Patent US6134660A successfully refreshed from Google Patents.
US6134660A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method for revoking computer backup files using cryptographic techniques
Assignee: Tumbleweed Holdings LLC
•
Filing: 1997-06-30
•
Granted: 2000-10-17
•
Expires: 2017-06-30
Abstract
Abstract A system enables a user to remove a file from a file system and from all backup tapes without ever mounting a single tape. When a file is backed up, it is first encrypted using a randomly generated key and then backed up. When the user wishes to remove the file from the backup tape, the key used to encrypt the file is deleted. Deleting the encryption key renders the data on the tape inaccessible. No one, including the file owner, can ever access the file again. The encrypt before-backup method is completely transparent to the user. Only the computer system's operating system knows which key was used to encrypt the file during backup. This ensures that when the operating system is instructed to delete the encryption key, the key is "lost" forever and thus the backed up files become unreadable. Unlike prior cryptographic file systems, the revoked backup files are inaccessible to both the user and others.
Inventors
- 👤 Dan Boneh
- 👤 Richard J. Lipton
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-10-31 01:12
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/62; G06F21/6209; G06F21/6218; G06F11/00; G06F11/07; G06F11/14; G06F11/1446; G06F11/1456; G06F2221/00; G06F2221/21; G06F2221/2143
Claims Analysis
Total Claims: 13
Claim 1
Independent Claim
71 words
A method for preventing the reading of all backup copies of electronic information, the method comprising: using an encryption key, encrypting only the electronic information being backed up; storing the encrypted electronic information on a backup medium; creating a key file; storing the encryption key in the key file; encrypting the key file with a master key; backing up the encripted key file; and destroying any record of the encryption key.
Claim 2
Independent Claim
71 words
A method for preventing the reading of all backup copies of electronic information, the method comprising: using an encryption key, encrypting only the electronic information being backed up; storing the encrypted electronic information on a backup medium; creating a key file; storing the encryption key in the key file; encrypting the key file with a master key; backing up the encripted key file; and destroying any record of the encryption key.
Claim 3
Dependent Claim
36 words
The method of claim 1, further comprising the steps of of generating a new master key each time the encrypted key file is backed up and destroying any record of the most recent previous master key.
Claim 4
Dependent Claim
68 words
The method of claim 1, further comprising; a. generating a new encryption key each time the electronic information is backed up; b. encrypting the electronic information with the new encryption key; c. storing the new encryption key in the key file; d. saving a predetermined number of previously used encryption keys in the key file; and e. deleting from the key file encryption keys exceeding the predetermined number.
Claim 5
Dependent Claim
38 words
The method of claim 1, further comprising: a. a computer system storing the encrypted electronic information obtaining a public encryption key from a master key storage server; and b. using the public encryption key, encrypting the master key.
Claim 6
Dependent Claim
51 words
The method of claim 4, further comprising: a. transmitting the encrypted master key to the master key storage server; and b. using a private key, the master key storage server decrypting the encrypted master key; and c. the master key storage server transmitting the decrypted master key to the computer system.
Claim 7
Dependent Claim
19 words
The method of claim 5, wherein the master key storage server loses the private key after a predetermined time.
Claim 8
Independent Claim
111 words
An apparatus for backing up electronic information on a computer system comprising: a. a system memory storing: (1) a file of electronic information; and (2) a key file configured to store encryption keys; b. an encryption means configured to: (1) receive and encrypt the file of electronic information using a first encryption key: and (2) receive and encrypt the key file using a master key; and c. a backup system configured to receive and store the encrypted file of electronic information and the key file, wherein said stored encrypted file of electronic inform ation and key file are rendered unreadable without access to said first encryption key and the master key.
Claim 9
Independent Claim
111 words
An apparatus for backing up electronic information on a computer system comprising: a. a system memory storing: (1) a file of electronic information; and (2) a key file configured to store encryption keys; b. an encryption means configured to: (1) receive and encrypt the file of electronic information using a first encryption key: and (2) receive and encrypt the key file using a master key; and c. a backup system configured to receive and store the encrypted file of electronic information and the key file, wherein said stored encrypted file of electronic inform ation and key file are rendered unreadable without access to said first encryption key and the master key.
Claim 10
Dependent Claim
73 words
The apparatus of claim 7, wherein the key file further comprises: a. a current encryption key used to encrypt the file onto a current back up; b. a predetermined number of previously used encryption keys used to encrypt the file on previous backups, wherein an encryption key which was used on one of the earlier backups is deleted when the total number of encryption keys in said key file exceeds the predetermined number.
Claim 11
Dependent Claim
17 words
The apparatus of claim 7, wherein the encryption keys, including the first encryption key, are not revealed.
Claim 12
Independent Claim
129 words
A method for backing up electronic information stored on a computer system so that reading of all copies of the backed up information is prevented when the electronic information stored on the computer system is deleted, the method comprising: generating a first encryption key; encrypting said stored electronic information using the first encryption key; backing up the encrypted electronic, information by making a copy of said encrypted electronic information on a backup storage medium; generating a second encryption key when a second backup copy of said electronic information is made; creating an encryption key file for storing said first and second encryption keys; and storing in said encryption key file a date associated with each encryption key upon which each of said first and second encryption keys will expire.
Claim 13
Independent Claim
129 words
A method for backing up electronic information stored on a computer system so that reading of all copies of the backed up information is prevented when the electronic information stored on the computer system is deleted, the method comprising: generating a first encryption key; encrypting said stored electronic information using the first encryption key; backing up the encrypted electronic, information by making a copy of said encrypted electronic information on a backup storage medium; generating a second encryption key when a second backup copy of said electronic information is made; creating an encryption key file for storing said first and second encryption keys; and storing in said encryption key file a date associated with each encryption key upon which each of said first and second encryption keys will expire.
References Cited (Backward Citations)
US4465901A
Cited
US4319079A
Cited
US5008936A
Cited
US5646993A
Cited
US5748735A
Cited
US5719938A
Cited
US5659614A
Cited
US5802175A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2003-10-17 | 2004-04-17 | 2004-10-17 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2007-10-17 | 2008-04-17 | 2008-10-17 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2011-10-17 | 2012-04-17 | 2012-10-17 | $7700.00 | Window Closed / Lapsed |