| CPC H04L 63/0428 (2013.01) [G06F 16/22 (2019.01); G06F 21/602 (2013.01); G06F 21/606 (2013.01); G06F 21/62 (2013.01); G06F 21/6218 (2013.01); H04L 9/085 (2013.01); H04L 9/3226 (2013.01); H04L 9/3263 (2013.01); H04L 63/04 (2013.01); H04L 63/08 (2013.01); H04L 63/0823 (2013.01); H04L 63/0876 (2013.01); H04L 67/108 (2013.01); H04L 69/14 (2013.01); G06F 11/1092 (2013.01); H04L 2209/80 (2013.01)] | 14 Claims |

|
1. A method for use in a secure data storage network, the method comprising:
defining a user group capable of accessing data stored in the secure data storage network, the user group including a plurality of users desiring access to a common set of data;
receiving a workgroup key from a remote key server;
associating the user group with the workgroup key, wherein the common set of data is secured using the workgroup key;
determining that a user of the secure data storage network is one of the plurality of users of the user group;
in response to determining, presenting a virtual disk to a client device of the user, wherein the virtual disk comprises a directory mapped to a plurality of physical storage devices such that physical locations of a plurality of shares stored on the plurality of physical storage devices are hidden from the client device, wherein the plurality of shares are generated by performing a cryptographic operation on data from the common set of data and distributing to the plurality of shares; and
after presenting the virtual disk, presenting the data distributed to the plurality of shares to the client device.
|