Cryptographic Data Splitting? What’s that?

DISA Chief Technologist States Plan for Cloud

By G C Network | September 23, 2008

In an interview reported on in this month’s Military Information Technology magazine, David Mihelcic, DISA Chief Technology Officer, has laid out his goal for the agency’s cloud computing initiative. As…

Google, GeoEye, Twitter. What a Combination!

By G C Network | September 23, 2008

On September 9th, Bob Lozano posted his kudos to GeoEye for a successful launch of GeoEye-1. (Hey Bob! Where’s that post on your “cloud failure” last week?) According to their…

RightScale goes Transcloud

By G C Network | September 22, 2008

Over the weekend, Maureen O’Gara of SYS-CON media reported that RightScale is now offering a “first in industry” capability to provide application management across multiple cloud infrastructures. It now offers…

A Bill to Outlaw Cloud Computing…..

By G C Network | September 19, 2008

… is what we may see if we don’t educate our lawmakers now! That seemed to be one of the main point at last week’s Google workshop in DC. Berin…

NCOIC and Cloud Computing

By G C Network | September 18, 2008

Yesterday the Network Centric Operations Industry Consortium (NCOIC) had a very good session on cloud computing during their plenary session in Falls Church, VA. Led by NCOIC’s Bob Marcus, speakers…

Military Information Technology Cloud Computing Collaboration

By G C Network | September 17, 2008

Today, we’re happy to announce what we believe to be an industry first. “Military Information Technology Magazine“, as the publication of record for the defense information technology community, is collaborating…

Is 99.999% reliability good enough?

By G C Network | September 16, 2008

According to Reuven Cohen in his recent post, Cloud Failure: The Myth of Nines , the whole concept of reliability may be meaningless. “In the case of a physical failure…

You Probably Use Cloud Computing Already.

By G C Network | September 15, 2008

56% of internet users use webmail services such as Hotmail, Gmail, or Yahoo! Mail. 34% store personal photos online. 29% use online applications such as Google Documents or Adobe Photoshop…

20 Real-Life Challenges of Cloud Computing

By G C Network | September 12, 2008

Nikita Ivanov of GridGain offers some excellent insight into the nuts and bolts of getting the cloud to work. Definitely worth a read. To summarize: Most likely you do NOT…

3Tera Announces Global Cloud Services

By G C Network | September 11, 2008

Last week, 3Tera has announced the availability of global cloud services, based on their AppLogic grid operating system. 3Tera is currently running data centers in seven countries (United States, Japan,…

Cryptographic data splitting is a new approach to securing information. This process encrypts data and then uses random or deterministic distribution to multiple shares. this distribution can also include fault tolerant bits, key splitting, authentication, integrity, share reassembly, key restoration or decryption.

Most security schema have one or more of the following drawbacks:

  • Log-in and password access often does not provide adequate security.
  • Public-key cryptographic system reliance on the user for security.
  • Private keys stored on a hard drive that are accessible to others or through the Internet.
  • Private keys being stored on a computer system configured with an archiving or backup system that could result in copies of the private key traveling through multiple computer storage devices or other systems
  • Loss or damage to the smartcard or portable computing device in biometric cryptographic systems
  • Possibility of a malicious person stealing a mobile user’s smartcard or portable computing device using it to effectively steal the mobile user’s digital credentials.
  • The computing device connection to the Internet may provide access to the file where the biometric information is stored making it susceptible to compromise through user inattentiveness to security or malicious intruders.
  • Existence of a single physical location towards which to focus an attack.

Cryptographic data splitting has multiple advantages over current, widely used security approaches because:

  • Enhanced security from moving shares of the data to different locations on one or more data depositories or storage devices (different logical, physical or geographical locations
  • Shares of data can be split physically and under the control of different personnel reducing the possibility of compromising the data.
  • A rigorous combination of the steps is used to secure data providing a comprehensive process of maintaining security of sensitive data.
  • Data is encrypted with a secure key and split into one or more shares
  • Lack of a single physical location towards which to focus an attack

Because of these and other advantages, this approach seems to be a natural for cloud computing.

Follow me at https://Twitter.com/Kevin_Jackson

G C Network

3 Comments

  1. Platypus on December 26, 2008 at 6:35 pm

    New? From the description you give, this sounds a lot like Adi Shamir’s secret sharing from 1979. Maybe you need to be more specific about what the novel part is.



  2. Kevin Jackson on December 26, 2008 at 6:43 pm

    This approach is an advancement to the state-of-the-art. Shamir’s work is referenced in the patent filing. See http://www.freepatentsonline.com/7391865.html



  3. Platypus on December 27, 2008 at 3:38 am

    The thing that matters about a patent is the claims, not the description. Most of the claims don’t even come close to passing the non-obviousness test, as they precisely recapitulate techniques that have been known for over twenty years. Anyone involved with OceanStore, Permabit, Cleversafe, or Allmydata (for example) could show enough prior art to make your head spin. What was the examiner thinking? Maybe this stuff is new to someone, but it’s not new to the industry.