Secure File Archive through encryption key management
AssigneeConnected Corporation
InventorsDavid Cane, David Hirschman, Philip Speare, Lev Vaitzblit
Life of this patent
Estimating the term…
Abstract
An information processing system providing archive/backup support with privacy assurances by encrypting data stored thereby. Data generated on a source system is encrypted, the key used thereby is separately encrypted, and both the encrypted data and encrypted key are transmitted to and maintained by a data repository system. The repository system receives only the encrypted data and key, while the source system retains the ability to recover the key and in turn, the data. The source system is therefore assured of privacy and integrity of the archived data by retaining access control yet is relieved of the physical management of the warehousing medium.
Claims44
A file archive system for storing encrypted files on a computer-readable volume, each encrypted file being encrypted according to a corresponding first key, the system comprising:
- an archive server comprising:
- a first memory subsystem configured to store the encrypted files on the computer-readable volume;
- and
- a second memory subsystem configured to store, for each encrypted file:
- the corresponding first key, according to which the encrypted file was encrypted;
- and
- information associating the computer-readable volume, on which the encrypted file is stored, with the corresponding first key;
- wherein deletion of a selected first key from the second memory subsystem effectively precludes future decryption of the encrypted file that was encrypted according to the selected first key, without requiring deletion of the encrypted file from the computer-readable volume.
A method for storing a file on a computer-readable volume, the method comprising:
- storing an encrypted file on the computer-readable volume;
- and
- storing a first key, according to which the encrypted file is encrypted, and information associating the computer-readable volume with the first key in a memory subsystem distinct from the computer-readable volume;
- wherein deletion of a selected first key from the memory subsystem effectively precludes future decryption of the encrypted file that was encrypted according to the selected first key, without requiring deletion of the encrypted file from the computer-readable volume.
Dependencies are inferred from the claim text.