# US 12,118,118 B2 · Storing legal hold data in cloud data storage units > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 12,118,118 B2 - Document ID: US12118118B2 - Status: Granted - Kind: B2 - Application number: 17/023,590 - Filed: 2020-09-17 - Published: 2022-03-17 - Granted: 2024-10-15 - Earliest claimed: 2020-09-17 - Assignees: Kyndryl, Inc. - Applicants: Kyndryl, Inc. - Inventors: Joseph Reyes; Andrew S. Kronstadt; Christopher C. Bode - Web page: https://patentgrep.com/patent/US12118118B2 ## CPC - G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes} - H04L 67/10: in which an application is distributed across nodes in the network (software deployment G06F8/60; multiprogramming arrangements G06F9/46) - G06F 11/1451: {by selection of backup contents} - G06F 11/1464: {for networked environments} - G06F 11/1469: {Backup restoration techniques} - G06F 21/602: {Providing cryptographic facilities or services} - G06F 21/604: {Tools and structures for managing or administering access control systems} - G06Q 50/18: Legal services - H04L 67/1095: Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes - H04L 67/1097: for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS] - H04L 67/568: Storing data temporarily at an intermediate stage, e.g. caching - G06F 21/6218: {to a system of files or objects, e.g. local or distributed file system or database} - G06Q 2220/00: Business processing using cryptography - H04L 67/02: based on web technology, e.g. hypertext transfer protocol [HTTP] - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06Q: INFORMATION AND COMMUNICATION TECHNOLOGY [ICT] SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES; SYSTEMS OR METHODS SPECIALLY ADAPTED FOR ADMINISTRATIVE, COMMERCIAL, FINANCIAL, MANAGERIAL OR SUPERVISORY PURPOSES, NOT OTHERWISE PROVIDED FOR ## Abstract Technology for storing legal hold data in the cloud (for example, in containers), where the source of the data stored in the cloud is independent backup copy(ies) that are maintained by an enterprise subject to a legal hold order. Changing the legal hold data as it is stored in the set of backup copy(ies) in a manner will not change the legal hold data as it is stored in the cloud. Mechanism may also be provided for auditing chain of custody and authenticating parties who request legal hold data to be delivered from cloud storage. ## Claims ### Claim 1 A computer implemented method for use with an enterprise computer system including a set of primary copies of data of the enterprise and a set of backup copies of data of the enterprise, the computer implemented method comprising: receiving, at an independent backup copy computer, information indicative of an identity of legal hold data, which is enterprise data that has been subject to a legal hold request, and where the information includes a plurality of search criteria, the independent backup copy computer being separate and independent from a primary copy sub-system containing the set of primary copies of the data of the enterprise in a primary copy data store; determining, by the independent backup copy computer, the legal hold data from the set of backup copies stored on an external backup server in an external data store and accessed by the independent backup copy computer, where the legal hold data is data corresponding to one or more of the plurality of search criteria, the external data store containing the set of backup copies being separate from the primary copy data store, and wherein the independent backup copy computer disables ability of the data to expire; processing the set of primary copies of data into a human-readable format, wherein the processing includes concatenating the set of primary copies of data and making the set of primary copies of data available to a limited set of recipients; copying and storing the set of primary copies in the primary data store prior to entering a legal hold data order which orders a legal hold on the primary data responsive to a predetermined search criteria; copying and encrypting by the independent backup copy computer, the legal hold data from the set of backup copies collectively into a plurality of cloud data storage units suitable for temporary storage in a cloud computer system, the independent backup copy computer being part of the enterprise computer system and independent from the cloud computer system; performing an on-demand packaging of the legal hold data from an encrypted storage bucket to an encrypted concatenated file and automatically generating a secured one-time access link; monitoring access to the on-demand packaging and deleting the encrypted concatenated file once the on-demand packaging has been accessed; and forwarding, by the independent backup copy computer, the plurality of cloud data storage units to the cloud computer system for storing in one or more containers, where the copied, encrypted legal hold data is retained for the duration of the legal hold request. ### Claim 2 (depends on 1) The computer implemented method of claim 1 wherein the plurality of cloud data storage units are respectively in the form of the containers. ### Claim 3 (depends on 1) The computer implemented method of claim 1 wherein the search criteria include search criteria selected from the group consisting of: individual name delimiting type criteria, date delimiting type criteria, file type delimiting type criteria, project name delimiting type criteria, geographic delimiting type criteria and corporate entity name delimiting type criteria. ### Claim 4 (depends on 1) The computer implemented method of claim 1 further comprising: changing the legal hold data as it is stored in the set of backup copies in a manner that does not change the legal hold data as it is stored in the plurality of cloud data storage units. ### Claim 5 (depends on 1) The computer implemented method of claim 1 further comprising: receiving a first request, made by a first requestor, for access requested legal hold data, which requested legal hold data is at least a portion of the legal hold data; determining that the first requestor is authorized to access the requested legal hold data; and responsive to the determination that the first requestor is authorized to access the requested legal hold data: obtaining the requested legal hold data from the plurality of cloud data storage units, converting the requested legal hold data into a set of requested legal hold data files suitable for delivery over a communication network and access by a human user, and sending the requested legal hold data files to the first requestor over a communication network, where the requested legal hold data files are available only for a limited secure download. ### Claim 6 (depends on 1) The computer implemented method of claim 1 further comprising: providing an auditable chain of custody for at least of portion of the legal hold data. ### Claim 7 (depends on 1) The computer implemented method of claim 1 further comprising: receiving a request, from a requestor and over a communication network, for at least a portion of the legal hold data stored in the plurality of cloud data storage units in the cloud computer system; authenticating the requestor; and responsive to authenticating the requestor, sending over the communication network and to the requestor, the at least a portion of the legal hold data. ### Claim 8 (depends on 1) The computer implemented method of claim 1 further comprising: removing a file from the internet after a download of the file. ### Claim 9 A computer program product comprising: a non-transitory computer-readable storage medium; and computer code stored on the non-transitory computer-readable storage medium, with the computer code including data and instructions for causing a processor set to perform at least the following operations: receiving, at an independent backup copy computer, information indicative of an identity of legal hold data, which is enterprise data that has been subject to a legal hold request, and where the information includes a plurality of search criteria, the independent backup copy computer being separate and independent from a primary copy sub-system containing a set of primary copies of the data of the enterprise in a primary copy data store; determining, by the independent backup copy computer, the legal hold data from the set of backup copies stored on an external backup server in an external data store and accessed by the independent backup copy computer, where the legal hold data is data corresponding to one or more of the plurality of search criteria, the external data store containing the set of backup copies being separate from the primary copy data store, and wherein the independent backup copy computer disables ability of the data to expire; processing the set of primary copies of data into a human-readable format, wherein the processing includes concatenating the set of primary copies of data and making the set of primary copies of data available to a limited set of recipients; copying and storing the set of primary copies in the primary data store prior to entering a legal hold data order which orders a legal hold on the primary data responsive to a predetermined search criteria; copying and encrypting by the independent backup copy computer, the legal hold data from the set of backup copies collectively into a plurality of cloud data storage units suitable for temporary storage in a cloud computer system, the independent backup copy computer being part of the enterprise computer system and independent from the cloud computer system; performing an on-demand packaging of the legal hold data from an encrypted storage bucket to an encrypted concatenated file and automatically generating a secured one-time access link; monitoring access to the on-demand packaging and deleting the encrypted concatenated file once the on-demand packaging has been accessed; and forwarding, by the independent backup copy computer, the plurality of cloud data storage units to the cloud computer system for storing in one or more containers, where the copied, encrypted legal hold data is retained for the duration of the legal hold request. ### Claim 10 (depends on 9) The computer program product of claim 9 wherein the plurality of cloud data storage units are respectively in the form of containers. ### Claim 11 (depends on 9) The computer program product of claim 9 wherein the search criteria include search criteria selected from the group consisting of: individual name delimiting type criteria, date delimiting type criteria, file type delimiting type criteria, project name delimiting type criteria, geographic delimiting type criteria and corporate entity name delimiting type criteria. ### Claim 12 (depends on 9) The computer program product of claim 9 wherein the computer code further includes data and instructions for causing a processor to further perform at least the following operation: changing the legal hold data as it is stored in the set of backup copies in a manner that does not change the legal hold data as it is stored in the plurality of cloud data storage units. ### Claim 13 (depends on 9) The computer program product of claim 9 wherein the computer code further includes data and instructions for causing a processor to perform at least the following operations: receiving a first request, made by a first requestor, for access requested legal hold data, which requested legal hold data is at least a portion of the legal hold data; determining that the first requestor is authorized to access the requested legal hold data; and responsive to the determination that the first requestor is authorized to access the requested legal hold data: obtaining the requested legal hold data from the plurality of cloud data storage units, converting the requested legal hold data into a set of requested legal hold data files suitable for delivery over a communication network and access by a human user, and sending the requested legal hold data files to the first requestor over a communication network, where the requested legal hold data files are available only for a limited secure download. ### Claim 14 (depends on 9) The computer program product of claim 9 wherein the computer code further includes data and instructions for causing a processor to further perform at least the following operation: providing an auditable chain of custody for at least of portion of the legal hold data. ### Claim 15 (depends on 9) The computer program product of claim 9 wherein the computer code further includes data and instructions for causing a processor to further perform at least the following operations: receiving a request, from a requestor and over a communication network, for at least a portion of the legal hold data stored in the plurality of cloud data storage units in the cloud computer system; authenticating the requestor; and responsive to authenticating the requestor, sending over the communication network and to the requestor, the at least a portion of the legal hold data. ### Claim 16 (depends on 9) The computer program product of claim 9 wherein the computer code further includes data and instructions for causing a processor to further perform at least the following operation: removing a file from the internet after a download of the file. ### Claim 17 A computer system comprising: a processor set; a set of storage devices; and computer code stored on the set of storage devices, with the computer code including data and instructions for causing the processor set to perform at least the following operations: receiving, at an independent backup copy computer, information indicative of an identity of legal hold data, which is enterprise data that has been subject to a legal hold request, and where the information includes a plurality of search criteria, the independent backup copy computer being separate and independent from a primary copy sub-system containing a set of primary copies of the data of the enterprise in a primary copy data store; determining, by the independent backup copy computer, the legal hold data from the set of backup copies stored on an external backup server in an external data store and accessed by the independent backup copy computer, where the legal hold data is data corresponding to one or more of the plurality of search criteria, the external data store containing the set of backup copies being separate from the primary copy data store, and wherein the independent backup copy computer disables ability of the data to expire; processing the set of primary copies of data into a human-readable format, wherein the processing includes concatenating the set of primary copies of data and making the set of primary copies of data available to a limited set of recipients; copying and storing the set of primary copies in the primary data store prior to entering a legal hold data order which orders a legal hold on the primary data responsive to a predetermined search criteria; copying and encrypting by the independent backup copy computer, the legal hold data from the set of backup copies collectively into a plurality of cloud data storage units suitable for temporary storage in a cloud computer system, the independent backup copy computer being part of the enterprise computer system and independent from the cloud computer system; performing an on-demand packaging of the legal hold data from an encrypted storage bucket to an encrypted concatenated file and automatically generating a secured one-time access link; monitoring access to the on-demand packaging and deleting the encrypted concatenated file once the on-demand packaging has been accessed; and forwarding, by the independent backup copy computer, the plurality of cloud data storage units to the cloud computer system for storing in one or more containers, where the copied, encrypted legal hold data is retained for the duration of the legal hold request. ### Claim 18 (depends on 17) The computer system of claim 17 wherein the computer code further includes data and instructions for causing a processor to further perform at least the following operation: changing the legal hold data as it is stored in the set of backup copies in a manner that does not change the legal hold data as it is stored in the plurality of cloud data storage units.