Encrypted file storage

Patent metadata

Field	Value
Publication number	US-9582672-B2
Application number	US-201615055847-A
Country	US
Kind code	B2
Filing date	Feb 29, 2016
Priority date	Dec 30, 2014
Publication date	Feb 28, 2017
Grant date	Feb 28, 2017

Abstract

Various systems facilitate encrypted file storage. A client device may generate an encrypted version of a file. The client device may obtain at least one reference to at least one storage location for the encrypted version of the file. The client device may cause the encrypted version of the file to be store at the at least one storage location using the at least one reference to the at least one storage location.

First claim

Therefore, the following is claimed:

1. A method of storing files that are associated with a user account in at least one cloud data storage provider, comprising:
receiving, at an index server, a request to store a file on behalf of a user associated with the user account in a management service, the request received from a client device associated with the user account;
identifying, at the index server, a plurality of storage accounts associated with the user account, wherein each of the plurality of storage accounts are separate from the index server and are associated with a respective cloud data storage provider, the respective cloud storage provider being accessible to the client device through a network and different from the file index server;
partitioning, at the index server, the file into a plurality of file partitions;
transmitting, by the index server, each of the plurality of file partitions to at least one of the plurality of storage accounts for storage in a respective storage location of the cloud data storage provider; and
storing, by the index server, a reference to the respective storage location of each of the plurality of file partitions, the reference stored in association with the user account, wherein the file is stored such that the reference can be subsequently retrieved without contacting the cloud data storage provider.

2. The method of claim 1 , further comprising:
obtaining, at the index server, a request for the client device to access the file; and
in response to the request for the file, transmitting, from the index server, the reference to the respective storage location of each of the plurality of file partitions to the client device.

3. The method of claim 1 , further comprising:
obtaining, at the index server, a request for the client device to access the file;
in response to the request, identifying the respective storage location of each of the plurality of file partitions;
retrieving each of the plurality of file partitions from the respective storage location;
assembling the file from each of the plurality of file partitions; and
transmitting the file to the client device.

4. The method of claim 1 , wherein transmitting each of the plurality of file partitions further comprises encrypting each of the plurality of file partitions.

5. The method of claim 4 , further comprising storing an encryption key associated with encryption of each of the plurality of file partitions.

6. The method of claim 4 , wherein each of the plurality of file partitions is encrypted using a separate encryption key.

7. The method of claim 1 , wherein partitioning the file into the plurality of file partitions further comprises:
determining a quantity of storage accounts associated with the user account; and
generating a quantity of file partitions that corresponds to the quantity of storage accounts.

8. A system that stores files that are associated with a user account in at least one cloud data storage provider, comprising:
at least one computing device; and
an index server application associated with a plurality of instructions executable by the at least one computing device, wherein the plurality of instructions cause the at least one computing device to at least:
receive a request to store a file on behalf of a user associated with the user account in a management service, the request received from a client device associated with the user account;
identify a plurality of storage accounts associated with the user account, wherein each of the plurality of storage accounts are separate from the index server and are associated with a respective cloud data storage provider, the respective cloud storage provider being accessible to the client device through a network and different from the file index server;
partition the file into a plurality of file partitions;
transmit each of the plurality of file partitions to at least one of the plurality of storage accounts for storage in a respective storage location of the cloud data storage provider; and
store a reference to the respective storage location of each of the plurality of file partitions, the reference stored in association with the user account, wherein the file is stored such that the reference can be subsequently retrieved without contacting the cloud data storage provider.

9. The system of claim 8 , wherein the index server application is further configured to cause the at least one computing device to at least:
obtain a request for the client device to access the file; and
transmit the reference to the respective storage location of each of the plurality of file partitions to the client device.

10. The system of claim 8 , wherein the index server application is further configured to cause the at least one computing device to at least:
obtain a request for the client device to access the file;
in response to the request, identify the respective storage location of each of the plurality of file partitions;
retrieve each of the plurality of file partitions from the respective storage location;
assemble the file from each of the plurality of file partitions; and
transmit the file to the client device.

11. The system of claim 8 , wherein the index server application transmits each of the plurality of file partitions by encrypting each of the plurality of file partitions.

12. The system of claim 11 , wherein the index server application is further configured to cause the at least one computing device to store an encryption key associated with encryption of each of the plurality of file partitions.

13. The system of claim 11 , wherein each of the plurality of file partitions is encrypted using a separate encryption key.

14. The system of claim 8 , wherein the index server application is further configured to cause the at least one computing device to at least:
determine a quantity of storage accounts associated with the user account; and
generate a quantity of file partitions that corresponds to the quantity of storage accounts.

15. A non-transitory computer-readable medium embodying program instructions executable in a client device, the program instructions being configured to cause the client device to at least:
receive, at an index server, a request to store a file on behalf of a user associated with a user account in a management service, the request received from a client device associated with the user account;
identify, at the index server, a plurality of storage accounts associated with the user account, wherein each of the plurality of storage accounts are separate from the index server and are associated with a respective cloud data storage provider, the respective cloud storage provider being accessible to the client device through a network and different from the file index server;
partition, at the index server, the file into a plurality of file partitions;
transmit by the index server each of the plurality of file partitions to at least one of the plurality of storage accounts for storage in a respective storage location of the cloud data storage provider; and
store by the index server a reference to the respective storage location of each of the plurality of file partitions, the reference stored in association with the user account, wherein the file is stored such that the reference can be subsequently retrieved without contacting the cloud data storage provider.

16. The non-transitory computer-readable medium of claim 15 , wherein the program instructions are further configured to cause the at least one computing device to at least:
obtain a request for the client de

Assignees

• Airwatch Llc

Inventors

• Stuntebeck Erich
• Panchapakesan Ramani
• Laxminarayan Akshay
• Ashish Kumar
• Nittala Gangadhar

Classifications

• G06F21/6209

  to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself · CPC title

• G06F16/182

  Distributed file systems · CPC title

• G06F16/13

  File access structures, e.g. distributed indices (arrangements of input from, or output to, record carriers G06F3/06) · CPC title

• H04L67/303

  Terminal profiles · CPC title

• G06F16/1727

  Details of free space management performed by the file system (saving storage space on storage systems G06F3/0608; management of blocks in storage devices G06F3/064) · CPC title