Cryptographic Data Splitting? What’s that?

Animoto = Automated Imagery PED

By G C Network | December 3, 2008

Over the past two days, I’ve spent quite a bit of time with Stevie Clifton, Co-founder & CTO of Animoto. Besides being one of the coolest things I’ve seen in…

World Summit of Cloud Computing 2008

By G C Network | December 1, 2008

Video by Animoto using cloud computing technology. (Done in 20 minutes for free)!! Follow me at https://Twitter.com/Kevin_Jackson

2008 World Summit of Cloud Computing

By G C Network | November 30, 2008

After a uneventful trip , I’m now in Israel for the World Summit. With over 500 people expected to attend, it promises to be an exciting time. Unfortunately, I arrived…

CloudCamp Federal ’08

By G C Network | November 28, 2008

| Get your Presentation Pack Follow me at https://Twitter.com/Kevin_Jackson

NCOIC Cloud Working Group

By G C Network | November 26, 2008

The NCOIC will be holding a cloud computing working group on December 10th during plenary session in Costa Mesa, CA. The session focus will be “Requirements for Enterprise Cloud Computing”.…

IBM Rating Clouds

By G C Network | November 25, 2008

According to Cloud Computing Journal, and Red Herring, IBM will now rate other cloud providers. Using the “Resilient Cloud Validation” program, IBM will validate their facilities, applications, data, staff, processes…

Cloud Computing vs. Cloud Services

By G C Network | November 24, 2008

In September, Frank Gens provided an excellent overview of the the new “Cloud Computing Era”. In preparing for an upcoming talk, I re-read the post and found myself appreciating it…

Inaugural “Inside the Cloud” Survey

By G C Network | November 21, 2008

Appistry and CloudCamp recently released results from the first “Inside the Cloud” survey. Key takeaways were: Amazon perceived as cloud leader, with twice as many votes as Google Infrastructure providers…

FIAC Presentation Mentions Cloud Computing

By G C Network | November 20, 2008

At the recent Federal Information Assurance Conference, Bob Gourley, CTO Crucial Point LLC, and former Defense Intelligence Agency CTO, recently provided his views on the state of Federal IT. His cloud…

Sun Cloud Czar

By G C Network | November 19, 2008

Earlier this week it was announced that, Sun, Senior Vice President, Dave Douglas, was appointed to lead the Company’s cloud computing efforts. A JDJ Article also stated that, in addition to becoming Sun’s…

Cryptographic data splitting is a new approach to securing information. This process encrypts data and then uses random or deterministic distribution to multiple shares. this distribution can also include fault tolerant bits, key splitting, authentication, integrity, share reassembly, key restoration or decryption.

Most security schema have one or more of the following drawbacks:

  • Log-in and password access often does not provide adequate security.
  • Public-key cryptographic system reliance on the user for security.
  • Private keys stored on a hard drive that are accessible to others or through the Internet.
  • Private keys being stored on a computer system configured with an archiving or backup system that could result in copies of the private key traveling through multiple computer storage devices or other systems
  • Loss or damage to the smartcard or portable computing device in biometric cryptographic systems
  • Possibility of a malicious person stealing a mobile user’s smartcard or portable computing device using it to effectively steal the mobile user’s digital credentials.
  • The computing device connection to the Internet may provide access to the file where the biometric information is stored making it susceptible to compromise through user inattentiveness to security or malicious intruders.
  • Existence of a single physical location towards which to focus an attack.

Cryptographic data splitting has multiple advantages over current, widely used security approaches because:

  • Enhanced security from moving shares of the data to different locations on one or more data depositories or storage devices (different logical, physical or geographical locations
  • Shares of data can be split physically and under the control of different personnel reducing the possibility of compromising the data.
  • A rigorous combination of the steps is used to secure data providing a comprehensive process of maintaining security of sensitive data.
  • Data is encrypted with a secure key and split into one or more shares
  • Lack of a single physical location towards which to focus an attack

Because of these and other advantages, this approach seems to be a natural for cloud computing.

Follow me at https://Twitter.com/Kevin_Jackson

G C Network

3 Comments

  1. Platypus on December 26, 2008 at 6:35 pm

    New? From the description you give, this sounds a lot like Adi Shamir’s secret sharing from 1979. Maybe you need to be more specific about what the novel part is.



  2. Kevin Jackson on December 26, 2008 at 6:43 pm

    This approach is an advancement to the state-of-the-art. Shamir’s work is referenced in the patent filing. See http://www.freepatentsonline.com/7391865.html



  3. Platypus on December 27, 2008 at 3:38 am

    The thing that matters about a patent is the claims, not the description. Most of the claims don’t even come close to passing the non-obviousness test, as they precisely recapitulate techniques that have been known for over twenty years. Anyone involved with OceanStore, Permabit, Cleversafe, or Allmydata (for example) could show enough prior art to make your head spin. What was the examiner thinking? Maybe this stuff is new to someone, but it’s not new to the industry.