Cloud storage system, data encryption processing device and data encryption method in cloud storage system

Patent metadata

Field	Value
Publication number	US-9231922-B2
Application number	US-201314020366-A
Country	US
Kind code	B2
Filing date	Sep 6, 2013
Priority date	Mar 9, 2011
Publication date	Jan 5, 2016
Grant date	Jan 5, 2016

Abstract

A cloud storage system includes a plurality of cloud storage modules for storing and managing data and a data encryption processing device. The data encryption processing device includes a priority manager for managing priorities on encrypting data of a plurality of cloud storage modules by using information on whether encryption processing for each of the plurality of the cloud storage modules is supported; and an encryption requester for selecting at least one cloud storage module on the basis of the priorities managed by the priority manager when receiving request of a data encryption, and performing, by the selected at least one cloud storage module, encryption after delivering the data to the selected cloud storage module.

First claim

The invention claimed is:

1. A data encryption processing device of a cloud storage system, comprising:
a priority manager configured to
manage a priority to encrypt data of each of a plurality of cloud storage modules based on information regarding whether the plurality of the cloud storage modules is subject to encryption processing, and
update the priority of said each of the plurality of the cloud storage modules, based on
a counter value for encryption requests for said each of the plurality of the cloud storage modules, and
the information regarding whether said each of the plurality of the cloud storage modules is subject to the encryption processing; and

an encryption requester configured to
select at least one cloud storage module among the plurality of the cloud storage modules based on the priority to encrypt data of the plurality of cloud storage modules managed by the priority manager, and
transfer data to the selected at least one cloud storage module to request the selected at least one cloud storage module to perform encryption of the transferred data, in response to a data encryption request.

2. The data encryption processing device of claim 1 , wherein the encryption requester is configured to count the counter value for encryption requests for said each of the plurality of the cloud storage modules.

3. The data encryption processing device of claim 2 , wherein when requesting the selected at least one cloud storage module to perform encryption of the transferred data, the encryption requester increases a counter value for encryption requests for the selected at least one cloud storage module, and
when encryption of the transferred data is ended in the selected at least one cloud storage module, the encryption requester decreases the counter value for encryption requests for the selected at least one cloud storage module.

4. The data encryption processing device of claim 3 , wherein when requesting the selected at least one cloud storage module to perform encryption of the transferred data and when encryption of the transferred data is ended in the selected at least one cloud storage module, the priority manager updates the priority of each of the plurality of the cloud storage modules based on the counter value for encryption requests for said each of the plurality of the cloud storage modules.

5. The data encryption processing device of claim 1 , further comprising:
a resource manager configured to manage resource information regarding each of the plurality of the cloud storage modules.

6. The data encryption processing device of claim 5 , wherein the priority manager is configured to manage the priority of each of the plurality of the cloud storage modules based on the resource information and the information regarding whether said each of the plurality of the cloud storage modules are subject to the encryption processing.

7. The data encryption processing device of claim 5 , wherein the resource manager is configured to receive resource information from the selected at least one cloud storage module.

8. The data encryption processing device of claim 7 , wherein based on the received resource information and a counted number of encryption requests from the encryption requester, the priority manager is configured to update the priority of said each of the plurality of the cloud storage module.

9. The data encryption processing device of claim 1 , wherein the encryption requester is configured to request the selected at least one cloud storage module to store the encrypted data.

10. A data encryption method performed by a data encryption processing device in a cloud storage system, the data encryption method comprising:
setting a priority to encrypt data of each of a plurality of cloud storage modules to store the priority in a memory, based on information regarding whether said each of the plurality of the cloud storage modules is subject to encryption processing;
selecting at least one cloud storage module based on the priority stored in the memory; and
transmitting data to the selected at least one cloud storage module to request the selected at least one cloud storage module to perform encryption of the transferred data,
wherein
the priority of said each of the plurality of the cloud storage modules is set further based on a counter value for encryption requests for said each of the plurality of the cloud storage modules and the information regarding whether said each of the plurality of the cloud storage modules is subject to the encryption processing.

11. The data encryption method of claim 10 , further comprising:
increasing, when requesting encryption of the transferred data to the selected at least one cloud storage module, a counter value for encryption requests for the selected cloud storage module;
updating the priority of said each of the plurality of the cloud storage modules according to the counter value for encryption requests for said each of the plurality of the cloud storage modules.

12. The data encryption method of claim 10 , further comprising:
decreasing, when encryption of the transferred data is ended in the selected at least one cloud storage module, a counter value for encryption requests for said each of the plurality of the cloud storage modules; and
updating the priority of each of the plurality of the cloud storage modules according to the counter value for encryption requests for said each of the plurality of the cloud storage modules.

13. The data encryption method of claim 10 , further comprising:
receiving resource information from said each of the plurality of cloud storage modules,
wherein the priority of said each of the plurality of the cloud storage modules is set further based on the received resource information and the information regarding whether said each of the plurality of the cloud storage modules is subject to the encryption processing.

14. The data encryption method of claim 10 , further comprising:
increasing, when requesting encryption of the transferred data from the selected at least one cloud storage module, a counter value for encryption requests for the selected at least one cloud storage module, and receiving resource information from the selected at least one cloud storage module;
updating the priority of said each of the plurality of the cloud storage modules according to the increased counter value for encryption requests and the received resource information;
decreasing, when encryption of the data is ended in the selected at least one cloud storage module, the counter value for encryption requests for the selected at least one cloud storage module, and receiving the resource information from the selected cloud storage module; and
updating the priority of said each of the plurality of the cloud storage modules according to the decreased counter value for encryption requests and the received resource information.

15. A cloud storage system for data encryption processing, comprising:
a data encryption processing device; and
a plurality of cloud storage modules configured to store and manage data and connected with the data encryption processing device over a communication network, wherein each of the plurality of cloud storage modules includes:
a cloud storage configured to store the encrypted data and resource information; and
a controller configured to
control the cloud storage,
provide the resource information to the data encryption processing device,
encrypt data when receiving a request for data encryption from the data encryption processing device,
store the encrypted data in the cloud sto

Assignees

• Sk Telecom Co Ltd

Inventors

• Kim Seung Min

Classifications

• G06F21/6218 Primary

  to a system of files or objects, e.g. local or distributed file system or database · CPC title

• H04L63/0428 Primary

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04L9/28

  Electricity · mapped topic

• G06F21/60

  Protecting data · CPC title

• G06F21/00

  Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity · CPC title