Cryptographic Data Splitting? What’s that?

Cloud Computing as a Strategic Asset

By G C Network | April 30, 2009

For some reason, this week seems to have more in it than most. While the steady stream of briefing request seem to be increasing, the post briefing discussions also seem…

Vivek Kundra: “Engage the American People in their Daily Digital Lives”

By G C Network | April 25, 2009

Today I attended a very impressive talk by the Federal CIO, Mr. Vivek Kundra at a Northern Virginia Technology Council Public Policy event. His open and “matter of fact” approach…

McKinsey vs. Booz Allen Hamilton !

By G C Network | April 21, 2009

A community skirmish reminiscent of the recent “manifestogate” has apparently erupted around the McKinsey & Co. report “Clearing the air on cloud computing“. Booz Allen Hamilton Principals Mike Cameron and…

Oracle Buys Sun!!

By G C Network | April 20, 2009

Swooping in from nowhere, Oracle buys Sun for $7.4B!! “This morning, the companies announced that they’d struck a deal worth $7.4 billion or $5.6 billion net of Sun’s cash and…

Aneesh Chopra Nominated For Federal CTO

By G C Network | April 20, 2009

Although Aneesh Chopra is a new name for most, he is well know in Virginia as Governor Tim Kaine’s Secretary of Technology. For the Commonwealth, he was charged with leading…

Could Cloud Computing Cost More?

By G C Network | April 16, 2009

In a recent conference, analyst William Forrest says that large companies could end up paying more than twice as much by using cloud based services. According to a Forbes.com report,…

Cisco’s Cloud Computing Strategy

By G C Network | April 10, 2009

A couple of weeks ago, Krishna Sankar provided a glimpse into Cisco’s cloud computing strategy in a presentation titled “A Hitchhiker’s Guide to the Inter-Cloud” . The presentation outlined the…

NCOIC and Cloud Computing: An Update

By G C Network | April 8, 2009

As the NCOIC gets it’s arms around this new paradigm, the Cloud Computing Working Group has focused on establishing a roadmap for providing value to the industry. Using the established…

SUN-IBM Talks Breakdown

By G C Network | April 6, 2009

As reported in multiple sources today, including Reuters, Sun has apparently rejected a purchase offer by IBM. “Shares of Sun Microsystems Inc tumbled 22.5 percent after it rejected a $7…

Former DoT CIO on Cloud Computing

By G C Network | April 3, 2009

Last month, former Transportation Department CIO Dan Mintz offered his views on cloud computing to Eric Chabrow, Managing Editor of Government Information Security. According to Mr. Mintz, there is currently…

Cryptographic data splitting is a new approach to securing information. This process encrypts data and then uses random or deterministic distribution to multiple shares. this distribution can also include fault tolerant bits, key splitting, authentication, integrity, share reassembly, key restoration or decryption.

Most security schema have one or more of the following drawbacks:

  • Log-in and password access often does not provide adequate security.
  • Public-key cryptographic system reliance on the user for security.
  • Private keys stored on a hard drive that are accessible to others or through the Internet.
  • Private keys being stored on a computer system configured with an archiving or backup system that could result in copies of the private key traveling through multiple computer storage devices or other systems
  • Loss or damage to the smartcard or portable computing device in biometric cryptographic systems
  • Possibility of a malicious person stealing a mobile user’s smartcard or portable computing device using it to effectively steal the mobile user’s digital credentials.
  • The computing device connection to the Internet may provide access to the file where the biometric information is stored making it susceptible to compromise through user inattentiveness to security or malicious intruders.
  • Existence of a single physical location towards which to focus an attack.

Cryptographic data splitting has multiple advantages over current, widely used security approaches because:

  • Enhanced security from moving shares of the data to different locations on one or more data depositories or storage devices (different logical, physical or geographical locations
  • Shares of data can be split physically and under the control of different personnel reducing the possibility of compromising the data.
  • A rigorous combination of the steps is used to secure data providing a comprehensive process of maintaining security of sensitive data.
  • Data is encrypted with a secure key and split into one or more shares
  • Lack of a single physical location towards which to focus an attack

Because of these and other advantages, this approach seems to be a natural for cloud computing.

Follow me at https://Twitter.com/Kevin_Jackson

G C Network

3 Comments

  1. Platypus on December 26, 2008 at 6:35 pm

    New? From the description you give, this sounds a lot like Adi Shamir’s secret sharing from 1979. Maybe you need to be more specific about what the novel part is.



  2. Kevin Jackson on December 26, 2008 at 6:43 pm

    This approach is an advancement to the state-of-the-art. Shamir’s work is referenced in the patent filing. See http://www.freepatentsonline.com/7391865.html



  3. Platypus on December 27, 2008 at 3:38 am

    The thing that matters about a patent is the claims, not the description. Most of the claims don’t even come close to passing the non-obviousness test, as they precisely recapitulate techniques that have been known for over twenty years. Anyone involved with OceanStore, Permabit, Cleversafe, or Allmydata (for example) could show enough prior art to make your head spin. What was the examiner thinking? Maybe this stuff is new to someone, but it’s not new to the industry.