Secure data parser method and system

Patent metadata

Field	Value
Publication number	US-9294445-B2
Application number	US-201213468584-A
Country	US
Kind code	B2
Filing date	May 10, 2012
Priority date	Oct 25, 2004
Publication date	Mar 22, 2016
Grant date	Mar 22, 2016

Abstract

A secure data parser is provided that may be integrated into any suitable system for securely storing and communicating data. The secure data parser parses data and then splits the data into multiple portions that are stored or communicated distinctly. Encryption of the original data, the portions of data, or both may be employed for additional security. The secure data parser may be used to protect data in motion by splitting original data into portions of data that may be communicated using multiple communications paths.

First claim

What is claimed is:

1. A method of managing data in a secure storage appliance, the method comprising:
receiving, using a programmed hardware processor, data associated with a virtual disk, the virtual disk comprising a directory mapped to a plurality of physical storage devices such that physical locations of a plurality of shares are hidden from a client device;
storing the data in a buffer associated with a state of the data;
processing the data by performing at least one cryptographic operation on the data; and
upon completion of processing the data, updating the state of the data.

2. The method of claim 1 , wherein processing the data includes generating a plurality of secondary data blocks from the data by performing a cryptographic operation on the data and distributing the data into the plurality of secondary data blocks.

3. The method of claim 2 , wherein the plurality of secondary data blocks contain a substantially random distribution of the data.

4. The method of claim 1 , wherein processing the data includes reconstituting a data set from the plurality of shares, the plurality of shares including the data.

5. The method of claim 1 , wherein receiving the data includes receiving the data from a client device.

6. The method of claim 5 , further comprising establishing a secure connection between the client device and the secure storage appliance.

7. The method of claim 1 , wherein processing the data includes reconstituting a data set from a plurality of secondary data blocks stored in the plurality of shares, the plurality of shares including the data.

8. A secure storage appliance comprising:
a plurality of buffers, each buffer capable of holding data having a state selected from among a plurality of states;
a programmable circuit capable of accessing the plurality of buffers, the programmable circuit configured to execute program instructions to:
receive the data, wherein the data is associated with a virtual disk, the virtual disk comprising a directory mapped to a plurality of physical storage devices such that physical locations of a plurality of shares are hidden from a client device;
store the data in a buffer from among the plurality of buffers associated with a state of the data;
process the data by performing at least one cryptographic operation on the data; and
update the state of the data upon completion of processing the data.

9. The secure storage appliance of claim 8 , wherein the programmable circuit is configured to process the data by generating a plurality of secondary data blocks from the data by performing a cryptographic operation on the data and distributing the data into the plurality of secondary data blocks.

10. The secure storage appliance of claim 9 , wherein the plurality of secondary data blocks contain a substantially random distribution of the data.

11. The secure storage appliance of claim 8 , wherein the programmable circuit is further configured to execute program instructions to reconstitute a data set from the plurality of shares, the plurality of shares including the data.

12. The secure storage appliance of claim 8 , wherein the data is received from the client device.

13. The secure storage appliance of claim 12 , wherein the programmable circuit is further configured to execute program instructions to establish a secure connection between the client device and the secure storage appliance.

14. The secure storage appliance of claim 8 , wherein the programmable circuit is further configured to execute program instructions to reconstitute a data set from a plurality of secondary data blocks stored in the plurality of shares, the plurality of shares including the data.

15. A secure storage network comprising:
a client device;
a plurality of physical storage devices; and
a secure storage appliance comprising:
a plurality of buffers, each buffer capable of holding data having a state selected from among a plurality of states;
a programmable circuit capable of accessing the plurality of buffers, the programmable circuit configured to execute program instructions to:
receive the data, wherein the data is associated with a virtual disk, the virtual disk comprising a directory mapped to a plurality of physical storage devices such that physical locations of a plurality of shares are hidden from the client device;
store the data in a buffer from among the plurality of buffers associated with the state of the data;
process the data by performing at least one cryptographic operation on the data; and
update the state of the data upon completion of processing the data.

16. The secure storage network of claim 15 , wherein the programmable circuit is configured to process the data by generating a plurality of secondary data blocks from the data by performing a cryptographic operation on the data and distributing the data into the plurality of secondary data blocks.

17. The secure storage network of claim 16 , wherein the plurality of secondary data blocks contain a substantially random distribution of the data.

18. The secure storage network of claim 15 , wherein the programmable circuit is further configured to execute program instructions to reconstitute a data set from the plurality of shares, the plurality of shares including the data.

19. The secure storage appliance of claim 15 , wherein the programmable circuit is further configured to execute program instructions to establish a secure connection between the client device and the secure storage appliance.

20. The secure storage appliance of claim 15 , wherein the programmable circuit is further configured to execute program instructions to reconstitute a data set from a plurality of secondary data blocks stored in the plurality of shares, the plurality of shares including the data.

21. The method of claim 1 , wherein the buffer associated with a state of the data comprises one of an assembled data buffer or a split shares buffer.

22. The secure storage appliance of claim 8 , wherein the plurality of buffers comprises at least one of an assembled data buffer or a split shares buffer.

23. The secure storage network of claim 15 , wherein the plurality of buffers comprises at least one of an assembled data buffer or a split shares buffer.

Assignees

• O'Hare Mark S
• Orsini Rick L
• Davenport Roger S
• Winick Steven
• Security First Corp

Inventors

• O'Hare Mark S
• Orsini Rick L
• Davenport Roger S
• Winick Steven

Classifications

• G06F21/606 Primary

  by securing the transmission between two devices or processes · CPC title

• H04L67/108

  characterised by resources being split in blocks or fragments · CPC title

• G06F21/602

  Providing cryptographic facilities or services · CPC title

• G06F11/1092

  Rebuilding, e.g. when physically replacing a failing disk · CPC title

• H04L2209/80

  Wireless · CPC title