Systems and methods for automatically handling multiple levels of encryption and decryption
View Patent ↗Systems and methods are provided for automatically handling multiple levels of encryption and decryption. An electronic file is received to add to encrypted storage. The electronic file is encrypted to generate a new level of encryption for the electronic file using an encryption process that uses encryption data to generate the new level of encryption and to decrypt the new level of encryption. A set of existing encryption data associated with the electronic file is identified, wherein each existing encryption data from the set of existing encryption data is associated with an existing level of encryption already applied to the electronic file. The encryption data is added to the set of existing encryption data associated with the electronic file so that the existing levels of encryption and the new level of encryption can be decrypted.
1. A computerized method for handling multiple levels of encryption so that data can be encrypted multiple times and subsequently decrypted to properly unencrypt the data, the method comprising:
receiving, by a computing device, an electronic file to add to encrypted storage that is in communication with the computing device;
encrypting, by the computing device, the electronic file to generate a new level of encryption for the electronic file using an encryption process that uses encryption data to generate the new level of encryption and to decrypt the new level of encryption;
identifying, by the computing device, a set of existing encryption data associated with the electronic file, wherein each existing encryption data from the set of existing encryption data is associated with an existing level of encryption already applied to the electronic file;
adding, by the computing device, the encryption data to the set of existing encryption data associated with the electronic file so that the existing levels of encryption and the new level of encryption can be decrypted;
identifying, by the computing device, a total number of levels of encryption among the existing levels of encryption and the new level of encryption; and
decrypting, by the computing device, all but one of the total number of levels of encryption from the electronic file.
2. The method of claim 1 , further comprising storing, for each of the existing levels of encryption and the new level of encryption, an index to keep track of how many blocks of the electronic file have been decrypted for the associated level of encryption.
3. The method of claim 2 , further comprising:
selecting a level of encryption from the existing levels of encryption and the new level of encryption to decrypt from the electronic file;
decrypting a data block of the electronic file pointed to by the index associated with the selected level of encryption using selected encryption data associated with the selected level of encryption;
updating the index by one to reflect that the data block is no longer encrypted for the selected level of encryption; and
associating the updated index with the electronic file.
4. The method of claim 1 , further comprising removing encryption information for each of the decrypted levels of encryption from the set of decryption information associated with the electronic file.
5. The method of claim 1 , further comprising:
receiving an access request by a computer program authorized to access the electronic file, the access request being associated with a set of blocks of the electronic file;
determining that none of the set of blocks are locked by a decryption process that is removing one or more levels of encryption of the block; and
allowing the access request.
6. The method of claim 1 , further comprising:
receiving an access request by a computer program authorized to access the electronic file, the access request being associated with a set of blocks of the electronic file;
determining a block from the set of blocks is locked by a decryption process that is removing one or more levels of encryption of the block; and
blocking the access request until all blocks in the set of blocks are decrypted to remove the one or more levels of encryption.
7. A computing device comprising:
a database; and
a processor in communication with the database, and configured to run a module stored in memory that is configured to cause the processor to:
receive an electronic file to add to encrypted storage that is in communication with the computing device;
encrypt the electronic file to generate a new level of encryption for the electronic file using an encryption process that uses encryption data to generate the new level of encryption and to decrypt the new level of encryption;
identify a set of existing encryption data associated with the electronic file, wherein each existing encryption data from the set of existing encryption data is associated with an existing level of encryption already applied to the electronic file;
add the encryption data to the set of existing encryption data associated with the electronic file so that the existing levels of encryption and the new level of encryption can be decrypted;
identify a total number of levels of encryption among the existing levels of encryption and the new level of encryption; and
decrypt all but one of the total number of levels of encryption from the electronic file.
8. The computing device of claim 7 , wherein the module stored in memory is further configured to cause the processor to store, for each of the existing levels of encryption and the new level of encryption, an index to keep track of how many blocks of the electronic file have been decrypted for the associated level of encryption.
9. The computing device of claim 7 , wherein the module stored in memory is further configured to cause the processor to:
select a level of encryption from the existing levels of encryption and the new level of encryption to decrypt from the electronic file;
decrypt a data block of the electronic file pointed to by the index associated with the selected level of encryption using selected encryption data associated with the selected level of encryption;
update the index by one to reflect that the data block is no longer encrypted for the selected level of encryption; and
associating the updated index with the electronic file.
10. The computing device of claim 7 , wherein the module stored in memory is further configured to cause the processor to remove encryption information for each of the decrypted levels of encryption from the set of decryption information associated with the electronic file.
11. The computing device of claim 7 , wherein the module stored in memory is further configured to cause the processor to:
receive an access request by a computer program authorized to access the electronic file, the access request being associated with a set of blocks of the electronic file;
determine that none of the set of blocks are locked by a decryption process that is removing one or more levels of encryption of the block; and
allow the access request.
12. The computing device of claim 7 , wherein the module stored in memory is further configured to cause the processor to:
receive an access request by a computer program authorized to access the electronic file, the access request being associated with a set of blocks of the electronic file;
determine a block from the set of blocks is locked by a decryption process that is removing one or more levels of encryption of the block; and
block the access request until all blocks in the set of blocks are decrypted to remove the one or more levels of encryption.
13. A non-transitory computer readable medium having executable instructions operable to cause an apparatus to:
receive an electronic file to add to encrypted storage that is in communication with the computing device;
encrypt the electronic file to generate a new level of encryption for the electronic file using an encryption process that uses encryption data to generate the new level of encryption and to decrypt the new level of encryption;
identify a set of existing encryption data associated with the electronic file, wherein each existing encryption data from the set of existing encryption data is associated with an existing level of encryption already applied to the electronic file;
add the encryption data to the set of existing encryption data associated with the electronic file so that the existing levels of encryption and the new level of encryption can be decrypted;
identify a total number of levels of encryption among the existing levels of encryption and the new level of encryption; and
decrypt all but one of the total number of levels of encryption from the electronic file.
14. The non-transitory computer readable medium of claim 13 , having executable instructions operable to cause the apparatus to store, for each of the existing levels of encryption and the new level of encryption, an index to keep track of how many blocks of the electronic file have been decrypted for the associated level of encryption.
15. The non-transitory computer readable medium of claim 13 , having executable instructions operable to cause the apparatus to:
select a level of encryption from the existing levels of encryption and the new level of encryption to decrypt from the electronic file;
decrypt a data block of the electronic file pointed to by the index associated with the selected level of encryption using selected encryption data associated with the selected level of encryption;
update the index by one to reflect that the data block is no longer encrypted for the selected level of encryption; and
associating the updated index with the electronic file.
16. The non-transitory computer readable medium of claim 13 , having executable instructions operable to cause the apparatus to:
receive an access request by a computer program authorized to access the electronic file, the access request being associated with a set of blocks of the electronic file;
determine that none of the set of blocks are locked by a decryption process that is removing one or more levels of encryption of the block; and
allow the access request.
17. The non-transitory computer readable medium of claim 13 , having executable instructions operable to cause the apparatus to:
receive an access request by a computer program authorized to access the electronic file, the access request being associated with a set of blocks of the electronic file;
determine a block from the set of blocks is locked by a decryption process that is removing one or more levels of encryption of the block; and
block the access request until all blocks in the set of blocks are decrypted to remove the one or more levels of encryption.