Secure data parser method and system

Patent metadata

Field	Value
Publication number	US-11068609-B2
Application number	US-201916658506-A
Country	US
Kind code	B2
Filing date	Oct 21, 2019
Priority date	Nov 18, 2005
Publication date	Jul 20, 2021
Grant date	Jul 20, 2021

Abstract

A secure data parser is provided that may be integrated into any suitable system for securely storing and communicating data. The secure data parser parses data and then splits the data into multiple portions that are stored or communicated distinctly. Encryption of the original data, the portions of data, or both may be employed for additional security. The secure data parser may be used to protect data in motion by splitting original data into portions of data, that may be communicated using multiple communications paths.

First claim

What is claimed is:

1. A method for securing data, the method comprising:
executing code by a processor to perform:
receiving a first key from a storage system;
generating a plurality of data chunks based on a data set, wherein each data chunk of the plurality of data chunks comprises less than an entirety of data of the data set, and wherein the data set can be reconstructed using at least a minimum number of the plurality of chunks;
encrypting each respective data chunk of the plurality of data chunks with a respective second key, wherein each of the respective second keys are distinct from each other;
performing a cryptographic operation based on the first key to further secure the plurality of data chunks; and
storing, in a memory coupled to the processor, at least one data chunk of the plurality of data chunks with data indicative of at least one of the distinct encryption keys on at least one storage device.

2. The method of claim 1 , further executing the code by the processor to perform: storing with each data chunk of the plurality of data chunks data indicative of at least one of the distinct encryption keys.

3. The method of claim 1 , further executing the code by the processor to perform: storing with each data chunk of the plurality of data chunks data indicative of a distinct encryption key used to encrypt that data chunk.

4. The method of claim 1 , wherein generating the plurality of data chunks comprises using a random technique or pseudorandom technique.

5. The method of claim 1 , wherein generating the plurality of chunk comprises a substantially random distribution of a subset of the data set.

6. The method of claim 1 , wherein generating the plurality of data chunks comprises:
generating a split encryption key based on the external key; and
distributing the data set based on the split encryption key.

7. The method of claim 1 , further executing the code by the processor to perform: encrypting each of the chunks of the plurality of chunks with the external key.

8. The method of claim 7 , wherein the data set is recoverable using at least a minimum number of the plurality of data chunks and the external key.

9. The method of claim 1 , wherein the external key is an AES key.

10. The method of claim 1 , wherein the external key is an DES key.

Assignees

• Security First Corp

Inventors

• O'Hare Mark S
• Orsini Rick L
• Davenport Roger S
• Winick Steven

Classifications

• H04L9/3231 Primary

  Biological data, e.g. fingerprint, voice or retina (network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861) · CPC title

• H04L9/3247

  involving digital signatures · CPC title

• H04L9/085

  Secret sharing or secret splitting, e.g. threshold schemes · CPC title

• H04L2209/80

  Wireless · CPC title

• H04L2209/56

  Financial cryptography, e.g. electronic payment or e-cash · CPC title