Systems and methods for dynamic data storage

Patent metadata

Field	Value
Publication number	US-10127244-B2
Application number	US-201414296050-A
Country	US
Kind code	B2
Filing date	Jun 4, 2014
Priority date	Jun 4, 2014
Publication date	Nov 13, 2018
Grant date	Nov 13, 2018

Abstract

Systems ( 100 ) and methods ( 1000 ) for dynamic data storage within a network. The method comprising: receiving at least one first data file ( 202 ) comprising first data ( 302 - 320 ); segmenting the first data so as to form a plurality of first data segments ( 208 ); processing each of the first data segments to transform at least one first attribute of a plurality of attributes thereof so as to form a second data segment ( 210 ); storing the second data segments respectively in a plurality of different data stores ( 116 - 120 ); and dynamically changing physical locations where the second data segments are stored in response to an occurrence of a first trigger event. In some scenarios, the method steps may be iteratively repeated in response to one or more second trigger events (which may be the same as or different than the first trigger event).

First claim

We claim:

1. A method for dynamic data storage within a network, the method comprising:
receiving at least one first data file comprising first data to be stored in at least one data store of the network;
dynamically selecting a first storage model from a plurality of storage models that specifies a plurality of transformation algorithms for the first data based on at least one characteristic of the first data or the network, and at least one trigger event which is to trigger a transformation algorithm change;
deciding whether to selectively bypass segmentation operations for the first data based on at least one of the first data file's size, a type of information represented by the first data, and a type of device from which the first data file was received;
segmenting the first data so as to form a plurality of first data segments when a decision is made that the segmentation operations should not be bypassed;
processing, by a first network node, each of the first data segments to transform at least one first attribute of a plurality of attributes thereof in accordance with a first transformation algorithm of the plurality of transformation algorithms so as to form a second data segment, where the plurality of attributes comprise at least one of a file type, an encoding scheme, a plain/cipher text state, a cryptographic scheme, a data file size, an inflation scheme, a data access scheme and a maneuver frequency;
detecting the at least one trigger event;
dynamically changing the first transformation algorithm to a second different transformation algorithm contained in the plurality of transformation algorithms, in response to the trigger event;
processing, by a second network node, each second data segment to transform at least one second attribute of the plurality of attributes thereof in accordance with the second different transformation algorithm so as to form a third data segment; and
storing the third data segments respectively in the plurality of different data stores;
wherein at least the first and second network nodes perform transformations to the first data while the first data is en-route to the at least one data store.

2. The method according to claim 1 , wherein the first attributes of at least two of the first data segments are transformed in accordance with different algorithms.

3. The method according to claim 1 , wherein the first attribute is periodically re-transformed in accordance with a transformation algorithm which is different than at least one transformation algorithm used in a previous transformation of the first attribute.

4. The method according to claim 1 , further comprising transforming a different attribute each time the physical location is changed for a respective one of the third data segments.

5. The method according to claim 1 , wherein the second attribute is different than the first attribute.

6. The method according to claim 1 , further comprising synchronously or asynchronously changing transformation algorithms used to transform the first and second attributes.

7. The method according to claim 1 , further comprising:
receiving a second data file comprising second data; and
segmenting the second data file so as to form a plurality of fourth data segments in accordance with a segmentation scheme which is different than the segmentation scheme used to segment the first data file.

8. The method according to claim 1 , wherein the trigger event is defined by at least one pre-defined rule stored within the network or a data store of an electronic device.

9. A system, comprising:
a first network node configured to
receive at least one first data file comprising first data,
dynamically select a first storage model from a plurality of storage models that specifies a plurality of transformation algorithms for the first data based on at least one characteristic of the first data or the network, and at least one trigger event which is to trigger a transformation algorithm change;
decide whether to selectively bypass segmentation operations for the first data based on at least one of the first data file's size, a type of information represented by the first data, and a type of device from which the first data file was received;
segment the first data so as to form a plurality of first data segments when a decision is made that the segmentation operations should not be bypassed; and
process each of the first data segments to transform at least one first attribute of a plurality of attributes thereof in accordance with a first transformation algorithm of the plurality of transformation algorithms so as to form a second data segment, where the plurality of attributes comprise at least one of a file type, an encoding scheme, a plain/cipher text state, a cryptographic scheme, a data file size, an inflation scheme, a data access scheme and a maneuver frequency;

a second network node configured to
process each second data segment to transform at least one second attribute of the plurality of attributes thereof in accordance with the second different transformation algorithm of the plurality of transformation algorithms so as to form a third data segment; and

a plurality of different data stores configured to store the third data segments respectively therein;
wherein at least the first and second network nodes perform transformations to the first data while the first data is en-route to the plurality of different data stores;
and
wherein the first transformation algorithm is dynamically changed to the second different transformation algorithm in response to an occurrence of the at least one trigger event.

10. The system according to claim 9 , wherein the first attributes of at least two of the first data segments are transformed in accordance with different algorithms.

11. The system according to claim 9 , wherein the first attribute is periodically re-transformed in accordance with a transformation algorithm which is different than at least one transformation algorithm used in a previous transformation of the first attribute.

12. The system according to claim 9 , wherein a different attribute is transformed each time the physical location is changed for a respective one of the third data segments.

13. The system according to claim 9 , wherein the first and second network nodes are further configured to synchronously or asynchronously change transformation algorithms used to transform the first and second attributes.

14. The system according to claim 9 , wherein the first or second network node is further configured to: receive a second data file comprising second data; and segment the second data file so as to form a plurality of fourth data segments in accordance with a segmentation scheme which is different than the segmentation scheme used to segment the first data file.

15. The system according to claim 9 , wherein the trigger event is defined by at least one pre-defined rule stored within a network or a data store of an electronic device.

Assignees

• Harris Corp

Inventors

• Smith Wayne B
• Dowin Christopher T
• Sharpe Ryan E

Classifications

• G06F21/6227

  where protection concerns the structure of data, e.g. records, types, queries · CPC title

• G06F21/6218

  to a system of files or objects, e.g. local or distributed file system or database · CPC title

• H04L63/14

  for detecting or protecting against malicious traffic · CPC title

• H04L63/1441

  Countermeasures against malicious traffic (countermeasures against attacks on cryptographic mechanisms H04L9/002) · CPC title

• G06F2221/2107

  File encryption · CPC title