Secure data parser method and system

Patent metadata

Field	Value
Publication number	US-10108807-B2
Application number	US-201414546887-A
Country	US
Kind code	B2
Filing date	Nov 18, 2014
Priority date	Nov 18, 2005
Publication date	Oct 23, 2018
Grant date	Oct 23, 2018

Abstract

A secure data parser is provided that may be integrated into any suitable system for securely storing and communicating data. The secure data parser parses data and then splits the data into multiple portions that are stored or communicated distinctly. Encryption of the original data, the portions of data, or both may be employed for additional security. The secure data parser may be used to protect data in motion by splitting original data into portions of data, that may be communicated using multiple communications paths.

First claim

What is claimed is:

1. A method for securing data using a portable device, the method comprising:
generating a plurality of portions of data from a dataset based at least in part on a key, each of the plurality of portions comprising less than all data of the dataset, wherein the key and at least two of the portions of data are sufficient to reconstruct the dataset;
storing at least one of the generated data portions at one or more storage devices;
storing the key on a portable device, wherein the portable device is different from the one or more storage devices; and
storing at least one of the generated data portions on the portable device.

2. The method of claim 1 , wherein the portable device is a removable storage device.

3. The method of claim 2 , wherein the removable storage device couples to an end user device via a Universal Serial Bus (USB) interface.

4. The method of claim 1 , wherein the key is one of an encryption key, a split key, and an authentication key.

5. The method of claim 4 , wherein the key is a split key, and wherein the method further comprises encrypting the generated data portions with one or more encryption keys.

6. The method of claim 4 , wherein generating a plurality of portions of data comprises substantially randomly distributing the dataset into the plurality of portions of data.

7. The method of claim 1 , wherein the plurality of portions of data are generated using a split algorithm and a split key associated with the split algorithm.

8. A method for securing data using a portable device, the method comprising:
generating a plurality of portions of data from a dataset based at least in part on a key, each of the plurality of portions comprising less than all data of the dataset, wherein the key and at least two portions of data are sufficient to reconstruct the dataset;
storing the key at one or more storage devices;
storing at least one of the generated data portions on a portable device, wherein the portable device is different from the one or more storage devices; and
storing at least one of the generated data portions on the one or more storage devices.

9. The method of claim 8 , wherein storing the key at one or more storage devices comprises splitting the key into at least two parts and storing the at least two parts of the key at the one or more storage devices.

10. The method of claim 8 , wherein the portable device is a removable storage device.

11. The method of claim 10 , wherein the removable storage device couples to an end user device via a Universal Serial Bus (USB) interface.

12. The method of claim 8 , wherein the key is one of an encryption key, a split key and an authentication key.

13. The method of claim 12 , wherein the key is a split key, and wherein the method further comprises encrypting the generated data portions with one or more encryption keys.

14. The method of claim 12 , wherein generating a plurality of portions of data comprises substantially randomly distributing the dataset into the plurality of portions of data.

15. The method of claim 8 , wherein the plurality of portions of data are generated using a split algorithm and a split key associated with the split algorithm.

16. A system for securing data using a portable device, the system comprising:
at least one non-transitory computer readable medium storing computer executable instructions; and
computer processor communicatively coupled to the at least one non-transitory computer readable medium and operable to execute the computer-readable instructions stored thereon, the computer processor configured to:
generate a plurality of portions of data from a dataset based at least in part on a key, each of the plurality of portions comprising less than all data of the dataset, wherein the key and at least two of the portions of data are sufficient to reconstruct the dataset;
store at least one of the generated data portions at one or more storage devices;
store the key on a portable device, wherein the portable device is different from the one or more storage devices; and
store at least one of the generated data portions on the portable device.

17. The system of claim 16 , wherein the portable device is a removable storage device.

18. The system of claim 17 , wherein the removable storage device couples to an end user device via a Universal Serial Bus (USB) interface.

19. The system of claim 16 , wherein the key is one of an encryption key, a split key, and an authentication key.

20. The system of claim 19 , wherein the key is a split key, and wherein the computer processor is further configured to encrypt the generated data portions with one or more encryption keys.

21. The system of claim 19 , wherein the computer processor is configured to generate a plurality of portions of data by substantially randomly distributing the dataset into the plurality of portions of data.

22. The system of claim 16 , wherein the at least two portions of data are generated using a split algorithm and a split key associated with the split algorithm.

23. A system for securing data using a portable device, the system comprising:
at least one non-transitory computer readable medium storing computer executable instructions; and
computer processor communicatively coupled to the at least one non-transitory computer readable medium, the computer processor configured to:
generate a plurality of portions of data from a dataset based at least in part on a key, each of the plurality of portions comprising less than all data of the dataset, wherein the key and at least two portions of data are sufficient to reconstruct the dataset;
store the key at one or more storage devices;
store at least one of the generated data portions on a portable device, wherein the portable device is different from the one or more storage devices; and
store at least one of the generated data portions on the one or more storage devices.

24. The system of claim 23 , wherein the computer processor is configured to store the key at one or more storage devices comprises by splitting the key into at least two parts and storing the at least two parts of the key at the one or more storage devices.

25. The system of claim 23 , wherein the portable device is a removable storage device.

26. The system of claim 25 , wherein the removable storage device couples to an end user device via a Universal Serial Bus (USB) interface.

27. The system of claim 23 , wherein the key is one of an encryption key, a split key and an authentication key.

28. The system of claim 27 , wherein the key is a split key, and wherein the system further comprises encrypting the generated data portions with one or more encryption keys.

29. The system of claim 27 , wherein the computer processor is configured to generate the plurality of portions of data by substantially randomly distributing the dataset into the plurality of portions of data.

30. The system of claim 23 , wherein the at least two portions of data are generated using a split algorithm and a split key associated with the split algorithm.

Assignees

• Security First Corp

Inventors

• O'Hare Mark S
• Orsini Rick L
• Davenport Roger S
• Winick Steven

Classifications

• H04L9/3247

  involving digital signatures · CPC title

• H04L9/085

  Secret sharing or secret splitting, e.g. threshold schemes · CPC title

• H04L9/3231 Primary

  Biological data, e.g. fingerprint, voice or retina (network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861) · CPC title

• H04L63/0428 Primary

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04L2209/56

  Financial cryptography, e.g. electronic payment or e-cash · CPC title