US 9,336,363 B2Granted

Method and system for secure deployment of information technology (IT) solutions in untrusted environments

AssigneeCofactor Computing LLC

InventorsSumedh Wasudeo Sathaye, Nitin Sadashiv Deshmukh

Life of this patent

Estimating the term…

Loading patent…

Abstract

Described herein are techniques related to shielding data, thereby enabling the shielded data to be distributively placed in untrusted computing environments for cost effective storage. A method and system may include a trusted agent operable in a trusted computing environment. The trusted agent includes a transformation knowledge key generator and a data transformer. The transformation knowledge key generator is operable to generate a transformation knowledge key, the transformation knowledge key being generated with at least two shielding algorithms to shield the data. The data transformer is operable to transform the data into N segments of shielded data using the transformation knowledge key. A communications agent securely coupled to the trusted agent is operable to securely transfer one or more of the N segments of shielded data to one or more storage devices in untrusted computing environments.

Claims38

Dependent claims

A system operable to shield data into shielded data, the system comprising:

a hardware processor;
logic instructions stored on computer readable storage media and executable by the hardware processor, the logic instructions being configured to include:
a trusted agent operable in a trusted computing environment, wherein the trusted agent includes a transformation knowledge key generator and a data transformer,
wherein the transformation knowledge key generator is operable to generate a transformation knowledge key, the transformation knowledge key being generated using at least two shielding algorithms to shield the data into the shielded data, wherein the transformation knowledge key is configured to include transformation expressions corresponding to each one of the at least two algorithms, wherein the transformation expressions are configured to include transformation operators, the transformation knowledge key being configurable to include a nested instance of another transformation operators corresponding to another transformation knowledge key,
wherein the data transformer is operable to transform the data into N segments of the shielded data using corresponding N instances of the transformation knowledge key, N being a positive integer, wherein the trusted agent is configured to store the N instances of the transformation knowledge key and at least one segment of the N segments of the shielded data in the trusted computing environment;
and
a communications agent securely coupled to the trusted agent, the communications agent being operable to communicate the N segments of the shielded data for storage.

4 more elements

A method of shielding data, the method comprising:

generating a transformation knowledge key in a trusted computing environment, the transformation knowledge key being generated with at least two shielding algorithms to shield the data, wherein the transformation knowledge key is configured to include transformation expressions corresponding to each one of the at least two algorithms, wherein the transformation expressions are configured to include transformation operators, the transformation knowledge key being configurable to include a nested instance of another transformation operators corresponding to another transformation knowledge key;
transforming the data into N segments of the shielded data using corresponding N instances of the transformation knowledge key, N being a positive integer, wherein the trusted agent is configured to store the N instances of the transformation knowledge key and at least one segment of the N segments of the shielded data in the trusted computing environment;
and
communicating the at least one segment of shielded data for storage, wherein at least one of the generating, transforming and communicating steps is implemented by a computer processor.

1 more element

Dependencies are inferred from the claim text.

Facts

Application: 14/160,539Filed 21 Jan 2014
Published: US 2015/0205939 A123 Jul 2015
Granted: 10 May 2016
Term ends: Not estimatedThe source records don’t support an estimate.

Classification9 codes

G06F 21/10
Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity: protecting distributed…
G06F 21/60
Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity: protecting data
G06F 21/62
Protecting data: protecting access to data via a platform, e.g. using keys or access control rules
H04L 9/085
Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for…:…