Cryptographic Data Splitting? What’s that?

My views on “Classification of Cloud Computing Stakeholders”

By G C Network | July 12, 2008

In “Cloudy Times”, Markus Klems is having a good discussion on how cloud computing stakeholders classify the various infrastructure options. I then thought that it would be good for me…

The Implemetation of Network-Centric Warfare

By G C Network | July 12, 2008

The Implemetation of Network-Centric Warfare “Warfare is about human behavior in a context of organized violence directed toward political ends. So, network-centric warfare (NCW) is about human behavior within a…

Personal Views on DISA, HP and RACE

By G C Network | July 11, 2008

DISA and HP are clearly on the path towards cloud computing. At it’s core, net-centric operations requires the effective delivery of information to forward forces and the translation of that…

DISA selects HP for RACE

By G C Network | July 10, 2008

Byte and Switch reported today that the Department of Defense (DoD) has confirmed that HP will help the Defense Information Systems Agency (DISA) deploy a major cloud computing infrastructure. Grid…

Speakers for First SOA-R Event Announced

By G C Network | July 10, 2008

Scheduled speakers and topics for the first SOA-R Cloud Computing Education event are: Steve Armentrout, Parabon, President & CEO Grid to Cloud Computing Greg Boss, IBM, Lead Cloud Solution Architect…

Cloud Computing Offerings – A Taxonomy

By G C Network | July 9, 2008

From “The various level of cloud computing” by Ross Cooney Applications in the cloud: Software as a Service (SaaS). Examples include gmail, yahoo mail, Hotmail, the various search engines, wikipedia,…

Cloud Computing Guides (updated 8/10/08)

By G C Network | July 9, 2008

InfoWorld Special Report on Cloud Computing InformationWeek Guide to Cloud Computing InfoWorld Cloud Computing Strategy Guide Cloud Computing Product Guide A Brief History of Cloud Computing Business Week CEO Guide…

Microsoft announcing Cloud Computing offering

By G C Network | July 8, 2008

According to Information Week, Microsoft plans to make three important business software offerings — Exchange, Office Communications, and SharePoint — available in SaaS versions for business this year, but it’s…

Intel new CIO to examine Cloud Computing

By G C Network | July 7, 2008

In a ComputerworldUK article, incoming Intel CIO Diane Bryant says that she will network with fellow information chiefs, examine cloud computing and advocate using the chip giant’s internal operations as…

Cloud Computing for National Security

By G C Network | July 3, 2008

As the national security community considers cloud computing as an IT infrastructure option, it is surely looking at the value of the cloud in an information sharing world. Implementation of…

Cryptographic data splitting is a new approach to securing information. This process encrypts data and then uses random or deterministic distribution to multiple shares. this distribution can also include fault tolerant bits, key splitting, authentication, integrity, share reassembly, key restoration or decryption.

Most security schema have one or more of the following drawbacks:

  • Log-in and password access often does not provide adequate security.
  • Public-key cryptographic system reliance on the user for security.
  • Private keys stored on a hard drive that are accessible to others or through the Internet.
  • Private keys being stored on a computer system configured with an archiving or backup system that could result in copies of the private key traveling through multiple computer storage devices or other systems
  • Loss or damage to the smartcard or portable computing device in biometric cryptographic systems
  • Possibility of a malicious person stealing a mobile user’s smartcard or portable computing device using it to effectively steal the mobile user’s digital credentials.
  • The computing device connection to the Internet may provide access to the file where the biometric information is stored making it susceptible to compromise through user inattentiveness to security or malicious intruders.
  • Existence of a single physical location towards which to focus an attack.

Cryptographic data splitting has multiple advantages over current, widely used security approaches because:

  • Enhanced security from moving shares of the data to different locations on one or more data depositories or storage devices (different logical, physical or geographical locations
  • Shares of data can be split physically and under the control of different personnel reducing the possibility of compromising the data.
  • A rigorous combination of the steps is used to secure data providing a comprehensive process of maintaining security of sensitive data.
  • Data is encrypted with a secure key and split into one or more shares
  • Lack of a single physical location towards which to focus an attack

Because of these and other advantages, this approach seems to be a natural for cloud computing.

Follow me at https://Twitter.com/Kevin_Jackson

G C Network

3 Comments

  1. Platypus on December 26, 2008 at 6:35 pm

    New? From the description you give, this sounds a lot like Adi Shamir’s secret sharing from 1979. Maybe you need to be more specific about what the novel part is.



  2. Kevin Jackson on December 26, 2008 at 6:43 pm

    This approach is an advancement to the state-of-the-art. Shamir’s work is referenced in the patent filing. See http://www.freepatentsonline.com/7391865.html



  3. Platypus on December 27, 2008 at 3:38 am

    The thing that matters about a patent is the claims, not the description. Most of the claims don’t even come close to passing the non-obviousness test, as they precisely recapitulate techniques that have been known for over twenty years. Anyone involved with OceanStore, Permabit, Cleversafe, or Allmydata (for example) could show enough prior art to make your head spin. What was the examiner thinking? Maybe this stuff is new to someone, but it’s not new to the industry.