AU2014203542A1 - Systems and methods for data insurance - Google Patents

Abstract

An agreement is created between a first entity and a second entity under which the second entity agrees to provide data protection services for use by a third entity. A backup copy of the third entity's data is created and maintained at a location controlled by the second entity. If the third entity suffers a data loss, a replacement copy of the data is generated from the backup copy. The first entity provides compensation for the second entity's efforts to restore the third entity's lost data. If the second entity is unable to restore the data, the third entity is compensated for its data loss. CONTRACT BETWEEN 1ST sT ENTITY ENTITY AND 2ND ENTITY 2 ENTITY INSURANCE AGREEMENT 3RD ENTITY BETWEEN 1ST ENTITY AND ALLOWING THE 2ND ENTITY TO PROTECT THE 3 RD ENTITY'S DATA

Description

-2 SYSTEMS AND METHODS FOR DATA INSURANCE BACKGROUND OF THE INVENTION [0001] The present invention relates generally to methods and systems for restoring electronic data after a loss of such data and more specifically to methods and systems for compensating data owners and data backup service providers for the costs of restoring data after a loss of data. [0002] Electronic data are stored on a wide variety of storage media including electronic disks, hard drives, and tapes, and other media. Data stored on any of these media may be lost for any number of reasons, including physical damage to the storage media in disasters such as fire, tornados, earthquakes, or terrorism. Data may also be lost when storage media or associated computer systems fail after prolonged use. Data may also be lost inadvertently through user error. [0003] It has been standard practice for some time to make periodic "backup" copies of stored data to mitigate financial and similar harm caused by data loss. When data are lost, they may be restored from the backup copy thereby minimizing disruptions to the data owner's business or other activities that would otherwise result from the loss of the data. [0004] A backup copy may be made by the data's owner and stored at or near the location at which the original data storage media are located. This is obviously risky, though, in that a single catastrophic event such as a fire or tornado may easily destroy not only the original stored data but the backup copy as well. [0005] Backup copies are often stored, therefore, at a location remote from the media that hold the original data. This, though, can create logistical and transportation difficulties, particularly where backup copies have to be physically moved from the original storage site to the backup copies' remote storage location. [0006] Methods have been developed in which copies of the electronic data are transmitted electronically (using a modem or over the Internet, for example) and archived as backup copies at a remote location. In the event data are lost at the original storage site, the data can be recreated from a backup copy. The backup data can be transferred -3 back to the original location by substantially the same means by which the data were initially transmitted to the remote location for backup. Such methods substantially reduce the inconvenience that arises when physical storage media are shipped or otherwise physically transported from the original data storage location to the remote backup locations. [0007] Existing methods for electronic transfer and remote storage of backup copies are still less than ideal, though. When data are lost at the original location, costs are necessarily incurred in retrieving the data from the remote location's backup copy and transferring it back to the original site. These costs may include, for example, technicians' time and the costs of restoring physical storage media that may have been damaged at the original site. [0008] In other cases, it may be impossible to fully restore the lost data from a backup copy. The remotely located backup copy may not be current, for example, or the backup copy may never have been properly created, it may itself have become damaged or corrupted, or it may otherwise be incomplete or unavailable to restore the original data. In that case, the owner of the data may naturally incur further losses and inconvenience from the unavailability of a complete backup copy to restore the lost data. [0009] It would be advantageous, therefore, if improved methods and systems were devised to protect data owners out of losses or inconvenience incurred in restoring lost data from backup copies at remote locations, and for other losses and inconvenience that might arise in the event the lost data could not be restored. The inventions described in this document, at least in some embodiments, satisfy those objectives. [0010] It is an object of the present invention to overcome or ameliorate at least one of the disadvantages of the prior art, or to provide a useful alternative. [0011] Any discussion of the prior art throughout the specification should in no way be considered as an admission that such prior art is widely known or forms part of common general knowledge in the field. SUMMARY OF THE INVETION [0012] A method for providing data insurance includes the creation of an agreement between a first entity and a second entity under which the second entity agrees to -4 provide data protection services for use by a third entity. An insurance agreement is also created, under which the third entity is authorized to use the second entity's data protection service. The insurance agreement may specify the type or level of service that the third entity is required to use. In some embodiments, the second entity provides a data backup service in which a backup copy of the third entity's data is created and maintained at a location controlled by the second entity. If the third entity suffers a data loss, a further copy of the data is generated from the backup copy. Compensation will then be provided for the second entity's services in attempting to restore the lost data from the backup copy. If the second entity cannot restore the data, compensation may be paid to the third entity for its lost data. The first entity may also pay the second entity for providing data protection services to the third entity. The first entity may, moreover, elect not to charge the third entity any special premium or additional charge for providing the data protection service, beyond the usual premium that the first entity would ordinarily charge for providing its insurance without the provision of the data protection services. [0013] One embodiment of the invention thus can provide a system under which a data owner is protected against expenses it might incur to restore lost data and other losses that might follow a loss of the data owner's data. In some embodiments, the insured is not charged for the data protection services, the service provider instead being compensated by the insurer. In other embodiments, the insured purchases the data protection service directly from the provider, but the insurer discounts the premium it would ordinarily charge for insuring the insured against losses arising from loss of its data. In still other embodiments, the data protection service provider may pay the insurer for requiring the use of its services, or the provider may agree to provide its services to the insurer's insured at a price that is discounted in comparison to what the provider would normally charge for the services of that type. [0014] In accordance with a first aspect of the present invention, there is provided a method for providing data insurance comprising: storing, by a first processing device, data of a third entity on a storage medium of the third entity; creating an agreement between a first entity and a second entity to provide data protection service to a third entity, wherein the first entity arranges for a data protection service to be provided by the second entity for the third entity's data stored on a storage medium of the third entity; -5 creating an insurance agreement between the first entity and the third entity, because the data of the third entity was stored on the storage medium of the third entity, that authorizes the third entity to use the data protection service provided by the second entity for the third entity's data stored on the storage medium of the third entity without the third entity being charged for use of the data protection service of the second entity; storing, by a second processing device, an electronic backup copy of the third entity's data, as required by the data protection service agreement, on a storage medium of the second entity such that the electronic backup copy of the third entity's data stored on the storage medium of the second entity is insured against loss according to the insurance agreement; upon loss of data stored on the storage medium of the third entity, providing the backup copy of data from the second entity to the third entity in an attempt to restore the third entity's data; and providing compensation from the first entity to the second entity for the data protection services. [0015] In accordance with a second aspect of the present invention, there is provided a method for providing data insurance comprising: storing, by a first processing device, data of a third entity on a physical storage medium of the third entity; creating an agreement between a first entity and a second entity to provide electronic data protection service to the third entity, wherein the first entity arranges for a data protection service to be provided by the second entity for the third entity's data stored on the physical storage medium of the third entity; creating an insurance agreement between the first entity and the third entity, because the data of the third entity was stored on the physical storage medium of the third entity, that authorizes the third entity to use the electronic data protection service provided by the second entity for the third entity's data stored on the physical storage medium of the third entity without the first entity and the second entity charging the third entity for use of the electronic data protection service of the second entity; storing, by a second processing device, an electronic backup copy of the third entity's data, as required by the data protection service agreement, on a storage medium of the second entity such that the electronic backup copy of the third entity's data stored on the storage medium of the second entity is insured against loss according to the insurance agreement; and -6 upon loss of data stored on the physical storage medium of the third entity, attempting to deliver to the third entity the electronic backup copy. [0016] In accordance with a third aspect of the present invention, there is provided an insurance system comprising: a data protection service provider that provides data protection services to an insurer for use by the insurer's insured and that has a processing device configured to store an electronic backup of the insured's data on a storage medium; wherein the data protection services are acquired by the insurer and used by the insured that is insured by the insurer against losses arising out of lost data from the electronic backup copy of the insured's data based on an insurance agreement between the insurer and the insured created because the insured's data was stored on a storage medium and without the insurer and the data protection service provider charging for the use of-the data protection service of the data protection service provider; wherein following a loss of data by the insured, the data protection service provider is obligated to attempt to restore the insured's data; and wherein the data protection service provider is compensated by the insurer for its efforts to restore the insured's data. [0017] In accordance with a fourth aspect of the present invention, there is provided a method for providing data insurance and protecting data, the method comprising: storing, by a first processing device, data of an insured on a storage medium of the insured; creating an insurance agreement between an insurer and the insured because the data of the insured was stored on the storage medium of the insured, wherein the insurance agreement provides that the insurer will insure the insured for losses arising out of lost data stored on the storage medium of the insured, and wherein the insurance agreement requires the insured to use a data protection service provided by a data protection service provider; creating a data protection service agreement between the insured and the data protection service provider, wherein the data protection service agreement provides that the data protection service provider will provide a data protection service for the insured's data stored on the storage medium of the insured without the insurer and the data protection service provider charging the insured for the use of the data protection service of the data protection service provider; -7 storing, by a second processing device, an electronic backup copy of the insured's data, as required by the data protection service agreement, on a storage medium of the data protection service provider such that the electronic backup copy of the insured's data stored on the storage medium of the data protection service provider is insured against loss according to the agreements; and upon loss of data by the insured, providing the backup copy data from the storage medium of the data protection service provider to the insured in an attempt to restore the insured's data. [0018] In accordance with a further aspect of the present invention, there is provided a business method for providing data insurance, comprising: creating an agreement between a first entity and a second entity to provide a data protection service to a third entity, wherein the first entity arranges for a data protection service to be provided by the second entity for use by the third entity; creating an insurance agreement between the first entity and the third entity, wherein the insurance agreement authorizes the third entity to use the data protection service provided by the second entity; and following a loss of data by the third entity, providing services from the second entity in an attempt to restore the third entity's data, and providing compensation from the first entity to the second entity for the third entity's services. [0019] In accordance with a further aspect of the present invention, there is provided a method for providing data insurance, comprising: creating an agreement between a first entity and a second entity to provide an electronic data protection service to a third entity, wherein the first entity arranges for a data protection service to be provided by the second entity for use by the third entity; creating an insurance agreement between the first entity and the third entity, wherein the insurance agreement authorizes the third entity to use the electronic data protection service provided by the second entity; and following a loss of electronic data stored on a first physical storage medium, attempting to deliver to the third entity a second physical storage medium with a restored version of the data stored on the second physical storage medium. [0020] In accordance with a further aspect of the present invention, there is provided a loss mitigation tool for protecting an insured entity against data loss, the loss mitigation tool comprising: -8 an insurance agreement between an insurer and the insured entity, wherein the insurance agreement includes a data insurance provision under which the insured entity is allowed to use a data protection service; and a data protection agreement between the insurer and a data protection service provider to provide the data protection service from the data protection service provider to the insured entity, wherein the data protection agreement obligates the data protection service provider to attempt to restore data of the insured entity following a loss of data by the insured entity, and wherein the data protection agreement provides for compensation from the insurer to the data protection service provider for the data protection service provider's efforts to restore the insured entity's data. [0021] In accordance with a further aspect of the present invention, there is provided an insurance system comprising: a data protection service provider; an insurer, wherein the insurer acquires data protection services from the data protection service provider for use by the insurer's insureds; and an insured that is insured by the insurer against losses arising out of lost data, wherein an insurance agreement between the insurer and the insured allows the insured to use the data protection services acquired by the insurer; wherein following a loss of data by the insured, the data protection service provider is obligated to attempt to restore the insured's data; and wherein the data protection service provider is compensated by the insurer for its efforts to restore the insured's data. [0022] In accordance with a further aspect of the present invention, there is provided a method for providing data insurance, the method comprising: creating an insurance agreement between an insurer and an insured, wherein the insurance agreement provides that the insurer will insure the insured for losses arising out of lost data, and wherein the insurance agreement requires the insured to use a data protection service provided by a data protection service provider; creating a data protection service agreement between the insured and the data protection service provider, wherein the data protection service agreement provides that the data protection service provider will provide a data protection service to the insured; and following a loss of data by the insured, providing services from the data protection service provider in an attempt to restore the insured's data.

-9 [0023] Unless the context clearly requires otherwise, throughout the description and the claims, the words "comprise", "comprising", and the like are to be construed in an inclusive sense as opposed to an exclusive or exhaustive sense; that is to say, in the sense of "including, but not limited to". BRIEF DESCRIPTION OF THE DRAWINGS [0024] The following discussion may be best understood with reference to the various drawings, which form a part of this disclosure. [0025] FIG. 1 is a flow chart illustrating data insurance methods according to embodiments of the invention. [0026] FIG. 2 is a block diagram further illustrating the methods of FIG. 1 [0027] FIG. 3 is a flow chart illustrating data insurance methods according to alternative embodiments. [0028] FIG. 4 is a block diagram further illustrating the methods of FIG. 3. [0029] FIG. 5 is a block diagram that illustrates other alternative embodiments. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS [0030] The invention is described here with reference to the accompanying drawings, in which preferred embodiments of the invention are shown. The invention may, however, be embodied in many different forms and should not be construed as limited to these examples. [0031] When an element such as a block or unit is shown in the figures connected to another element, it can be directly connected to the other element or intervening elements may also be present. Terms such as "entity" and "data protection service" can include one or more of the indicated element. [0032] "Data" includes any information that has value to its owner. "Insurance" is a financial arrangement for redistributing the costs of unexpected losses according to a contract in which an insurer agrees to compensate an insured for those losses. A "loss" -10 is an undesired, unplanned reduction in economic value. "Data loss" can include, for example, events in which no current copy of the data exists, or events in which only a partial but possibly or certainly corrupted copy of the data is available. [0033] A "data protection service" can include data protection tools and techniques for reproducing information. These can include functions such as copying data and maintaining backups of data at previous times and dates. Data protection services can also include other protective services such as virus scanning. Particular data protection services might include local data mirroring, remote data mirroring, operating-system supported data object replication, or file-by-file data archiving, and these might be supplemented by virus scanning or other data protection services. Such data protection services may be provided at a single facility or at a plurality of facilities, locally at the data owner's site, or remotely at another location. [0034] The data insurance methods and systems described here can apply in situations where a first entity insures a third entity via an insurance agreement. The first entity may purchase a data protection service from a second entity for use by customers of the first entity. Insurance agreements according to these methods can provide insurance to the third entity and include, among other things, provisions for providing data insurance to protect against economic losses arising out of the insured's loss of data. [0035] FIG. 1 is a flow chart illustrating a data insurance method. Block 140 represents a contract between a first entity 110 and a second entity 120. This contract can include an agreement obligating the second entity to provide data protection services to a third entity 130. The second entity could, for example, create a backup copy of the third entity's data and retain it at the second entity's location. If the third entity's data is lost, the second entity can restore the data from the backup copy. The second entity may provide an online data backup service in which the third entity's data is transmitted to a location controlled by the second entity over the Internet, a private network or similar means for copying and backup by the second entity. Virtual Backup, Inc. is a provider of such services. [0036] Block 150 represents an insurance agreement between the first entity 110 and the third entity 130. The insurance agreement obligates the first entity 110 to insure the third entity against losses to the third entity's data. The insurance agreement permits, - 11 and may require, the third entity to use the data protection service provided by the second entity 120. The insurance agreement might, for example, require the third entity to install, set up, and use the data protection services. Recovery under the policy can be made contingent, in whole or in part, on the third entity's compliance with these requirements. If, for example, the third party fails to use or fails properly to cooperate in the use of the data protection services, then the third party's recovery under the policy might be eliminated or reduced. Block 160 represents the second entity's provision of data protection services to protect the third entity's data. [0037] The first entity 110 insures the third entity 130 against losses arising from its loss of data. The first entity pays or otherwise compensates the second entity 120 for its data protection services. The third entity's use of the data protection services can be made a condition of the insurance policy. The first entity insurer will not make good the third entity's losses unless the third entity has used the second entity's data protection services as required. [0038] When the third entity suffers a loss of data, the first entity will compensate the third entity for that loss. That compensation can take several forms. The insurance contract between the first and third entities may, for example, require the third entity to pay the second entity for a technician's time or other expenses incurred in connection with the second entity's efforts to restore the third entity's data, from a backup copy stored at the second entity's facility or otherwise as described in this document. [0039] A contract might be structured to provide for both replacement of damaged or destroyed hardware and lost data. After an incident resulting in damaged hardware and lost data, the insurance contract between the first and third entities might, for example, require the first entity to pay the second entity to place a copy of the third entity's data on new computer hardware and deliver that hardware to the third entity's office, place of business, or another location controlled by the third entity. The third entity's data can be placed onto the new hardware from a backup copy stored at a location controlled by the second entity, or otherwise as described in this document. [0040] Some contracts might specify that, in the event the data cannot be restored from a backup copy, the first entity will pay to have the third entity's data restored by another method. The first entity may be obligated, for example, to pay the expenses -12 incurred in having the third entity's data reconstructed from paper records or other alternate storage means to replace the lost computer data. [0041] If the data cannot be restored either from a backup copy, paper records, or any other alternative means, then the insurance policy may provide for a payment from the first entity to the third entity. The payment might be in an amount agreed upon between the parties at the time of the contract and stipulated between them in the contract. [0042] FIG. 2 illustrates a data insurance system. The arrow extending from the first entity insurer 110 to the third entity insured 120 represents insurance provided by the first entity, and in particular, compensation paid by the first entity to the third entity for data loss. The arrow that extends back from the third entity insured to the first entity insurer represents the premium or other compensation paid by the insured in return for the insurance. [0043] The arrow extending from the second entity data protection service 120 to the first entity insurer 110 represents the data protection service's agreement with the insurer to allow the third entity insured 130 to use the data protection service. In essence, the first entity insurer 110 purchases data protection services on behalf of its insured customers. This can be viewed as the purchase of a license for the benefit of the third entity insured, and this license is represented by the arrow from the second entity data protection service to the third entity insured. The first entity insurance provider 110 compensates the second entity 120 for providing the data protection service to the insured 130. This compensation is represented by the arrow from the first entity insurer to the data protection service. [0044] Significantly, there is no arrow in this figure from the third entity insured 130 to the second entity data protection service 120. The third entity does not make any separate payment to the data protection service for the use of its service. Provision of such services is part of the third entity's agreement with its insurer, and payment for the services is from the insurer to the service provider. [0045] With conventional data insurance plans, the insured may or may not purchase data protection services. Many insureds will forgo the extra expense of acquiring such services; others may cut costs by contracting with services of dubious quality or effectiveness. Even when an insured does purchase data protection services, the -13 insured may not take all of the steps required - such as installing required software, using it as directed, or making backups at the recommended frequency - to use the service effectively. [0046] In the scheme described here, though, the insured 130 does not pay anything directly to the data protection service provider 120, and the insurer 110 typically will not charge any additional or special premium in exchange for the insurer's arranging for the data protection service. The insured, moreover, can be required by the terms of the policy to cooperate with the service to install, maintain, and use the data protection service to provide the specified protection for the data. If the insured fails to do what is required, recovery may be denied by the insurer in the event of data loss. [0047] An insured thus has a very substantial incentive to maintain and use the data protection service. By increasing the number of insureds that use the data protection service, and by ensuring that the data protection service provides a service of acceptable quality, the insurance provider can expect to reduce the amounts it must pay out in claims for data loss. [0048] FIGS. 3 and 4 illustrate a variant in which an "offset method" is utilized to pay for the data protection services. In this method, the first entity insurer 110 (see FIG. 3) provides insurance 145 to the third entity insured 130 for a premium that is reduced in comparison with the premium ordinarily charged for the same level of insurance. To qualify for the reduced premium, the third entity 130 must agree to purchase data protection services 160 - the agreement between the third entity insured and the second entity data protection service provider 120 being represented by block 155 in FIG. 3. Though the third entity must pay the second entity for the data protection services, the third entity's expense in doing so can be offset by the reduced insurance premium charged by the first entity insurer. [0049] In FIG. 4, the arrow from the first entity insurer 110 to the third entity insured 130 represents the insurance provided by the insurer to the third entity. The arrow from the insured to the insurer represents the premium the third entity pays to purchase the insurance. This premium is reduced in comparison with what the insurer would normally have charged for the insurance. The reduced premium is typically offered on the condition that the third entity purchase data protection services from a second entity data - 14 protection service provider 120. The identity of the provider and the type and degree of data protection services may be specified in the insurance agreement. [0050] The purchase by the third entity insured 130 of data protection services from the data protection service provider 120 is illustrated in FIG. 4. The arrow from the second entity data protection service provider to the third entity insured represents the provision of the data protection services by the provider. The arrow from the insured to the service provider represents the insured's payment for those services. [0051] FIG. 5 illustrates another variant. This method includes the same elements as those of the variant illustrated in FIGS. 3 and 4. This variant, though, includes a further agreement between the first entity insurer 110 and the second entity data protection service provider 120. In FIG. 5, the arrow from the first entity insurer to the second entity data protection service provider represents a promise by the insurer to include in its policies a provision requiring its insureds to purchase data protection services from that provider. The arrow from the service provider to the insurer represents a promise by the provider to pay the insurer money or other compensation for requiring use of the provider's services, or to provide its services to the insurer's insured at a discount to what it would normally charge for the same level of service. [0052] Reference throughout this specification to "one embodiment", "some embodiments" or "an embodiment" means that a particular feature, structure or characteristic described in connection with the embodiment is included in at least one embodiment of the present invention. Thus, appearances of the phrases "in one embodiment", "in some embodiments" or "in an embodiment" in various places throughout this specification are not necessarily all referring to the same embodiment, but may. Furthermore, the particular features, structures or characteristics may be combined in any suitable manner, as would be apparent to one of ordinary skill in the art from this disclosure, in one or more embodiments. [0053] As used herein, unless otherwise specified the use of the ordinal adjectives "first", "second", "third", etc., to describe a common object, merely indicate that different instances of like objects are being referred to, and are not intended to imply that the objects so described must be in a given sequence, either temporally, spatially, in ranking, or in any other manner.

-15 [0054] Unless specifically stated otherwise, as apparent from the following discussions, it is appreciated that throughout the specification discussions utilizing terms such as "processing," "computing," "calculating," "determining", analyzing" or the like, refer to the action and/or processes of a computer or computing system, or similar electronic computing device, that manipulate and/or transform data represented as physical, such as electronic, quantities into other data similarly represented as physical quantities. [0055] In a similar manner, the terms "processor", "processing device" or the like may refer to any device or portion of a device that processes electronic data, e.g., from registers and/or memory to transform that electronic data into other electronic data that, e.g., may be stored in registers and/or memory. A "computer" or a "computing machine" or a "computing platform" may include one or more processors. [0056] The methodologies described herein are, in one embodiment, performable by one or more processors or processing devices that accept computer-readable (also called machine-readable) code containing a set of instructions that when executed by one or more of the processors carry out at least one of the methods described herein. Any processor capable of executing a set of instructions (sequential or otherwise) that specify actions to be taken are included. Thus, one example is a typical processing system that includes one or more processors. Each processor may include one or more of a CPU, a graphics processing unit, and a programmable DSP unit. The processing system further may include a memory subsystem including main RAM and/or a static RAM, and/or ROM. A bus subsystem may be included for communicating between the components. The processing system further may be a distributed processing system with processors coupled by a network. If the processing system requires a display, such a display may be included, e.g., a liquid crystal display (LCD) or a cathode ray tube (CRT) display. If manual data entry is required, the processing system also includes an input device such as one or more of an alphanumeric input unit such as a keyboard, a pointing control device such as a mouse, and so forth. The term memory unit as used herein, if clear from the context and unless explicitly stated otherwise, also encompasses a storage system such as a disk drive unit. The processing system in some configurations may include a sound output device, and a network interface device. The memory subsystem thus includes a computer-readable carrier medium that carries computer-readable code (e.g., software) including a set of instructions to cause performing, when executed by one or more processors, one of more of the methods -16 described herein. Note that when the method includes several elements, e.g., several steps, no ordering of such elements is implied, unless specifically stated. The software may reside in the hard disk, or may also reside, completely or at least partially, within the RAM and/or within the processor during execution thereof by the computer system. Thus, the memory and the processor also constitute computer-readable carrier medium carrying computer-readable code. [0057] Furthermore, a computer-readable carrier medium may form, or be included in a computer program product. [0058] In alternative embodiments, the one or more processors operate as a standalone device or may be connected, e.g., networked to other processor(s), in a networked deployment, the one or more processors may operate in the capacity of a server or a user machine in server-user network environment, or as a peer machine in a peer-to-peer or distributed network environment. The one or more processors may form a personal computer (PC), a tablet PC, a set-top box (STB), a Personal Digital Assistant (PDA), a cellular telephone, a web appliance, a network router, switch or bridge, or any machine capable of executing a set of instructions (sequential or otherwise) that specify actions to be taken by that machine. [0059] Note that while diagrams only show a single processor and a single memory that carries the computer-readable code, those in the art will understand that many of the components described above are included, but not explicitly shown or described in order not to obscure the inventive aspect. For example, while only a single machine is illustrated, the term "machine" shall also be taken to include any collection of machines that individually or jointly execute a set (or multiple sets) of instructions to perform any one or more of the methodologies discussed herein. [0060] Thus, one embodiment of each of the methods described herein is in the form of a computer-readable carrier medium carrying a set of instructions, e.g., a computer program that is for execution on one or more processors, e.g., one or more processors that are part of web server arrangement. Thus, as will be appreciated by those skilled in the art, embodiments of the present invention may be embodied as a method, an apparatus such as a special purpose apparatus, an apparatus such as a data processing system, or a computer-readable carrier medium, e.g., a computer program product. The computer-readable carrier medium carries computer readable code including a set of -17 instructions that when executed on one or more processors cause the processor or processors to implement a method. Accordingly, aspects of the present invention may take the form of a method, an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of carrier medium (e.g., a computer program product on a computer-readable storage medium) carrying computer readable program code embodied in the medium. [0061] The software may further be transmitted or received over a network via a network interface device. While the carrier medium is shown in an exemplary embodiment to be a single medium, the term "carrier medium" should be taken to include a single medium or multiple media (e.g., a centralized or distributed database, and/or associated caches and servers) that store the one or more sets of instructions. The term "carrier medium" shall also be taken to include any medium that is capable of storing, encoding or carrying a set of instructions for execution by one or more of the processors and that cause the one or more processors to perform any one or more of the methodologies of the present invention. A carrier medium may take many forms, including but not limited to, non-volatile media, volatile media, and transmission media. Non-volatile media includes, for example, optical, magnetic disks, and magneto-optical disks. Volatile media includes dynamic memory, such as main memory. Transmission media includes coaxial cables, copper wire and fiber optics, including the wires that comprise a bus subsystem. Transmission media also may also take the form of acoustic or light waves, such as those generated during radio wave and infrared data communications. For example, the term "carrier medium" shall accordingly be taken to included, but not be limited to, solid-state memories, a computer product embodied in optical and magnetic media; a medium bearing a propagated signal detectable by at least one processor of one or more processors and representing a set of instructions that, when executed, implement a method; and a transmission medium in a network bearing a propagated signal detectable by at least one processor of the one or more processors and representing the set of instructions. [0062] It will be understood that the steps of methods discussed are performed in one embodiment by an appropriate processor (or processors) of a processing (i.e., computer) device system executing instructions (computer-readable code) stored in storage. It will also be understood that the invention is not limited to any particular implementation or programming technique and that the invention may be implemented using any -18 appropriate techniques for implementing the functionality described herein. The invention is not limited to any particular programming language or operating system. [0063] It should be appreciated that in the above description of exemplary embodiments of the invention, various features of the invention are sometimes grouped together in a single embodiment, FIG., or description thereof for the purpose of streamlining the disclosure and aiding in the understanding of one or more of the various inventive aspects. This method of disclosure, however, is not to be interpreted as reflecting an intention that the claimed invention requires more features than are expressly recited in each claim. Rather, as the following claims reflect, inventive aspects lie in less than all features of a single foregoing disclosed embodiment. Thus, the claims following the Detailed Description are hereby expressly incorporated into this Detailed Description, with each claim standing on its own as a separate embodiment of this invention. [0064] Furthermore, while some embodiments described herein include some but not other features included in other embodiments, combinations of features of different embodiments are meant to be within the scope of the invention, and form different embodiments, as would be understood by those skilled in the art. For example, in the following claims, any of the claimed embodiments can be used in any combination. [0065] Furthermore, some of the embodiments are described herein as a method or combination of elements of a method that can be implemented by a processor of a computer system or by other means of carrying out the function. Thus, a processor with the necessary instructions for carrying out such a method or element of a method forms a means for carrying out the method or element of a method. Furthermore, an element described herein of an apparatus embodiment is an example of a means for carrying out the function performed by the element for the purpose of carrying out the invention. [0066] In the description provided herein, numerous specific details are set forth. However, it is understood that embodiments of the invention may be practiced without these specific details. In other instances, well-known methods, structures and techniques have not been shown in detail in order not to obscure an understanding of this description.

-19 [0067] Similarly, it is to be noticed that the term coupled, when used in the claims, should not be interpreted as being limited to direct connections only. The terms "coupled" and "connected," along with their derivatives, may be used. It should be understood that these terms are not intended as synonyms for each other. Thus, the scope of the expression a device A coupled to a device B should not be limited to devices or systems wherein an output of device A is directly connected to an input of device B. It means that there exists a path between an output of A and an input of B which may be a path including other devices or means. "Coupled" may mean that two or more elements are either in direct physical or electrical contact, or that two or more elements are not in direct contact with each other but yet still co-operate or interact with each other. [0068] While aspects of the invention have been described in terms of certain preferred embodiments, those of ordinary skill in the art will appreciate that various changes and additions might be made without varying from the basic principles of the invention. Aspects of the present invention can be implemented in a variety of implementations, and are not limited to any one particular implementation. Moreover, although the aspects of the invention described herein are described with reference to a first entity insurer, a second entity data protection service, and a third entity insured, the parties to the methods described here need not be formally denominated as such, so long as they act as described in the appended claims. The invention could also be embodied in insurance models in which other parties are present that act as brokers, agents, contractors, vendors, or other intermediaries in transactions between an insurer, an insured, and a data protection service provider. The inventions are thus not limited to the specific and exemplary embodiments described in this document. The scope of the invention should instead be determined from the appended claims, including the full scope of equivalents to which those claims are legally entitled.

Claims (26)

1. A method for providing data insurance comprising: storing, by a first processing device, data of a third entity on a storage medium of the third entity; creating an agreement between a first entity and a second entity to provide data protection service to a third entity, wherein the first entity arranges for a data protection service to be provided by the second entity for the third entity's data stored on a storage medium of the third entity; creating an insurance agreement between the first entity and the third entity, because the data of the third entity was stored on the storage medium of the third entity, that authorizes the third entity to use the data protection service provided by the second entity for the third entity's data stored on the storage medium of the third entity without the third entity being charged for use of the data protection service of the second entity; storing, by a second processing device, an electronic backup copy of the third entity's data, as required by the data protection service agreement, on a storage medium of the second entity such that the electronic backup copy of the third entity's data stored on the storage medium of the second entity is insured against loss according to the insurance agreement; upon loss of data stored on the storage medium of the third entity, providing the backup copy of data from the second entity to the third entity in an attempt to restore the third entity's data; and providing compensation from the first entity to the second entity for the data protection services.

2. The method of claim 1, wherein the insurance agreement requires the third entity to use the data protection service provided by the second entity.

3. The method of claim 1 or claim 2, wherein the first entity's insurance of the third entity against losses arising out of data loss is at least partially contingent upon the third entity's using predetermined services provided by the second entity.

4. The method of any one of the preceding claims, wherein the data protection service is a data backup service, and further comprising: storing the electronic backup copy of the third entity's data while at a location controlled by the second entity; and - 21 generating, after a loss of the third entity's data, a further copy of the third entity's data from the backup copy.

5. The method of claim 4, wherein the data backup service is an online data backup service.

6. A method for providing data insurance comprising: storing, by a first processing device, data of a third entity on a physical storage medium of the third entity; creating an agreement between a first entity and a second entity to provide electronic data protection service to the third entity, wherein the first entity arranges for a data protection service to be provided by the second entity for the third entity's data stored on the physical storage medium of the third entity; creating an insurance agreement between the first entity and the third entity, because the data of the third entity was stored on the physical storage medium of the third entity, that authorizes the third entity to use the electronic data protection service provided by the second entity for the third entity's data stored on the physical storage medium of the third entity without the first entity and the second entity charging the third entity for use of the electronic data protection service of the second entity; storing, by a second processing device, an electronic backup copy of the third entity's data, as required by the data protection service agreement, on a storage medium of the second entity such that the electronic backup copy of the third entity's data stored on the storage medium of the second entity is insured against loss according to the insurance agreement; and upon loss of data stored on the physical storage medium of the third entity, attempting to deliver to the third entity the electronic backup copy.

7. The method of claim 6, wherein the insurance agreement requires the third entity to use the data protection service provided by the second entity.

8. The method of claim 6 or claim 7, wherein the first entity's insurance of the third entity against losses arising out of data loss is at least partially contingent upon the third entity's using predetermined services provided by the second entity.

9. The method of any one of claims 6 to 8, wherein the data protection service is a data backup service, and further comprising: - 22 wherein the backup copy of the third entity's data is stored while at a location controlled by the second entity; and generating the restored copy of the third entity's data from the backup copy.

10. The method of claim 9, wherein the data backup service is an online data backup service.

11. An insurance system comprising: a data protection service provider that provides data protection services to an insurer for use by the insurer's insured and that has a processing device configured to store an electronic backup of the insured's data on a storage medium; wherein the data protection services are acquired by the insurer and used by the insured that is insured by the insurer against losses arising out of lost data from the electronic backup copy of the insured's data based on an insurance agreement between the insurer and the insured created because the insured's data was stored on a storage medium and without the insurer and the data protection service provider charging for the use of-the data protection service of the data protection service provider; wherein following a loss of data by the insured, the data protection service provider is obligated to attempt to restore the insured's data; and wherein the data protection service provider is compensated by the insurer for its efforts to restore the insured's data.

12. The insurance system of claim 11, wherein the insured is required to use the data protection services provided by the data protection service provider.

13. The insurance system of claim 11 or claim 12, wherein the insurer's insurance of the insured against losses arising out of data loss is at least partially contingent upon the insured using predetermined services provided by the data protection service provider.

14. The insurance system of any one of claims 11 to 13, wherein the electronic backup copy of the insured's data is stored while at a location controlled by the data protection service provider and wherein the data protection service provider's attempts to restore the insured's lost data include attempting to generate a further copy of the insured's data from the backup copy. - 23

15. The insurance system of claim 14, wherein the data backup service is an online data backup service.

16. The insurance system of any one of claims 11 to 15, wherein the data service provider's attempts to restore the insured's data include attempting to deliver to the insured an alternate storage medium with the restored version of the data stored on the alternate storage medium.

17. A method for providing data insurance and protecting data, the method comprising: storing, by a first processing device, data of an insured on a storage medium of the insured; creating an insurance agreement between an insurer and the insured because the data of the insured was stored on the storage medium of the insured, wherein the insurance agreement provides that the insurer will insure the insured for losses arising out of lost data stored on the storage medium of the insured, and wherein the insurance agreement requires the insured to use a data protection service provided by a data protection service provider; creating a data protection service agreement between the insured and the data protection service provider, wherein the data protection service agreement provides that the data protection service provider will provide a data protection service for the insured's data stored on the storage medium of the insured without the insurer and the data protection service provider charging the insured for the use of the data protection service of the data protection service provider; storing, by a second processing device, an electronic backup copy of the insured's data, as required by the data protection service agreement, on a storage medium of the data protection service provider such that the electronic backup copy of the insured's data stored on the storage medium of the data protection service provider is insured against loss according to the agreements; and upon loss of data by the insured, providing the backup copy data from the storage medium of the data protection service provider to the insured in an attempt to restore the insured's data.

18. The method of claim 17, wherein the backup copy of the insured's data is stored while at a location controlled by the data protection service provider, further - 24 comprising generating, after a loss of data by the insured, a further copy of the insured's data from the backup copy.

19. The method of claim 18, wherein the data protection service is an online data backup service.

20. The method of claim 17, wherein the data service provider's attempt to restore the insured's data includes attempting to deliver to the insured an alternate storage medium with a restored version of the data stored on the alternate storage medium.

21. A method for providing data insurance and/or an insurance system substantially as herein described with reference to any one of the embodiments of the invention illustrated in the accompanying drawings and/or examples.

22. A business method for providing data insurance, comprising: creating an agreement between a first entity and a second entity to provide a data protection service to a third entity, wherein the first entity arranges for a data protection service to be provided by the second entity for use by the third entity; creating an insurance agreement between the first entity and the third entity, wherein the insurance agreement authorizes the third entity to use the data protection service provided by the second entity; and following a loss of data by the third entity, providing services from the second entity in an attempt to restore the third entity's data, and providing compensation from the first entity to the second entity for the third entity's services.

23. A method for providing data insurance, comprising: creating an agreement between a first entity and a second entity to provide an electronic data protection service to a third entity, wherein the first entity arranges for a data protection service to be provided by the second entity for use by the third entity; creating an insurance agreement between the first entity and the third entity, wherein the insurance agreement authorizes the third entity to use the electronic data protection service provided by the second entity; and following a loss of electronic data stored on a first physical storage medium, attempting to deliver to the third entity a second physical storage medium with a restored version of the data stored on the second physical storage medium. - 25

24. A loss mitigation tool for protecting an insured entity against data loss, the loss mitigation tool comprising: an insurance agreement between an insurer and the insured entity, wherein the insurance agreement includes a data insurance provision under which the insured entity is allowed to use a data protection service; and a data protection agreement between the insurer and a data protection service provider to provide the data protection service from the data protection service provider to the insured entity, wherein the data protection agreement obligates the data protection service provider to attempt to restore data of the insured entity following a loss of data by the insured entity, and wherein the data protection agreement provides for compensation from the insurer to the data protection service provider for the data protection service provider's efforts to restore the insured entity's data.

25. An insurance system comprising: a data protection service provider; an insurer, wherein the insurer acquires data protection services from the data protection service provider for use by the insurer's insureds; and an insured that is insured by the insurer against losses arising out of lost data, wherein an insurance agreement between the insurer and the insured allows the insured to use the data protection services acquired by the insurer; wherein following a loss of data by the insured, the data protection service provider is obligated to attempt to restore the insured's data; and wherein the data protection service provider is compensated by the insurer for its efforts to restore the insured's data.

26. A method for providing data insurance, the method comprising: creating an insurance agreement between an insurer and an insured, wherein the insurance agreement provides that the insurer will insure the insured for losses arising out of lost data, and wherein the insurance agreement requires the insured to use a data protection service provided by a data protection service provider; creating a data protection service agreement between the insured and the data protection service provider, wherein the data protection service agreement provides that the data protection service provider will provide a data protection service to the insured; and following a loss of data by the insured, providing services from the data protection service provider in an attempt to restore the insured's data.