Patent ID: 11880476
Assignee: EMC IP HOLDING COMPANY LLC
Field: Digital communication (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 0:
1. A method for controlling access to data objects of an
owner stored in a datacenter, the method comprising:
storing data objects in the datacenter, wherein each of the data objects is encrypted with a corresponding fingerprint and each of the data objects is associated with a different key;
storing patches for the data objects, wherein each of the patches includes updates to the data objects, wherein each of the patches is associated with the same key used for a corresponding data object;
for a specific data object included in the data objects of the owner, generating an access code for a specific user, wherein the access code is generated by encrypting a key associated with the specific object with a key associated with the specific user and the access code is associated with the fingerprint corresponding to the specific data object;
allowing the specific user access to the specific data object and the patches associated with the specific data object when the specific user uses the access code, wherein the access code and the fingerprint allows the specific user to access the specific data object without allowing the specific user to access other data objects of the owner; and
storing a manifest in the datacenter, wherein the manifest includes an object path and access codes;
wherein in a manifest key is configured such that any client can add a new data object to the data objects in a secure manner, wherein only a user having access to a private portion of the manifest key is able to access the new data object.