Granted Patent B2

US 12,381,857 · App. 18/131,229 · Granted Aug 5, 2025

Inventors: Mark S. O'Hare (Coto De Caza, CA); Rick L. Orsini (Flower Mound, TX); Roger S. Davenport (Campbell, TX); Steven Winick (Roslyn Heights, NY)

Assignee: Security First Innovations, LLC

H04L63/0428G06F16/22G06F21/602G06F21/606G06F21/62G06F21/6218H04L9/085H04L9/3226H04L9/3263H04L63/04H04L63/08H04L63/0823H04L63/0876H04L67/108H04L69/14G06F11/1092H04L2209/80

Abstract

Claims (34)

1. A method for use in a secure data storage network, the method comprising:

defining a user group capable of accessing data stored in the secure data storage network, the user group including a plurality of users desiring access to a common set of data;

receiving a workgroup key from a remote key server;

associating the user group with the workgroup key, wherein the common set of data is secured using the workgroup key;

determining that a user of the secure data storage network is one of the plurality of users of the user group;

in response to determining, presenting a virtual disk to a client device of the user, wherein the virtual disk comprises a directory mapped to a plurality of physical storage devices such that physical locations of a plurality of shares stored on the plurality of physical storage devices are hidden from the client device, wherein the plurality of shares are generated by performing a cryptographic operation on data from the common set of data and distributing to the plurality of shares; and

after presenting the virtual disk, presenting the data distributed to the plurality of shares to the client device.

2. The method of claim 1 , wherein the virtual disk is presented to the client device as a unitary storage device.

3. The method of claim 1 , further comprising:

defining a plurality of user groups including defining the user group, wherein each of the plurality of user groups is associated with a different workgroup key.

4. The method of claim 3 , wherein each of the users within each of the plurality of user groups has a common set of security rights.

5. The method of claim 3 , wherein the plurality of user groups are members of a plurality of security groups, and wherein each of the plurality of security groups defines security rights common among the members of each respective one of the plurality of security groups.

6. The method of claim 1 , further comprising:

defining a plurality of user groups including defining the user group and a second user group;

wherein the plurality of users of the user group have a different role, right or responsibility in an organization than a plurality of users of the second user group.

7. The method of claim 6 , wherein each of the plurality of user groups is associated with a different workgroup key.

8. A secure data storage network comprising:

a memory storing a software; and

one or more processors configured to execute the software to:

define a user group capable of accessing data stored in the secure data storage network, the user group including a plurality of users desiring access to a common set of data;

receive a workgroup key from a remote key server;

associate the user group with the workgroup key, wherein the common set of data is secured using the workgroup key;

determine that a user of the secure data storage network is one of the plurality of users of the user group;

in response to determining, present a virtual disk to a client device of the user, wherein the virtual disk comprises a directory mapped to a plurality of physical storage devices such that physical locations of a plurality of shares stored on the plurality of physical storage devices are hidden from the client device, wherein the plurality of shares are generated by performing a cryptographic operation on data from the common set of data and distributing to the plurality of shares; and

after presenting the virtual disk, present the data distributed to the plurality of shares to the client device.

9. The secure data storage network of claim 8 , wherein the virtual disk is presented to the client device as a unitary storage device.

10. The secure data storage network of claim 8 , wherein the one or more processors are further configured to execute the software to:

define a plurality of user groups, wherein each of the plurality of user groups is associated with a different workgroup key.

11. The secure data storage network of claim 10 , wherein each of the users within each of the plurality of user groups has a common set of security rights.

12. The secure data storage network of claim 10 , wherein the plurality of user groups are members of a plurality of security groups, and wherein each of the plurality of security groups defines security rights common among the members of each respective one of the plurality of security groups.

13. The secure data storage network of claim 8 , wherein the one or more processors are further configured to execute the software to:

define a plurality of user groups including defining the user group and a second user group;

wherein the plurality of users of the user group have a different role, right or responsibility in an organization than a plurality of users of the second user group.

14. The secure data storage network of claim 13 , wherein each of the plurality of user groups is associated with a different workgroup key.

Continuity (8)

References Cited (347)