Remote wiping for data transport, storage and retrieval

Patent metadata

Field	Value
Publication number	US-11914539-B2
Application number	US-202318118122-A
Country	US
Kind code	B2
Filing date	Mar 6, 2023
Priority date	Aug 5, 2014
Publication date	Feb 27, 2024
Grant date	Feb 27, 2024

Abstract

An input switching circuit dynamically connects, based on an input mapping table, input streams to inputs of a wavefront pre-transform circuit. An output switching circuit dynamically connects, based on an output mapping table, output data at outputs of the wavefront pre-transform circuit to transport streams. A controller controls, based on a wiping command, at least one of the input and output switching circuits to alter at least one of the input and output mapping tables such that the at least one of the input and output switching circuits is disabled for connection. A first subset of the transport streams operates in a foreground mode available to a user and is transported for storage in remote storage sites at a network and a second subset of the transport streams operates in a background mode available to an administrator and is not transported for storage in the remote storage sites.

First claim

What is claimed is:

1. An apparatus comprising:
a wavefront pre-transform processor having inputs and outputs and configured to transform input data at the inputs to output data at the outputs using a wavefront pre-processing transform;
an input switching circuit configured to dynamically connect, based on an input mapping table configurable to change an input connection pattern, input streams to the inputs of the wavefront pre-transform processor;
an output switching circuit configured to dynamically connect, based on an output mapping table configurable to change an output connection pattern, the output data at the outputs to transport streams;
a controller configured to control, based on a wiping command, at least one of the input and output switching circuits to alter at least one of the input and output mapping tables such that the at least one of the input and output switching circuits is disabled for connection; and
a timer/counter coupled to the controller, configured to generate a timing interval or a count for number of downloads by a user, to control duration of availability of a known a priori backdoor data stream to the input switching circuit;
wherein a first subset of the transport streams operates in a foreground mode available to the user and is transported for storage in remote storage sites at a network and a second subset of the transport streams operates in a background mode available to an administrator and is not transported for storage in the remote storage sites.

2. The apparatus of claim 1 wherein each of the output data is a unique linear combination of the input data.

3. The apparatus of claim 1 wherein the wavefront pre-processing transform includes one of an orthogonal matrix transform, a mathematical function of a non-orthogonal and full rank matrix transform, a Hadamard transform, and a Fourier transform.

4. The apparatus of claim 1 wherein one of the input connection pattern and the output connection pattern corresponds to a one-to-one mapping table.

5. The apparatus of claim 4 wherein the one-to-one mapping table includes one of an arbitrary predetermined pattern, a random pattern, a perfect shuffle pattern, and a butterfly pattern.

6. The apparatus of claim 1 wherein number of input streams is less than number of transport streams.

7. The apparatus of claim 1 wherein the remote storage sites include at least a cloud storage site.

8. An apparatus comprising:
a wavefront post-transform processor having inputs and outputs and configured to transform input data at the inputs to output data at the outputs using a wavefront post-processing transform;
an input switching circuit configured to dynamically connect, based on an input mapping table configurable to change an input connection pattern, input streams to the inputs of the wavefront post-transform processor;
an output switching circuit configured to dynamically connect, based on an output mapping table configurable to change an output connection pattern, the output data at the outputs to retrieval streams;
a controller configured to control, based on a wiping command, at least one of the input and output switching circuits to alter at least one of the input and output mapping tables such that the at least one of the input and output switching circuits is disabled for connection; and
a timer/counter coupled to the controller, configured to generate a timing interval or a count for number of downloads by a user, to control duration of availability of a known a priori backdoor data stream to the wavefront post-transform processor;
wherein a first subset of the input streams operates in a foreground mode available to the user and is retrieved from remote storage sites at a network and a second subset of the input streams operates in a background mode available to an administrator and is not retrieved from the remote storage sites.

9. The apparatus of claim 8 wherein each of the output data is a unique linear combination of the input data.

10. The apparatus of claim 8 wherein the wavefront post-processing transform includes one of an inverse orthogonal matrix transform, an inverse mathematical function of a non-orthogonal and full rank matrix transform, an inverse Hadamard transform, and an inverse Fourier transform.

11. The apparatus of claim 8 wherein one of the input connection pattern and the output connection pattern corresponds to a one-to-one mapping table.

12. The apparatus of claim 11 wherein the one-to-one mapping table includes one of an arbitrary predetermined pattern, a random pattern, a perfect shuffle pattern, and a butterfly pattern.

13. The apparatus of claim 8 wherein number of retrieval streams is less than number of input streams.

14. The apparatus of claim 8 wherein the remote storage sites include at least a cloud storage site.

15. The apparatus of claim 8 wherein, when the wavefront post-transform processor is activated at time instant T 0 by a user action for data recovery, the known a priori backdoor data stream is available until time instant T 0 +Δt, where Δt is the time interval and Δt is a positive integer.

16. The apparatus of claim 8 wherein, when the wavefront post-transform processor is activated at a first value N=1 of the count for number of downloads by a user action for data recovery, the known a priori backdoor data stream is available until the count for number of downloads is equal to a set value N out where N out is an integer greater than 1.

17. A method comprising:
transforming input data at inputs of a wavefront post-transform processor to output data at outputs of the wavefront post-transform processor using a wavefront post-processing transform;
dynamically connecting, based on an input mapping table configurable to change an input connection pattern, input streams to the inputs of the wavefront post-transform processor using an input switching circuit;
dynamically connecting, based on an output mapping table configurable to change an output connection pattern, the output data at the outputs of the wavefront post-transform processor to retrieval streams using an output switching circuit;
controlling, based on a wiping command, at least one of the input and output switching circuits to alter at least one of the input and output mapping tables such that the at least one of the input and output switching circuits is disabled for connection; and
controlling, based on a timing interval or a count for number of downloads by a user generated by a timer/counter, duration of availability of a known a priori backdoor data stream to the input switching circuit;
wherein a first subset of the input streams operates in a foreground mode available to the user and is retrieved from remote storage sites at a network and a second subset of the input streams operates in a background mode available to an administrator and is not retrieved from the remote storage sites.

18. The method of claim 17 wherein each of the output data is a unique linear combination of the input data.

19. The method of claim 17 wherein the wavefront post-processing transform includes one of an orthogonal matrix transform, a mathematical function of a non-orthogonal and full rank matrix transform, a Hadamard transform, and a Fourier transform.

20. The method of claim 17 wherein one of the input connection pattern and the output connection pattern corresponds to a one-to-one mapping table.

Assignees

• Spatial Digital Systems Inc

Inventors

• Lee Juo-Yu
• Chang Donald C D
• Chen Steve K

Classifications

• G06F13/4022 Primary

  using switching circuits, e.g. switching matrix, connection or expansion network (G06F13/4009 takes precedence) · CPC title

• G06F16/258

  Data format conversion from or to a database · CPC title

• G06F21/604

  Tools and structures for managing or administering access control systems · CPC title

• G06F2213/40

  Bus coupling · CPC title

• G06F16/1727 Primary

  Details of free space management performed by the file system (saving storage space on storage systems G06F3/0608; management of blocks in storage devices G06F3/064) · CPC title