JP2003067253A - Method of securely storing data on network - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a method of securely storing data on a network in which the data can be securely stored by transmitting and storing the data with distribution among storage areas using storage-area rental services in internet providers and rental servers on the network, or storage devices of computers evenly connected to the Internet. SOLUTION: A user keeps a plurality of storage areas using the storage-area rental service in internet providers and/or rental servers on the network. The method of securely storing data includes establishing a procedure necessary for accessing each storage area, designating data to be stored using a predetermined software, encrypting and dividing the data by the software, adding redundant data necessary for decryption, and transmitting and storing the data to the distributed registered storage areas, where checking data is added for checking the validity of data.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method of storing data on a secure network for ensuring the secure storage of data on a communication network such as a computer network.

[0002]

2. Description of the Related Art Conventionally, as means for safely storing data used on a communication network such as a computer network, data can be stored using a communication network as shown in FIG. When storing data using the Internet like
It is common to store data with high confidentiality, that is, to store the data in a place with a barrier that cannot be easily accessed by external things such as a firewall, or to store the data encrypted.

[0003]

However, if the firewall or the like is not always updated to the latest version, it may be broken in a short period of time, and once it is broken, the stored data easily leaks. There was a problem of being lost. In addition, when data is encrypted and stored, unless it is highly encrypted data, it may be broken in a short time, and once it is broken, the stored data easily leaks. There was a problem. As described above, the reality is that it has not been possible to provide an extremely safe data storage method in the past.

The inventors of the present invention have noticed that various data stored in a RAID device or the like have been conventionally stored in a distributed manner to improve safety and store the data on a communication network. As a result of earnest research on whether such a safe storage method can be provided, the present invention has been achieved. That is, the present invention utilizes a storage area lending service on a network such as an internet provider or a rental server, or a storage device of a computer equivalently connected on the internet, and transmits data by distributing the storage area. It is intended to provide a method for storing data on a secure network, which enables data to be stored safely.

[0005]

That is, the method for storing data on a secure network according to the present invention is a storage area lending service on a network such as an internet provider or a rental server, or equivalently connected on the internet. In the storage device of the computer, the user secures multiple storage areas, sets the procedure necessary for accessing each storage area, specifies the data to be stored using predetermined software, and the software Inspection data that encrypts and divides data, adds redundant data necessary for restoration, distributes it to registered storage areas, transmits and saves it, and at that time can check the validity of the data When adding the data and restoring the saved data, each record registered by the above software is It reads data from the area, combined, is characterized in that so as to decrypt.

According to the method for storing data on a secure network of the present invention, when data is restored, the validity of the data is checked by using the check data capable of checking the validity of the data, and the data is checked for error. In some cases, it is also characterized in that the data is restored by using the redundant data given in advance.

The method for storing data on a secure network according to the present invention is also characterized in that the predetermined software is selected from dedicated software or a plug-in.

According to the method for storing data on a secure network of the present invention, a storage area lending service on the network such as an internet provider or a rental server, or other appropriate system having a storage area is used, Since the data is transmitted and stored by being dispersed in the storage area, it is possible to store the data safely, reliably, and at low cost. Also, the stored data can be restored by reading the data from the respective storage areas registered by the software, combining them, decrypting the code, and checking the validity of the data using the above-mentioned inspection data. , Now easy and reliable.

[0009]

BEST MODE FOR CARRYING OUT THE INVENTION An embodiment of a method for storing data on a secure network according to the present invention will be described in detail below with reference to the drawings. FIG. 1 is a block diagram showing an example of the Internet for realizing a data storage method on a secure network of the present invention, and FIG. 2 is one implementation of a data storage method on a secure network of the present invention. FIG. 3 is a block diagram showing an example, FIG. 3 is a flow chart therefor, FIG. 4 is a block diagram illustrating a data dividing method, and FIG. 5 is a block diagram illustrating yet another data dividing method. In FIG. 1, 11 is a network of a first provider, 12 is a network of a second provider, 13
Is a network of a first company, 14 is a network of a second company, 15 is a network of a university, and the networks are connected by a communication network 16. Then, the user 17 can connect to the network of the Internet by connecting to the networks 11 and 12 of the provider via the provider.

In the present invention, as shown in FIGS. 2 and 3, first, the networks 11 and 12 of the above-mentioned provider.
The user reserves a plurality of storage areas 19 for each provider or a storage area lending service on the network such as the rental server 18 connected to the Internet network. <Storage Area> This storage area 19 is a rental server 18 connected to each provider in the provider's networks 11 and 12 or the Internet network.
It is possible to provide not only the storage area lending service on the network, etc., but also appropriate systems including other storage areas. Then, the procedure required to access each storage area 19 is set, and predetermined software (dedicated software or plug-in) necessary for that is developed or determined. <Software> Next, data to be stored is designated by using predetermined software. The software encrypts and divides the instructed data, adds redundant data required for restoration, and distributes and stores the data in a plurality of registered storage areas 19. At that time, inspection data that can inspect the validity of the data is added. <Data> The type of data to which the present invention can be applied does not matter as long as the data is confidential. For example, it may be member data of various systems, data of a paid database service, or software that is used after being downloaded for a fee. <Encryption> Various types of encryption software can be used for data encryption. Such encryption software may be commercially available software or independently developed encryption software. <Division> Various data division software can be used for data division. Such data division software may be commercially available software or independently developed data division software. The simplest example of the division method is shown in FIG. First, by encrypting the original data, each byte data is distributed to the A area and the B area. Then, the data obtained by taking the exclusive OR (XбR) of the data in the area A and the area B is created. A∩B = parity B∩parity = A A∩parity = B Then, each data A, B, and parity is transferred to a server or ISP.
(Internet service provider), other IP
It is stored in a storage area existing in a device or the like that can communicate by (Internet protocol). Of course, each server and I
A client PC and a dial-up PC are connected to the SP. In the above division method, even if either the data A or the data B is destroyed, the loss of the data can be repaired by using the remaining data A or the data B and the parity. In this case, the amount of data is 1.5 times. Of course, the following effects are provided. a) Even if any of the data leaks on the network, the leaked data cannot be decrypted by itself. b) The divided data can be easily reconstructed. That is, FIG. 5 shows an example of a division method in which parity-data B = data A is divided into three parts and doubled to create a parity. First, by encrypting the original data, each byte data is distributed to the A area, the B area, and the C area. Furthermore, A'area, B'area, and C'area are created and duplicated, and A area and B area
Data is created by taking the exclusive OR (XбR) of the data in the areas C and C. A∩B∩C = parity B∩C∩parity = A C∩A∩parity = B A∩B∩parity = C and each data A, B, C, A ′, B ′, C ′, parity, server , ISP (Internet Service Provider), other IP (Internet Protocol) communication device such as existing in the storage area,
The client PC or dial-up PC is connected to each server or ISP as described above. In the above division method, even if any of the data A or the data B or the data C is destroyed, the remaining data A or the data B, the data C, the data A ′, or the data B is lost up to the loss of the two data. ', Data C', and parity can be used for restoration. In this case, the amount of data is 2.3.
Doubled. <Redundant data> Data redundancy can be performed using various data redundancy software. Such data redundancy software may be commercially available software or independently developed data redundancy software. <Inspection data> The inspection data can be added by using various inspection software. Such inspection software may be commercially available software or independently developed inspection software.

When restoring the stored data,
A plurality of storage areas 19 registered by the above software
Read data from each, combine, and decrypt. By such an operation, the combining and restoring of data is completed. At that time, the validity of the data is checked using the data validity checking data added at the time of storage.

Even if there is an error in the restored data, the data can be restored using the redundant data given in advance. That is, the data can be restored using the redundant data.

Although the method for storing data on the secure network according to the present invention has been described with reference to the above-described embodiment, various modifications and changes are possible, and such modifications and changes are not possible. A person skilled in the art can make appropriate modifications without departing from the spirit of the present invention described in the claims.

[0014]

According to the method of storing data on a secure network of the present invention, an internet provider,
Since the storage area lending service on the network such as the rental server is used and the data is transmitted and stored by being distributed in the storage area, it is possible to store the data safely and surely. Further, it becomes possible to easily and surely restore the stored data by reading the data from the respective storage areas registered by the software, combining the data, and releasing the encryption.

[Brief description of drawings]

FIG. 1 is a block diagram showing an example of the Internet for realizing a method for storing data on a secure network according to the present invention.

FIG. 2 is a block diagram showing an embodiment of a method of storing data on a secure network according to the present invention.

FIG. 3 is a flowchart for that purpose.

FIG. 4 is a block diagram illustrating a data division method.

FIG. 5 is a block diagram illustrating still another data division method.

FIG. 6 is a diagram illustrating a means for securely storing data used on a communication network such as a computer network, and illustrating a case of storing data using the communication network.

FIG. 7 is a diagram illustrating a case where data is stored using the Internet.

[Explanation of symbols]

11 First Provider Network 12 Second Provider Network 13 First corporate network 14 Second corporate network 15 University network 16 Communication network 17 users 18 Rental Server 19 storage areas

─────────────────────────────────────────────────── ─── Continued Front Page (51) Int.Cl. ⁷ Identification Code FI Theme Coat (Reference) G06F 15/00 330 G06F 15/00 330A

Claims (3)

[Claims] 1. In a storage area lending service on a network such as an internet provider or a rental server, a user secures a plurality of storage areas and sets a procedure necessary for accessing each storage area, and a predetermined software is set. Specify the data you want to store using software, encrypt and divide the data by the software, add redundant data necessary for restoration, distribute it to the registered storage area, transmit, save, At that time, when adding the inspection data that can inspect the validity of the data, and when restoring the saved data, read the data from each storage area registered by the above software,
A method of storing data on a secure network, which is characterized by being combined and decrypted. 2. The method for storing data according to claim 1, wherein when the data is restored, the validity of the data is checked by using check data capable of checking the validity of the data, and the data is checked for error. In some cases, a method of storing data on a secure network is characterized in that the data is restored using redundant data given in advance. 3. The data storage method according to claim 1, wherein the predetermined software is selected from dedicated software, a plug-in or the like, and the data is stored on a secure network.