Efficient data transfer for cloud storage by centralized management of access tokens
AssigneeZerodesktop, Inc.
InventorsYoung G. Song, Richard Sah, Moo Chan Song, Frank C. Pesek
Life of this patent
Estimating the term…
Abstract
A data management server manages access tokens for accessing remote storage service servers. The data management server sends the access tokens to user terminals to enable the user terminals to communicate directly with the remote storage server to upload data to the remote storage service server or download data from the remote storage service server without routing of data traffic through the centralized data management server. The data management server initially communicates with a remote storage service server to open an account for a user and obtains an access token for accessing the account in the remote storage service server.
Claims18
A method, comprising:
- at a data management computing device, receiving encrypted data values for a plurality of users generated and received from a plurality of storage computing devices that are operated by at least one service provider via a network, an encrypted data value representing information to authorize a user to write data to an account in the storage computing devices or read data from the account in the storage computing devices;
- at the data management computing device, storing the received encrypted data values in the data management computing device, the plurality of users located remotely from the plurality of storage computing devices;
- at the data management computing device, receiving a request to access at least a subset of the plurality of storage computing devices from the user via the network;
- at the data management computing device, retrieving a stored encrypted data value corresponding to an account of the user responsive to receiving the request;
- and
- sending the retrieved encrypted data value to a user terminal of the user via the network to cause the user terminal to:
- store the encrypted data value in a volatile memory device of the user terminal but not in a non-volatile memory device of the user terminal, and
- perform operations based on the stored encrypted data value to authorize the user terminal of the user to send data for storing directly to at least the subset of the plurality of storage computing devices or receive data for retrieval directly from at least the subset of the plurality of storage computing devices using the encrypted data value without passing the data for storing or the data for retrieval through the data management computing device.
A data management computing device, comprising:
- a token management module comprising a processor and a memory coupled to the processor, the memory storing instructions causing the processor to:
- receive encrypted data values for a plurality of users generated and received from a plurality of storage computing devices that are operated by at least one service provider via a network, the plurality of users located remotely from the plurality of storage computing devices, an encrypted data value representing information to authorize a user to write data to an account in the storage computing device or read data from the account in the storage computing devices;
- store the received encrypted data values in the data management computing device;
- and
- retrieve a stored encrypted data value corresponding to an account of the user responsive to receiving a request to access at least a subset of the plurality of storage computing devices from the user;
- and
- a user terminal communication module comprising the processor and the memory coupled to the processor, the memory storing instructions causing the processor to:
- receive the request to access at least the subset of the plurality of storage computing devices from the user via the network;
- and
- send the retrieved encrypted data value to a user terminal of the user via the network to cause the user terminal to:
- store the encrypted data value in a volatile memory device of the user terminal but not in a non-volatile memory device of the user terminal, and
- perform operations based on the stored encrypted data value to authorize the user terminal of the user to send data for storing directly to at least the subset of the plurality of storage computing devices or receive data for retrieval directly from at least the subset of the plurality of storage computing devices using the encrypted data value without passing the data for storing or the data for retrieval through the data management computing device.
A non-transitory computer-readable storage medium storing instructions thereon, the instructions when executed by a processor in a data management computing device, cause the processor to:
- receive encrypted data values for a plurality of users generated and received from a plurality of storage computing devices that are operated by at least one service provider via a network, an encrypted data value representing information to authorize a user to write data to an account in the storage computing devices or read data from the account in the storage computing devices;
- store the received encrypted data values in the data management computing device, the plurality of users located remotely from the plurality of storage computing devices;
- receive a request to access at least a subset of the plurality of storage computing devices from the user via the network;
- retrieve a stored encrypted data value corresponding to an account of the user responsive to receiving the request;
- and
- send the retrieved encrypted data value to a user terminal of the user via the network to cause the user terminal to:
- store the encrypted data value in a volatile memory device of the user terminal but not in a non-volatile memory device of the user terminal, and
- perform operations based on the stored encrypted data value to authorize the user terminal of the user to send data for storing directly to at least the subset of the plurality of storage computing devices or receive data for retrieval directly from at least the subset of the plurality of storage computing devices using the encrypted data value without passing the data for storing or the data for retrieval through the data management computing device.
Dependencies are inferred from the claim text.