Cryptographic Data Splitting? What’s that?

SOA-R!! Another Hit !!

By G C Network | October 9, 2008

Yesterday’s SOA-R event coverage by TECH Bisnow Washington was yet another indication that cloud computing is real in the Federal space. Thanks goes to Mr. Dave Stegon from Bisnow on Business and Pauline Healy from Apptis.  Thanks…

World Summit of Cloud Computing, December 1-2, 2008, Wohl Centre, Ramat Gan, Israel

By G C Network | October 8, 2008

I am proud to announce that I’ve been invited to speak at the “World Summit of Cloud Computing“, December 1-2, 2008, at the Wohl Centre in Ramat Gan, Israel. As…

MIT Survey: What A Response !!

By G C Network | October 7, 2008

We’ve been quite surprised by the number of survey responses we’ve received.  THANK YOU !!  That subset of the cloud computing community interested in national security and public sector applications…

Cloud Auction Business Model

By G C Network | October 3, 2008

The other day I talked about how cloud computing could change the government’s budgeting process. Well what about this! Last week, Google filed a patent application that describes a system…

Oracle: To Cloud or Not To Cloud …

By G C Network | October 2, 2008

First Oracle’s Larry Ellison bashes cloud computing as nothing but hype and then his company announces that it will let customers run Oracle 10g and 11g databases and its Fusion…

Capacity planning in a cloud environment

By G C Network | October 1, 2008

In her post “Cloud computing killed the capacity star“, Ivanka Menken brings up some good points. Just think what changes this could bring to the government budgeting process. The trends…

Cloud Databases

By G C Network | September 30, 2008

Joab Jackson, in his “Cloud computing leaving relational databases behind” article, makes some pretty interesting points on the incompatibility of relational databases with cloud-based infrastructures. He first list the various…

The 6 layers of the Cloud Computing Stack

By G C Network | September 29, 2008

From Sam Johnston’s Taxonomy post Clients (examples) are computer hardware and/or computer software which rely on The Cloud for application delivery, or which is specifically designed for delivery of cloud…

Thank You KMI Media Group

By G C Network | September 26, 2008

In this month’s Editor’s Perspective, Mr. Harrison Donnelly announced the new KMI Media Group collaborative effort. Military Information Technology will be using the blogosphere to get their government and industry…

VMware, Cisco and the Virtual Datacenter

By G C Network | September 26, 2008

Last week, VMware and Cisco announced their latest collaboration for the virtual datacenter of the future. The Cisco Nexus® 1000V distributed virtual software switch is expected to be an integrated…

Cryptographic data splitting is a new approach to securing information. This process encrypts data and then uses random or deterministic distribution to multiple shares. this distribution can also include fault tolerant bits, key splitting, authentication, integrity, share reassembly, key restoration or decryption.

Most security schema have one or more of the following drawbacks:

  • Log-in and password access often does not provide adequate security.
  • Public-key cryptographic system reliance on the user for security.
  • Private keys stored on a hard drive that are accessible to others or through the Internet.
  • Private keys being stored on a computer system configured with an archiving or backup system that could result in copies of the private key traveling through multiple computer storage devices or other systems
  • Loss or damage to the smartcard or portable computing device in biometric cryptographic systems
  • Possibility of a malicious person stealing a mobile user’s smartcard or portable computing device using it to effectively steal the mobile user’s digital credentials.
  • The computing device connection to the Internet may provide access to the file where the biometric information is stored making it susceptible to compromise through user inattentiveness to security or malicious intruders.
  • Existence of a single physical location towards which to focus an attack.

Cryptographic data splitting has multiple advantages over current, widely used security approaches because:

  • Enhanced security from moving shares of the data to different locations on one or more data depositories or storage devices (different logical, physical or geographical locations
  • Shares of data can be split physically and under the control of different personnel reducing the possibility of compromising the data.
  • A rigorous combination of the steps is used to secure data providing a comprehensive process of maintaining security of sensitive data.
  • Data is encrypted with a secure key and split into one or more shares
  • Lack of a single physical location towards which to focus an attack

Because of these and other advantages, this approach seems to be a natural for cloud computing.

Follow me at https://Twitter.com/Kevin_Jackson

G C Network

3 Comments

  1. Platypus on December 26, 2008 at 6:35 pm

    New? From the description you give, this sounds a lot like Adi Shamir’s secret sharing from 1979. Maybe you need to be more specific about what the novel part is.



  2. Kevin Jackson on December 26, 2008 at 6:43 pm

    This approach is an advancement to the state-of-the-art. Shamir’s work is referenced in the patent filing. See http://www.freepatentsonline.com/7391865.html



  3. Platypus on December 27, 2008 at 3:38 am

    The thing that matters about a patent is the claims, not the description. Most of the claims don’t even come close to passing the non-obviousness test, as they precisely recapitulate techniques that have been known for over twenty years. Anyone involved with OceanStore, Permabit, Cleversafe, or Allmydata (for example) could show enough prior art to make your head spin. What was the examiner thinking? Maybe this stuff is new to someone, but it’s not new to the industry.