Secure data transfer over wireless networks using data storage encryptors

Abstract

Systems, methods, and apparatus related to transferring encrypted data over a wireless network. In one approach, an encryptor includes a host interface configured to transmit data and commands with a local computing device, a wireless communication interface configured to transmit data and commands over a radio access network, a storage interface configured to interface a local storage medium to store data, and at least one processing device configured to perform operations comprising: encrypting first data from the local computing device to be written into the local storage medium upon receiving a first command from the local computing device; decrypting the encrypted first data from the local storage medium to be read by the local computing device upon receiving a second command from the local computing device; and transmitting the encrypted first data through the wireless communication interface to the radio access network upon receiving a third command.

1 - 20 . (canceled) 
     
     
         21 . An apparatus comprising:
 a local communication interface configured to transmit data and commands with a local computing device;   a wireless communication interface configured to transmit data and commands over a wireless network;   a storage interface configured to interface a local storage medium to store data; and   at least one processing device configured to perform operations comprising:   receiving a write command from the local computing device;   in response to receiving the write command, encrypting, using a first key, first data from the local computing device and writing the encrypted first data into the local storage medium;   receiving a read command from the local computing device;   in response to receiving the read command, decrypting, using the first key, the encrypted first data from the local storage medium and providing the decrypted data to the local computing device;   receiving a transfer command from the local computing device regarding a request for transfer of data; and   in response to receiving the transfer command, retrieving the requested data from the local storage medium and transmitting the requested data through the wireless communication interface to the wireless network.   
     
     
         22 . The apparatus of  claim 21 , wherein:
 the at least one processing device is configured to transmit the requested data based at least in part on successfully authenticating a second processing device; and   transmitting the requested data to the wireless network comprises transmitting the requested data to the second processing device via the wireless network.   
     
     
         23 . The apparatus of  claim 21 , wherein the local communication interface is a local area network interface. 
     
     
         24 . The apparatus of  claim 21 , wherein the wireless communication interface is a 5G cellular network modem. 
     
     
         25 . The apparatus of  claim 21 , wherein the local storage medium is a flash memory device. 
     
     
         26 . A system for securely transferring data wirelessly between a first computing device and a second computing device, the system comprising:
 a first encryptor including:   
       a first local communication interface configured to receive read commands, write commands, and data for encryption from the first computing device, 
       a first wireless communication interface configured to receive transfer commands to transmit encrypted data, and 
       a first storage interface configured to interface a first storage medium to store encrypted data; and
 a second encryptor including: 
 
       a second local communication interface configured to transmit data and commands with the second computing device, and 
       a second wireless communication interface configured to receive encrypted data. 
     
     
         27 . The system of  claim 26 , wherein:
 the first encryptor is directly coupled to the first computing device and the first storage medium; and   the second encryptor is directly coupled to the second computing device and the second storage medium.   
     
     
         28 . The system of  claim 26 , wherein both the first and second encryptors are configured to receive a first key before the first encryptor is coupled to the first computing device and the second encryptor is coupled to the second computing device. 
     
     
         29 . The system of  claim 26 , wherein a processing device of the first encryptor is configured to implement a zero-trust platform. 
     
     
         30 . The system of  claim 26 , wherein the first encryptor is configured to authenticate the first storage medium prior to storing the encrypted data. 
     
     
         31 . A method comprising:
 in response to receiving a first command from a first computing device, encrypting, by a first encryptor using a first key, first data, received from the first computing device via a first local communication interface of the first encryptor, to be written into a first storage medium;   in response to receiving a second command from the first computing device, retrieving the encrypted first data from the first storage medium and decrypting, by the first encryptor using the first key, the encrypted first data from the first storage medium to be read by the first computing device; and   in response to receiving a third command from the first computing device, retrieving the encrypted first data from the first storage medium and transmitting the encrypted first data, via a first wireless communication interface of the first encryptor and through a wireless network, to a second encryptor to be stored in a second storage medium.   
     
     
         32 . The method of  claim 31 , wherein:
 the first encryptor is directly coupled to the first computing device and the first storage medium; and   the second encryptor is directly coupled to the second storage medium.   
     
     
         33 . The method of  claim 31 , wherein the first wireless communication interface transmits the encrypted first data to a remote computing device via an encryptor over the wireless network. 
     
     
         34 . The method of  claim 33 , wherein the encryptor uses the first key to encrypt and decrypt data. 
     
     
         35 . The method of  claim 33 , wherein the first key is installed in the encryptor prior to the encryptor being coupled to the first computing device. 
     
     
         36 . The method of  claim 33 , wherein a command to transmit the encrypted first data is from the remote computing device. 
     
     
         37 . The method of  claim 33 , further comprising authenticating the encryptor prior to sending the encrypted first data. 
     
     
         38 . The method of  claim 33 , further comprising authenticating the remote computing device prior to sending the encrypted first data. 
     
     
         39 . The method of  claim 31 , wherein the first computing device is configured to implement a file system, and the file system associates a filename of the encrypted first data with a directory or folder. 
     
     
         40 . The method of  claim 39 , wherein the file system implements a distributed file system protocol that allows a user of the first computing device to access files over the network from other computing devices, including a second computing device coupled to the second storage medium.