Image storage across distributed computing systems

Patent metadata

Field	Value
Publication number	US-2023289471-A1
Application number	US-202318321227-A
Country	US
Kind code	A1
Filing date	May 22, 2023
Priority date	Mar 5, 2021
Publication date	Sep 14, 2023
Grant date	—

Abstract

Provided is a method, system, and computer program product for storing images across multiple distributed computing systems according to image sensitivity. The method comprises identifying an image and analyzing the image to identify sensitive information in the image. The method further comprises splitting the image into a sensitive portion and a non-sensitive portion. The method further comprises storing the sensitive portion of the image in a first distributed computing system and storing the non-sensitive portion of the image in a second distributed computing system.

First claim

What is claimed is:

1 . A method comprising:
receiving a request for an image from a requestor, the image comprising a sensitive portion and a non-sensitive portion; authenticating that the requestor is permitted to receive the image; retrieving the sensitive portion from a first distributed computing environment and the non-sensitive portion from a second distributed computing environment; combining, using metadata associated with the image, the sensitive and non-sensitive portions into a combined image; and returning the combined image to the requestor.

2 . The method of claim 1 , wherein the retrieving comprises:
determining, from the metadata associated with the image, a first location of the sensitive portion in the first distributed computing environment and a second location of the non-sensitive portion in the second distributed computing environment.

3 . The method of claim 1 , wherein the first distributed computing system has a higher security level than the second distributed computing system.

4 . The method of claim 1 , wherein the first distributed computing system is a private cloud and the second distributed computing system is a public cloud, the public and private clouds being capable of communicating with each other as part of a hybrid cloud environment.

5 . The method of claim 1 , further comprising:
determining, from the metadata associated with the image, a first boundary data for the sensitive portion and a second boundary data for the non-sensitive portion, wherein the first boundary data identifies where the sensitive portion belongs in the image and the second boundary data identifies where the non-sensitive portion belongs in the image.

6 . The method of claim 5 , wherein the metadata is stored in a database.

7 . The method of claim 5 , wherein the combining the sensitive and non-sensitive portions into the combined image is performed using the first and second boundary data.

8 . The method of claim 7 , wherein the combining the sensitive and non-sensitive portions into the combined image comprises stitching the sensitive and non-sensitive portions together along edges defined by the first and second boundary data.

9 . A system comprising:
a memory; and a processor communicatively coupled to the memory, wherein the processor is configured to perform a method comprising: receiving a request for an image from a requestor, the image comprising a sensitive portion and a non-sensitive portion; authenticating that the requestor is permitted to receive the image; retrieving the sensitive portion from a first distributed computing environment and the non-sensitive portion from a second distributed computing environment; combining, using metadata associated with the image, the sensitive and non-sensitive portions into a combined image; and returning the combined image to the requestor.

10 . The system of claim 9 , wherein the retrieving comprises:
determining, from the metadata associated with the image, a first location of the sensitive portion in the first distributed computing environment and a second location of the non-sensitive portion in the second distributed computing environment.

11 . The system of claim 9 , wherein the first distributed computing system has a higher security level than the second distributed computing system.

12 . The system of claim 9 , wherein the first distributed computing system is a private cloud and the second distributed computing system is a public cloud, the public and private clouds being capable of communicating with each other as part of a hybrid cloud environment.

13 . The system of claim 9 , wherein the method further comprises:
determining, from the metadata associated with the image, a first boundary data for the sensitive portion and a second boundary data for the non-sensitive portion, wherein the first boundary data identifies where the sensitive portion belongs in the image and the second boundary data identifies where the non-sensitive portion belongs in the image.

14 . The system of claim 13 , wherein the metadata is stored in a database.

15 . The system of claim 13 , wherein the combining the sensitive and non-sensitive portions into the combined image comprises stitching the sensitive and non-sensitive portions together along edges defined by the first and second boundary data.

16 . A computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a computer to perform a method comprising:
receiving a request for an image from a requestor, the image comprising a sensitive portion and a non-sensitive portion; authenticating that the requestor is permitted to receive the image; retrieving the sensitive portion from a first distributed computing environment and the non-sensitive portion from a second distributed computing environment; combining, using metadata associated with the image, the sensitive and non-sensitive portions into a combined image; and returning the combined image to the requestor.

17 . The computer program product of claim 16 , wherein the retrieving comprises:
determining, from the metadata associated with the image, a first location of the sensitive portion in the first distributed computing environment and a second location of the non-sensitive portion in the second distributed computing environment.

18 . The computer program product of claim 16 , wherein the first distributed computing system has a higher security level than the second distributed computing system.

19 . The computer program product of claim 16 , wherein the first distributed computing system is a private cloud and the second distributed computing system is a public cloud, the public and private clouds being capable of communicating with each other as part of a hybrid cloud environment.

20 . The computer program product of claim 16 , wherein the method further comprises:
determining, from the metadata associated with the image, a first boundary data for the sensitive portion and a second boundary data for the non-sensitive portion, wherein the first boundary data identifies where the sensitive portion belongs in the image and the second boundary data identifies where the non-sensitive portion belongs in the image.

Assignees

• IBM

Inventors

• Kaul Abhishek
• Gupta Sachin
• Vadayadiyil Raveendran Pramod
• Nagar Seema
• Dey Kuntal

Classifications

• H04L63/0428 Primary

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• G06F21/6245 Primary

  Protecting personal data, e.g. for financial or medical purposes · CPC title

• H04L63/105

  Multiple levels of security · CPC title

• H04L67/1097

  for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS] · CPC title

• G06V10/25

  Determination of region of interest [ROI] or a volume of interest [VOI] · CPC title