Systems, methods, and computer program products for secure multi-enterprise storage

• US 9,256,613 B2
• Filed: 05/16/2015
• Issued: 02/09/2016
• Est. Priority Date: 03/02/2011
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Van Buskirk, Ronald E. II, Wright, David L.
• Primary Examiner(s): LEWIS, CHERYL RENEA
• Application Number:
  US14/714,278
• Publication Number:
  US 20150248433A1
• Time in Patent Office: 269 Days
• Field of Search: 707/827
• US Class Current: 1/1
• CPC Class Codes: G06F 16/125 characterised by the use of retention policies retention policies for HSM systems G06F16/185
• CPC Class Codes: G06F 16/162 Delete operations erasing in storage systems G06F3/0652
• CPC Class Codes: G06F 16/174 Redundancy elimination performed by the file system management of the data involved in backup or backup restore using de-duplication of the data G06F11/14
• CPC Class Codes: G06F 16/1748 De-duplication implemented within the file system, e.g. based on file segments de-duplication techniques in storage systems for the management of data blocks G06F3/0641
• CPC Class Codes: G06F 16/951 Indexing; Web crawling techniques
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: H04L 2209/24 Key scheduling, i.e. generating round keys or sub-keys for block encryption
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]
• CPC Class Codes: H04L 9/3242 involving keyed hash functions, e.g. message authentication codes [MACs], CBC-MAC or HMAC

Abstract

In one embodiment, a computer program product for storing data to a storage network includes a computer readable storage medium having program instructions embodied therewith, the program instructions being executable by a computer to cause the computer to receive a plurality of data identifiers (IDs) from multiple data providers, each data ID being associated with one of a plurality of files, store the plurality of data IDs to a database, identify any duplicate data IDs in the database to determine if any of the plurality of files associated with the plurality of data IDs are non-confidential, receive one of the files having a duplicate data ID, and store the file having the duplicate data ID to a storage network.

Claims

1. A computer program product for storing data to a storage network, the computer program product comprising a non-transitory computer readable storage medium having program instructions embodied therewith, the program instructions being executable by a computer to cause the computer to:

receive, by the computer, a plurality of data identifiers (IDs) from multiple data providers, each data ID being associated with one of a plurality of files;

store, by the computer, the plurality of data IDs to a database;

identify, by the computer, any duplicate data IDs in the database to determine if any of the plurality of files associated with the plurality of data IDs are non-confidential;

receive, by the computer, one of the files having a duplicate data ID; and

store, by the computer, the file having the duplicate data ID to a storage network.

2. The computer program product as recited in claim 1, wherein the data ID is unique to each different file and is only duplicated when the files are duplicates of one another.

3. The computer program product as recited in claim 1, wherein the data ID is a cryptographic hash.

4. The computer program product as recited in claim 1, wherein the database is a remotely accessible database.

5. The computer program product as recited in claim 1, comprising program instructions executable by the computer to cause the computer to cause deletion of the file having the duplicate data ID that is stored to the storage network from a system of one of the data providers from which the data ID associated with the file having the duplicate data ID was received.

6. The computer program product as recited in claim 1, comprising:

program instructions executable by the computer to cause the computer to create an access list for a file stored to the storage network; and

program instructions executable by the computer to cause the computer to populate the access list with any data providers that have authority to access the file.

7. The computer program product as recited in claim 6, wherein the access list is created when more than one data provider has requested storage of the file to the storage network.

8. The computer program product as recited in claim 6, wherein data providers have access to the file stored to the storage network when a data ID associated with the file stored to the storage network is received from the data providers indicating that the file was stored in a system of those data providers.

9. The computer program product as recited in claim 1, wherein each data provider which provides any of the plurality of files to be stored to the storage network is charged a reduced amount of money based on an extent of sharing of the plurality of files among other data providers on the storage network.

10. The computer program product as recited in claim 1, wherein the storage network is implemented as a cloud storage network.

11. A system, comprising a hardware processor and logic integrated with and/or executable by the processor, the logic being configured to:

receive a data identifier (ID) associated with each of a plurality of files from multiple data providers;

store the data ID associated with each of the plurality of files to a database;

identify any duplicate data IDs in the database to determine if any of the plurality of files associated with the data IDs are non-confidential;

receive one of the files having a duplicate data ID; and

store the file having the duplicate data ID to a storage network.

12. The system as recited in claim 11, wherein the data ID is unique to each different file and is only duplicated when the files are duplicates of one another.

13. The system as recited in claim 11, wherein the data ID is a cryptographic hash.

14. The system as recited in claim 11, wherein the logic is further configured to:

query one of the data providers which provided the file having the duplicate data ID to determine if the data provider wants to store the file having the duplicate data ID to the storage network; and

receive a response from the data provider indicating whether or not to store the file having the duplicate data ID to the storage network.

15. The system as recited in claim 11, wherein the logic is further configured to cause deletion of the file having the duplicate data ID that is stored to the storage network from a system of one of the data providers from which the data ID associated with the file having the duplicate data ID was received.

16. The system as recited in claim 11, wherein the logic is further configured to:

create an access list for a file stored to the storage network; and

populate the access list with any data providers that have authority to access the file stored to the storage network,

wherein the access list is created when more than one data provider has requested storage of the file to the storage network.

17. The system as recited in claim 16, wherein data providers have access to the file stored to the storage network when a data ID associated with the file is received from those data providers indicating that the file was stored in a system of those data providers.

18. The system as recited in claim 16, wherein the storage network is implemented as a cloud storage network.

19. A method:

receiving, by a processor, a data identifier (ID) associated with each of a plurality of files from multiple data providers;

storing the data ID associated with each of the plurality of files to a database;

identifying any duplicate data IDs in the database to determine if any of the plurality of files associated with the data IDs are non-confidential;

receiving one of the files having a duplicate data ID; and

storing the file having the duplicate data ID to a storage network.

20. The method as recited in claim 19, comprising:

querying one of the data providers which provided the file having the duplicate data ID to determine if the data provider wants to store the file having the duplicate data ID to the storage network; and

receiving a response from the data provider indicating whether or not to store the file having the duplicate data ID to the storage network.