Cloud computing secure data storage

A machine readable non-transitory medium having stored therein instructions that, when executed, cause a cloud computing resource in a cloud computing environment to:

• partition, at the cloud computing resource, a data resource received from a client for secure storage in the cloud computing environment into a plurality of data particles;
• separate the plurality of data particles physically and logically to obtain a logical separation and a physical separation of the plurality of data particles;
• separate the plurality of data particles physically and logically to obtain a logical separation and a physical separation of the plurality of data particles;
• change, over time, the logical separation and the physical separation of the plurality of data particles in the data resource with iterations;
• perform the iterations at a frequency that varies as a function of a security level of the data resource and available resources of the cloud computing environment to cause the plurality of data particles to be dynamically assigned to different logic groups and physical storage groups over time for enhanced security of the cloud computing environment, wherein the changing is performed repeatedly over time by:
• assigning, at the cloud computing resource, the plurality of data particles to a plurality of logic groups, wherein at least one of the plurality of data particles assigned to a respective one of the plurality of logic groups is configured to communicate with the cloud computing resource;
• assigning, at the cloud computing resource, the plurality of data particles to a plurality of physical storage groups;
• and
• storing the plurality of physical storage groups at a plurality of storage resources of the cloud computing environment;
• receive, at the cloud computing resource, a request for the data resource from the client;
• determine, at the cloud computing resource, whether the request for the data resource is valid;
• and
• responsive to a determination that the request for the data resource is valid, transmit the plurality of data particles of the data resource to the client.

A cloud computing resource in a cloud computing environment, the cloud computing resource comprising:

• a processor;
• and
• a memory comprising a machine readable medium having stored therein instructions that, when executed, cause the cloud computing resource to:
• partition, at the cloud computing resource, a data resource received from a client for secure storage in the cloud computing environment into a plurality of data particles;
• separate the plurality of data particles physically and logically to obtain a logical separation and a physical separation of the plurality of data particles;
• change, over time, the logical separation and the physical separation of the plurality of data particles in the data resource with iterations;
• perform the iterations at a frequency that varies as a function of a security level of the data resource and available resources of the cloud computing environment to cause the plurality of data particles to be dynamically assigned to different logic groups and physical storage groups over time for enhanced security of the cloud computing environment, wherein the changing is performed repeatedly over time by:
• assigning, at the cloud computing resource, the plurality of data particles to a plurality of logic groups, wherein at least one of the plurality of data particles assigned to a respective one of the plurality of logic groups is configured to communicate with the cloud computing resource;
• assigning, at the cloud computing resource, the plurality of data particles to a plurality of physical storage groups;
• and
• storing the plurality of physical storage groups at a plurality of storage resources of the cloud computing environment;
• receive, at the cloud computing resource, a request for the data resource from the client;
• determine, at the cloud computing resource, whether the request for the data resource is valid;
• and
• responsive to a determination that the request for the data resource is valid, transmit the plurality of data particles of the data resource to the client.