Secure distributed backup for personal device and cloud data

Patent metadata

Field	Value
Publication number	US-10878116-B2
Application number	US-201916253200-A
Country	US
Kind code	B2
Filing date	Jan 21, 2019
Priority date	Jan 3, 2015
Publication date	Dec 29, 2020
Grant date	Dec 29, 2020

Abstract

Methods, apparatus, systems and articles of manufacture are disclosed for secure distributed backup for personal device and cloud data. An example method disclosed herein includes, in response to a request for a file from a client device, obtaining a map corresponding to the file from a remote device, and requesting, by executing an instruction with a processor, a first file chunk from a first cloud storage location based on the map. The example method further includes requesting, by executing an instruction with the processor, a second file chunk from a second cloud storage location based on the map, and generating, by executing an instruction with the processor, the file by combining the first file chunk and the second file chunk. The example method also includes causing transmission of the file to the client device.

First claim

What is claimed is:

1. A system comprising:
a hardware processor; and
hardware storage including instructions which, when executed, cause the hardware processor to:
in response to a request for a file from a client device, obtain a map corresponding to the file from a remote device;
request a first file chunk from a first cloud storage location based on the map, the map including (A) the first cloud storage location for the first file chunk on a first cloud storage service, (B) first login information to access the first cloud storage service, and (C) a first chunking method corresponding to the first file chunk;
request a second file chunk from a second cloud storage location based on the map, the map including (A) the second cloud storage location for the second file chunk on a second cloud storage service, (B) second login information to access the second cloud storage service, and (C) a second chunking method corresponding to the second file chunk, the second chunking method different from the first chunking method;
generate the file by combining the first file chunk and the second file chunk; and
cause transmission of the file to the client device.

2. The system of claim 1 , wherein the hardware processor is to:
determine first encryption information for the first file chunk and second encryption information for the second file chunk based on the map; and
decrypt the first file chunk based on the first encryption information and the second file chunk based on the second encryption information.

3. The system of claim 2 , wherein the hardware processor is to decrypt the first file chunk based on a first encryption method and to decrypt the second file chunk based on a second encryption method, the first encryption method different from the second encryption method.

4. The system of claim 1 , wherein the hardware processor is to generate the file by combining the first file chunk and the second file chunk based on the first chunking method and the second chunking method.

5. The system of claim 1 , wherein the first file chunk and the second file chunk have randomly determined sizes.

6. The system of claim 1 , wherein the hardware processor is to decrypt the map.

7. The system of claim 1 , wherein the hardware processor is to request the first file chunk via a first API of the first cloud storage service, and to request the second file chunk via a second API of the second cloud storage service.

8. A hardware storage device or hardware storage disk comprising instructions which, when executed, cause a hardware processor to at least:
in response to a request for a file from a client device, obtain a map corresponding to the file from a remote device;
request a first file chunk from a first cloud storage location based on the map, the map including (A) the first cloud storage location for the first file chunk on a first cloud storage service, (B) first login information to access the first cloud storage service, and (C) a first chunking method corresponding to the first file chunk;
request a second file chunk from a second cloud storage location based on the map, the map including (A) the second cloud storage location for the second file chunk on a second cloud storage service, (B) second login information to access the second cloud storage service, and (C) a second chunking method corresponding to the second file chunk, the second chunking method different from the first chunking method;
generate the file by combining the first file chunk and the second file chunk; and
cause transmission of the file to the client device.

9. The hardware storage device or hardware storage disk of claim 8 , wherein the instructions, when executed, cause the hardware processor to:
determine first encryption information for the first file chunk and second encryption information for the second file chunk based on the map; and
decrypt the first file chunk based on the first encryption information and the second file chunk based on the second encryption information.

10. The hardware storage device or hardware storage disk of claim 9 , wherein the instructions, when executed, cause the hardware processor to decrypt the first file chunk based on a first encryption method and to decrypt the second file chunk based on a second encryption method, the first encryption method different from the second encryption method.

11. The hardware storage device or hardware storage disk of claim 8 , wherein the instructions, when executed, cause the hardware processor to generate the file by combining the first file chunk and the second file chunk based on the first chunking method and the second chunking method.

12. The hardware storage device or hardware storage disk of claim 8 , wherein the first file chunk and the second file chunk have randomly determined sizes.

13. The hardware storage device or hardware storage disk of claim 8 , wherein the instructions, when executed, cause the hardware processor to decrypt the map.

14. The hardware storage device or hardware storage disk of claim 8 , wherein the instructions, when executed, cause the hardware processor to request the first file chunk via a first API of the first cloud storage service and to request the second file chunk via a second API of the second cloud storage service.

15. A method comprising:
in response to a request for a file from a client device, obtaining a map corresponding to the file from a remote device;
requesting, by executing an instruction with a processor, a first file chunk from a first cloud storage location based on the map, the map including (A) the first cloud storage location for the first file chunk on a first cloud storage service, (B) first login information to access the first cloud storage service, and (C) a first chunking method corresponding to the first file chunk;
requesting, by executing an instruction with the processor, a second file chunk from a second cloud storage location based on the map, the map including (A) the second cloud storage location for the second file chunk on a second cloud storage service, (B) second login information to access the second cloud storage service, and (C) a second chunking method corresponding to the second file chunk, the second chunking method different from the first chunking method;
generating, by executing an instruction with the processor, the file by combining the first file chunk and the second file chunk; and
causing transmission of the file to the client device.

16. The method of claim 15 , further including:
determining first encryption information for the first file chunk and second encryption information for the second file chunk based on the map; and
decrypting the first file chunk based on the first encryption information and the second file chunk based on the second encryption information.

17. The method of claim 16 , further including decrypting the first file chunk based on a first encryption method and decrypting the second file chunk based on a second encryption method, the first encryption method different from the second encryption method.

18. The method of claim 15 , wherein the generating of the file includes combining the first file chunk and the second file chunk based on the first chunking method and the second chunking method.

19. The method of claim 15 , wherein the first file chunk and the second file chunk have randomly determined sizes.

20. The method of claim 15 , further including requesting the first file chunk via a first API of the first cloud storage service, and requesti

Assignees

• Mcafee Llc

Inventors

• Kumar Mitesh
• Nalluri Srikanth
• Kulkarni Dattatraya
• Halder Kamlesh
• Gadde Kranthikumar
• Dhruw Kaushal Kumar
• Venkatasubrahmanyam Krishnapur
• Nayak Susmita

Classifications

• G06F2221/2107

  File encryption · CPC title

• G06F11/1448

  Management of the data involved in backup or backup restore · CPC title

• G06F11/1456

  Hardware arrangements for backup · CPC title

• G06F21/6218 Primary

  to a system of files or objects, e.g. local or distributed file system or database · CPC title

• H04L9/0877

  using additional device, e.g. trusted platform module [TPM], smartcard, USB or hardware security module [HSM] · CPC title