Cryptographic Data Splitting? What’s that?

Cloud Computing and the Process Integration Era

By G C Network | December 17, 2008

The Industry Advisory Council (IAC) is a non-profit, non-partisan organization dedicated to fostering improved communications and understanding between government and industry. through its affiliation with the American Council for Technology…

The Tactical Cloud

By G C Network | December 16, 2008

When cloud computing first came in vogue, there was a rather serious discussion about the private cloud concept. The whole idea of cloud computing seemed to argue against implementing such…

“Cloud Musings” Now on SYS-CON Media “Cloud Computing Journal” !!

By G C Network | December 15, 2008

I’m happy to announce that a recent “Cloud Musings” article, “Commercial vs Federal Cloud Computing ” has been reposted on SYS-CON Media’s “Cloud Computing Journal“. Thank you SYS-CON for making…

How to make clouds interoperable and standard !!

By G C Network | December 12, 2008

This has been a huge part of my life over the past few weeks! This is my personal view. WARNING: DON’T EXPECT THE ANSWER TO BE FOUND BELOW !!! There…

The Tension between Public and Private Clouds

By G C Network | December 11, 2008

Last week, during discussion on cloud interoperability and standards in Israel, I saw for the first time a real dichotomy in the value of public (external) and private (internal) clouds.…

Cloud Computing for Continuity of Operations (COOP)

By G C Network | December 10, 2008

Recently, I’ve been focusing on cloud computing for COOP. The way I looked at it, many government agencies are already using commercial shared facilities as COOP sites and that the…

NCOIC Plenary Session

By G C Network | December 9, 2008

Hopping a plane to the west coast today to attend the NCOIC Plenary in Costa Mesa, California. First day “Cloud Computing for Net-Centric Operations” agenda includes: David Ryan, Chief Architect…

Dataline named “Top 100 Cloud Computing Company”

By G C Network | December 9, 2008

SYS-CON’s Cloud Computing Journal included Dataline in its expanded list of the most active players in the cloud ecosystem. In adding Dataline to the “Top 100” list, Jeremy Geelan noted…

Autoscaling into the cloud- Good or Bad?

By G C Network | December 8, 2008

I always thought saw the ability to autoscale into a cloud infrastructure as a good thing. George Reese presented a differing view on the O’Reilly blog recently. “Auto-scaling is the…

Cloudera must be reading the script!

By G C Network | December 4, 2008

“Cloud computing leapt out as the most obvious way to address enterprise large data problems” – Ken Pierce, IT Specialist, DIA-DS/C4ISR “We view Hadoop as the key enabler…[in] optimizing the…

Cryptographic data splitting is a new approach to securing information. This process encrypts data and then uses random or deterministic distribution to multiple shares. this distribution can also include fault tolerant bits, key splitting, authentication, integrity, share reassembly, key restoration or decryption.

Most security schema have one or more of the following drawbacks:

  • Log-in and password access often does not provide adequate security.
  • Public-key cryptographic system reliance on the user for security.
  • Private keys stored on a hard drive that are accessible to others or through the Internet.
  • Private keys being stored on a computer system configured with an archiving or backup system that could result in copies of the private key traveling through multiple computer storage devices or other systems
  • Loss or damage to the smartcard or portable computing device in biometric cryptographic systems
  • Possibility of a malicious person stealing a mobile user’s smartcard or portable computing device using it to effectively steal the mobile user’s digital credentials.
  • The computing device connection to the Internet may provide access to the file where the biometric information is stored making it susceptible to compromise through user inattentiveness to security or malicious intruders.
  • Existence of a single physical location towards which to focus an attack.

Cryptographic data splitting has multiple advantages over current, widely used security approaches because:

  • Enhanced security from moving shares of the data to different locations on one or more data depositories or storage devices (different logical, physical or geographical locations
  • Shares of data can be split physically and under the control of different personnel reducing the possibility of compromising the data.
  • A rigorous combination of the steps is used to secure data providing a comprehensive process of maintaining security of sensitive data.
  • Data is encrypted with a secure key and split into one or more shares
  • Lack of a single physical location towards which to focus an attack

Because of these and other advantages, this approach seems to be a natural for cloud computing.

Follow me at https://Twitter.com/Kevin_Jackson

G C Network

3 Comments

  1. Platypus on December 26, 2008 at 6:35 pm

    New? From the description you give, this sounds a lot like Adi Shamir’s secret sharing from 1979. Maybe you need to be more specific about what the novel part is.



  2. Kevin Jackson on December 26, 2008 at 6:43 pm

    This approach is an advancement to the state-of-the-art. Shamir’s work is referenced in the patent filing. See http://www.freepatentsonline.com/7391865.html



  3. Platypus on December 27, 2008 at 3:38 am

    The thing that matters about a patent is the claims, not the description. Most of the claims don’t even come close to passing the non-obviousness test, as they precisely recapitulate techniques that have been known for over twenty years. Anyone involved with OceanStore, Permabit, Cleversafe, or Allmydata (for example) could show enough prior art to make your head spin. What was the examiner thinking? Maybe this stuff is new to someone, but it’s not new to the industry.