Secure data storage

Abstract

Methods and systems for obscuring the location of critical system files are provided. In particular, the locations of files stored within a file system are selected by applying various inputs to a hash algorithm. For system files, the inputs applied to the hash algorithm can include a user name and password. For data files, the information provided to the hash algorithm can include the file name. In addition to providing random file locations, a file system in accordance with embodiments of the present invention can homogenize other information, including file names, sizes and creation dates.

What is claimed is: 
     
         1 . A method for storing files, comprising:
 receiving by a first client application at least a first identifier;   providing the first identifier to a hash algorithm, wherein the hash algorithm produces a first output;   using the first output to determine a first file system location;   storing a first file in data storage at the first file system location.   
     
     
         2 . The method of  claim 1 , wherein the first file stored in the data storage at the first file system location is a first index file. 
     
     
         3 . The method of  claim 2 , further comprising:
 receiving by the first client application a second identifier, wherein the first identifier and the second identifier are provided to the hash algorithm to produce the first output.   
     
     
         4 . The method of  claim 3 , further comprising:
 assigning a first filename to a first data file;   providing the first file name as a third identifier to the hash algorithm, wherein the hash algorithm produces a second output;   using the second output to determine a second file system location;   storing the first data file in the data storage at the second file system location;   storing the second file system location in the first index file.   
     
     
         5 . The method of  claim 4 , further comprising:
 receiving at the first client application a request to access the first data file;   prompting by the first client application entry by a user of at least one of the first and second identifiers;   receiving by the client application the first and second identifiers, wherein the first and second identifiers are provided to the hash algorithm to reproduce the first output and to determine the first file system location;   accessing the first index file stored in the data storage at the first file system location and retrieving from the first index file the second file system location.   
     
     
         6 . The method of  claim 3 , wherein the first identifier is a user name and wherein the second identifier is a password. 
     
     
         7 . The method of  claim 3 , further comprising:
 a first salt, wherein the first salt is input to the hash algorithm with the first identifier and the second identifier to produce the first output that is used to determine the first file system location.   
     
     
         8 . The method of  claim 7 , further comprising:
 a second salt, wherein the second salt is input to the hash algorithm with a first filename, wherein the hash algorithm produces a second output;   using the second output to determine a second file system location.   
     
     
         9 . The method of  claim 7 , further comprising:
 a second salt, wherein the second salt is input to the hash algorithm with the first identifier and the second identifier, wherein the hash algorithm produces a second output;   using the second output to determine a second file system location;   storing a second file in data storage at the second file system location.   
     
     
         10 . The method of  claim 9 , wherein the second file is a key store. 
     
     
         11 . The method of  claim 3 , further comprising:
 receiving by the first client application a third identifier;   providing the first identifier and the third identifier to the hash algorithm to produce a second output;   using the second output to determine a second file system location.   
     
     
         12 . The method of  claim 3 , further comprising:
 receiving by the first client application a third identifier;   providing the first identifier and the third identifier to the hash algorithm to produce a second output;   using the second output to determine a second file system location;   accessing an executable file stored on the data storage at the second file system location;   executing the executable file.   
     
     
         13 . The method of  claim 1 , further comprising:
 providing at least a second identifier to the hash algorithm, wherein the hash algorithm produces a second output;   using the second output to determine a second file system location;   storing a second file in the second file system location.   
     
     
         14 . The method of  claim 13 , wherein the first file stored in the first file system location is a first index file associated with a first data set, and wherein the second file stored in the second file system location is a second index file associated with a second data set. 
     
     
         15 . The method of  claim 4 , further comprising:
 assigning a second filename to a second data file, wherein the first filename has a first character length, and wherein the second filename has the first character length;   determining a size of the first data file, wherein in response to the size of the first data file having less than a first predetermined size the first data file is padded to have a first normalized size, and wherein the padded first data file is stored;   providing the second file name as a fourth identifier to the hash algorithm, wherein the hash algorithm produces a third output;   using the third output to determine a third file system location; storing the second data file in the data storage at the third file system location; storing the third file system location in the first index file.   
     
     
         16 . A method for storing files, comprising:
 providing data storage;   providing a processor;   providing a client application that is executable by the processor, wherein the client application includes a file system module;   prompting a user for a password;   receiving a first password at the client application;   providing at least the received first password and a first salt as a first input to a hash algorithm;   in response to the first input, generating by the hash algorithm a first output;   transforming the first output to a first file system location;   storing a first index file at the first file system location in the data storage;   providing at least the received first password and a second salt as a second input to the hash algorithm;   in response to the second input, generating by the hash algorithm a second output;   transforming the second output to a second file system location;   storing a first key store file at the second file system location in the data storage.   
     
     
         17 . The method of  claim 16 , further comprising:
 receiving a first data file, wherein the first data file is associated with a first name;   providing at least the first name and a second salt as a third input to the hash algorithm;   in response to the third input, generating by the hash algorithm a third output;   transforming the third output to a third file system location;   storing the first data file at the third file system location;   storing a record of the third file system location in the first index file;   placing a key associated with the first data file in the first key store.   
     
     
         18 . The method of  claim 17 , further comprising:
 receiving a second password at the client application;   providing at least the received second password and a first salt as a fourth input to the hash algorithm;   in response to the fourth input, generating by the hash algorithm a fourth output;   transforming the fourth output to a fourth file system location;   storing a second index file at the fourth file system location in the data storage.   
     
     
         19 . A system, comprising:
 data storage;   a client application, wherein the client application is stored in the data storage, and wherein the client application includes a hash algorithm;   a user input, wherein in response to receiving at least a first input at the user input the client application is operable to generate a first value using the hash algorithm, wherein the first value is used to determine a first location in the data storage for storing a system index file, wherein the system index file is stored at the first location in the data storage, and wherein a record of the first location is not stored in data storage.   
     
     
         20 . The system of  claim 19 , wherein in response to the client application receiving a request to store a data file in the data storage the client application is operable to generate a second value using the name of the data file as an input to the hash algorithm, wherein the second value is used to determine a second location in the data storage for storing the data file, wherein the data file is placed in the data storage at the second location, and wherein the second location is stored in the system index file.