Patent ID: 8671279

Claim:
A method of performing a secure full backup of user settings and data, comprising: determining a set of objects to be backed up; creating a manifest including a master encryption key (MEK); encrypting, using an object encryption key (OEK), each object to be backed up, to form encrypted data; forming a data stream for each object to be backed up to be sent to a host data processing system; creating an object map for each object to be backed up, wherein creating the object map comprises: computing a path hash of the object to be backed up, computing a contents hash of the data stream for the object, and mapping the path hash to the contents hash for the object to be backed up; updating the manifest with the object map; sending the data stream for each object to be backed up to the host data processing system, wherein the host data processing system is configured to save the data stream under the object's respective path hash; signing the manifest with a digital signature for authentication; and sending the manifest to the host data processing system, wherein the host data processing system saves the signed manifest.