• Application Number:
  US14/048,476
• Publication Number:
  US 20150052353A1
• Time in Patent Office: 791 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload

Abstract

A method and system for synchronizing an encrypted file with a remote storage is disclosed. According to one embodiment, a computer-implemented method comprises providing a user with a user application and an encryption key in a portable memory device. The user runs the user application to securely access to a storage on a cloud storage system. A file is encrypted with the encryption key stored in the portable memory device and synchronized with the cloud storage system.

Claims

1. A computer-implemented method comprising:

providing a portable memory device including a user application, an encryption key, and authentication information, wherein the user application is stored in a general area of the portable memory device that is accessible with a password of the portable memory device, and wherein the encryption key and the authentication information are stored in a hidden area of the portable memory device that is accessible by the user application;

allowing an access to the user application that is stored in the general area of the portable memory device upon receiving the password of the portable memory device;

running the user application from the general area of the portable memory device, wherein the user application accesses the authentication information stored in the hidden area of the portable memory device and provides a secure access to an encrypted file that is encrypted with the encryption key and stored in the storage of the cloud storage system;

launching a process for detecting an update to the encrypted file, wherein the process compares a local copy of the encrypted file stored in a secure area of the portable memory device and the encrypted file stored in the storage of the cloud storage system; and

synchronizing the local copy of the encrypted file stored in the secure area of the portable memory device and the encrypted file stored in the storage of the cloud storage system.

2. The computer-implemented method of claim 1, wherein the portable memory device is a USB flash drive.

3. The computer-implemented method of claim 2, wherein the USB flash drive contains a hardware encryption chip, and wherein the user application is encrypted using the hardware encryption chip.

4. The computer-implemented method of claim 1, wherein the hidden area of the portable memory device is neither visible to nor accessible by any other application except the user application.

5. The computer-implemented method of claim 1, wherein the local copy of the encrypted file includes a decrypted local copy, and wherein the decrypted local copy of the encrypted file is stored in the secure area of the portable memory device.

6. The computer-implemented method of claim 5, wherein the local copy of the encrypted file further includes an encrypted local copy of the encrypted file, and wherein the encrypted local copy of the encrypted file is stored in the secure area of the portable memory device.

7. The computer-implemented method of claim 1 further comprising:

decrypting the encrypted file stored in the storage of the cloud storage system; and

temporarily storing a decrypted copy of the encrypted filed in the secure area of the portable memory device.

8. The computer-implemented method of claim 1, further comprising:

delivering a control file to the portable memory device and;

remotely resetting the password of the portable memory device.

9. The computer-implemented method of claim 1, further comprising delivering a control file to the portable memory device via the cloud storage system and destroying the encrypted file during synchronization.

10. The computer-implemented method of claim 1, further comprising automatically launching the user application after providing the password of the portable memory device.

11. A non-transitory computer readable medium having stored thereon computer-readable instructions, which instructions when executed by a processor cause the processor to perform operations comprising:

providing a portable memory device including a user application, an encryption key, and authentication information, wherein the user application is stored in a general area of the portable memory device that is accessible with a password of the portable memory device, and wherein the encryption key and the authentication information are stored in a hidden area of the portable memory device that is accessible by the user application;

allowing an access to the user application that is stored in the general area of the portable memory device upon receiving the password of the portable memory device;

running the user application from the general area of the portable memory device, wherein the user application accesses the authentication information stored in the hidden area of the portable memory device and provides a secure access to an encrypted file that is encrypted with the encryption key and stored in the storage of the cloud storage system;

launching a process for detecting an update to the encrypted file, wherein the process compares a local copy of the encrypted file stored in a secure area of the portable memory device and the encrypted file stored in the storage of the cloud storage system; and

synchronizing the local copy of the encrypted file stored in the secure area of the portable memory device and the encrypted file stored in the storage of the cloud storage system.

12. The non-transitory computer readable medium of claim 11, wherein the portable memory device is a USB flash drive.

13. The non-transitory computer readable medium of claim 12, wherein the USB flash drive contains a hardware encryption chip, and wherein the user application is encrypted using the hardware encryption chip.

14. The non-transitory computer readable medium of claim 11, wherein the hidden area of the portable memory device is neither visible to nor accessible by any other application except the user application.

15. The non-transitory computer readable medium of claim 11, wherein the local copy of the encrypted file includes a decrypted local copy, and wherein the decrypted local copy of the encrypted file is stored in the secure area of the portable memory device.

16. The non-transitory computer readable medium of claim 15, wherein the local copy of the encrypted file further includes an encrypted local copy of the encrypted file, and wherein the encrypted local copy of the encrypted file is stored in the secure area of the portable memory device.

17. The non-transitory computer readable medium of claim 11, wherein the computer-readable instructions, when executed by the processor, cause the processor to perform operations further comprising:

decrypting the encrypted file stored in the storage of the cloud storage system; and

temporarily stores a decrypted copy of the encrypted filed in the secure area of the portable memory device.

18. The non-transitory computer readable medium of claim 11, wherein the computer-readable instructions, when executed by the processor, cause the processor to perform operations further comprising:

delivering a control file to the portable memory device; and

remotely resetting the password of the portable memory device.

19. The non-transitory computer readable medium of claim 11, wherein the computer-readable instructions, when executed by the processor, cause the processor to perform operations further comprising delivering a control file to the portable memory device via the cloud storage system and destroying the encrypted file during synchronization.

20. The non-transitory computer readable medium of claim 11, wherein the computer-readable instructions, when executed by the processor, cause the processor to perform operations further comprising automatically launching the user application after providing the password of the portable memory device.