Cryptographic Data Splitting? What’s that?

Lynn DeCourcey Showcased in ExecutiveBiz

By G C Network | August 9, 2012

Kudos to my colleague Lynn DeCourcey for her recent interview on  ExecutiveBiz.com! Lynn is NJVC vice president and general manager, cyber security. She oversees all aspects of the company’s cyber…

BISNOW Data Center Event Highlight’s Cloud

By G C Network | July 28, 2012

A big thank you to BISNOW and my fellow panel members for an outstanding discussion and very informative event, last week’s Data Center Investment Conference and Expo. The federal marketplace…

GSA Seeks Cloud Brokerage Information

By G C Network | July 18, 2012

GSA is using the RFI process to collect information about alternative models and/or solutions for future cloud acquisition vehicles and processes that further these goals. One emerging concept in cloud…

DoD Cloud Computing Strategy

By G C Network | July 15, 2012

The DoD recently released the department’s formal cloud computing strategy. DoD Cloud Computing Strategy View more documents from Kevin Jackson. In the forward, DoD CIO Teresa Takai said that: “The…

FedRAMP PMO Releases First Set of 3PAOs

By G C Network | May 14, 2012

Late today the FedRAMP Program Management Office released the first list of certified Third Party Assessment Organizations (3PAOs). These companies are accredited to perform initial and periodic assessment of cloud…

FedRAMP Releases Updated Security Assessment Plan Templates

By G C Network | May 8, 2012

Last week the GSA FedRAMP Program Office released the latest version of the cloud computing Security Assessment Plan (SAR) template.  This document is the most recent step toward the Federal…

NJVC® and Gravitant® Announce New Strategic Alliance: Partnership to Benefit Federal Agencies with Powerful Provision and Management of Cloud Services that Unify Multiple Providers

By G C Network | April 4, 2012

Vienna, Va., April 4, 2012 — NJVC®, one of the largest information technology solutions providers supporting the U.S. Department of Defense, and Gravitant®, a provider of cloud brokerage and management…

NJVC® VP and GM, Cloud Services, Kevin L. Jackson to Speak on Cloud Security at 2012 Emerging Threats and Cyber Defense Symposium

By G C Network | March 18, 2012

Vienna, Va., March 15, 2012 — NJVC®, one of the largest information technology solutions (IT) providers supporting the U.S. Department of Defense, is pleased to announce that Kevin L. Jackson,…

NJVC’s Kevin L. Jackson Co-Authors INSA White Paper on Cloud Computing for the Intelligence Community

By G C Network | March 13, 2012

Findings Reflect Insight from More than 50 Cloud Thought Leaders   VIENNA, Va.–(BUSINESS WIRE)–NJVC®, one of the largest information technology solutions (IT) providers supporting the U.S. Department of Defense, announces…

INSA Study on Cloud Computing in the Intelligence Community: Rollout 13 March 2012 | SYS-CON MEDIA

By G C Network | March 10, 2012

(Originally posted by Bob Gourley at CTOvision)         Over the last year I’ve had the pleasure of serving with a team of volunteers from the Intelligence and National Security Alliance…

Cryptographic data splitting is a new approach to securing information. This process encrypts data and then uses random or deterministic distribution to multiple shares. this distribution can also include fault tolerant bits, key splitting, authentication, integrity, share reassembly, key restoration or decryption.

Most security schema have one or more of the following drawbacks:

  • Log-in and password access often does not provide adequate security.
  • Public-key cryptographic system reliance on the user for security.
  • Private keys stored on a hard drive that are accessible to others or through the Internet.
  • Private keys being stored on a computer system configured with an archiving or backup system that could result in copies of the private key traveling through multiple computer storage devices or other systems
  • Loss or damage to the smartcard or portable computing device in biometric cryptographic systems
  • Possibility of a malicious person stealing a mobile user’s smartcard or portable computing device using it to effectively steal the mobile user’s digital credentials.
  • The computing device connection to the Internet may provide access to the file where the biometric information is stored making it susceptible to compromise through user inattentiveness to security or malicious intruders.
  • Existence of a single physical location towards which to focus an attack.

Cryptographic data splitting has multiple advantages over current, widely used security approaches because:

  • Enhanced security from moving shares of the data to different locations on one or more data depositories or storage devices (different logical, physical or geographical locations
  • Shares of data can be split physically and under the control of different personnel reducing the possibility of compromising the data.
  • A rigorous combination of the steps is used to secure data providing a comprehensive process of maintaining security of sensitive data.
  • Data is encrypted with a secure key and split into one or more shares
  • Lack of a single physical location towards which to focus an attack

Because of these and other advantages, this approach seems to be a natural for cloud computing.

Follow me at https://Twitter.com/Kevin_Jackson

G C Network

3 Comments

  1. Platypus on December 26, 2008 at 6:35 pm

    New? From the description you give, this sounds a lot like Adi Shamir’s secret sharing from 1979. Maybe you need to be more specific about what the novel part is.



  2. Kevin Jackson on December 26, 2008 at 6:43 pm

    This approach is an advancement to the state-of-the-art. Shamir’s work is referenced in the patent filing. See http://www.freepatentsonline.com/7391865.html



  3. Platypus on December 27, 2008 at 3:38 am

    The thing that matters about a patent is the claims, not the description. Most of the claims don’t even come close to passing the non-obviousness test, as they precisely recapitulate techniques that have been known for over twenty years. Anyone involved with OceanStore, Permabit, Cleversafe, or Allmydata (for example) could show enough prior art to make your head spin. What was the examiner thinking? Maybe this stuff is new to someone, but it’s not new to the industry.