Cryptographic Data Splitting? What’s that?

Second Government Cloud Computing Survey

By G C Network | April 1, 2009

Earlier this week I had the pleasure of presenting at the Sys-con International Cloud Computing Expo in New York City. My presentation, The View from Government Cloud Computing Customers, reviewed…

Navy NGEN and Cloud Computing

By G C Network | April 1, 2009

I spent half of today in downtown DC at the Navy Next Generation Enterprise Network (NGEN) Industry Day.  In case you’re not familiar with NGEN, this project will be the follow-on…

An Ontology for Tactical Cloud Computing

By G C Network | March 25, 2009

This week I’ve had the pleasure of presenting at two fairly unique conferences. On Tuesday I was in San Diego at the Simulation Interoperability Standards Organization (SISO) Workshop. SISO is…

Federal Cloud Computing Roadmap

By G C Network | March 24, 2009

ServerVault, a long time provider of IT hosting services to the Federal government, has been discussing cloud computing quite a bit with their current (and future) customers.  The repetitive nature…

Booz Allen Hamilton Lays Out Path To Cloud

By G C Network | March 23, 2009

Now that cloud computing is seen as a viable technology for the government marketplace, management consulting leader Booz Allen Hamilton is now providing cloud transition guidance. In his article “Cloud…

Is Sun Rising or Setting?

By G C Network | March 19, 2009

Today was strange. First Sun announces it’s open cloud computing platform. Sun Unveils Open Cloud Computing Platform “Sun on Wednesday announced plans to offer its own Open Cloud Platform, starting…

A Conversation with Emil Sayegh, Mosso General Manager

By G C Network | March 16, 2009

Last week, Mosso announced their new “Cloud Server” and “Cloud Sites” offerings. They also exited “Cloud Files” from beta, positioning themselves as a challenger to Amazon. With this as a…

Playing the Cloud Computing Wargame

By G C Network | March 12, 2009

Today at FOSE I tried my hand at balancing traditional IT, hybrid cloud offerings and commercial cloud offerings on a craps table. Just to set the scene, the Booz Allen…

Vivek Kundra Nominated for Federal CIO

By G C Network | March 10, 2009

Mr. Kundra’s quote from the Wall Street Journal says it all: “I’m a big believer in disruptive technology. If I went to the coffee shop, I would have more computing…

7th SOA for E-Government Conference

By G C Network | March 5, 2009

On April 28, 2009, Mitre will be holding its biannual SOA for E-Government Conference. This conference is one of the region’s premier opportunity for federal managers and MITRE Subject Matter…

Cryptographic data splitting is a new approach to securing information. This process encrypts data and then uses random or deterministic distribution to multiple shares. this distribution can also include fault tolerant bits, key splitting, authentication, integrity, share reassembly, key restoration or decryption.

Most security schema have one or more of the following drawbacks:

  • Log-in and password access often does not provide adequate security.
  • Public-key cryptographic system reliance on the user for security.
  • Private keys stored on a hard drive that are accessible to others or through the Internet.
  • Private keys being stored on a computer system configured with an archiving or backup system that could result in copies of the private key traveling through multiple computer storage devices or other systems
  • Loss or damage to the smartcard or portable computing device in biometric cryptographic systems
  • Possibility of a malicious person stealing a mobile user’s smartcard or portable computing device using it to effectively steal the mobile user’s digital credentials.
  • The computing device connection to the Internet may provide access to the file where the biometric information is stored making it susceptible to compromise through user inattentiveness to security or malicious intruders.
  • Existence of a single physical location towards which to focus an attack.

Cryptographic data splitting has multiple advantages over current, widely used security approaches because:

  • Enhanced security from moving shares of the data to different locations on one or more data depositories or storage devices (different logical, physical or geographical locations
  • Shares of data can be split physically and under the control of different personnel reducing the possibility of compromising the data.
  • A rigorous combination of the steps is used to secure data providing a comprehensive process of maintaining security of sensitive data.
  • Data is encrypted with a secure key and split into one or more shares
  • Lack of a single physical location towards which to focus an attack

Because of these and other advantages, this approach seems to be a natural for cloud computing.

Follow me at https://Twitter.com/Kevin_Jackson

G C Network

3 Comments

  1. Platypus on December 26, 2008 at 6:35 pm

    New? From the description you give, this sounds a lot like Adi Shamir’s secret sharing from 1979. Maybe you need to be more specific about what the novel part is.



  2. Kevin Jackson on December 26, 2008 at 6:43 pm

    This approach is an advancement to the state-of-the-art. Shamir’s work is referenced in the patent filing. See http://www.freepatentsonline.com/7391865.html



  3. Platypus on December 27, 2008 at 3:38 am

    The thing that matters about a patent is the claims, not the description. Most of the claims don’t even come close to passing the non-obviousness test, as they precisely recapitulate techniques that have been known for over twenty years. Anyone involved with OceanStore, Permabit, Cleversafe, or Allmydata (for example) could show enough prior art to make your head spin. What was the examiner thinking? Maybe this stuff is new to someone, but it’s not new to the industry.