Secure data parser method and system

• US 10,108,807 B2
• Filed: 11/18/2014
• Issued: 10/23/2018
• Est. Priority Date: 11/18/2005
• Status: Active Grant

• Current Assignee: Security First Innovations, LLC
• Original Assignee: Security First Corp
• Inventors: O'Hare, Mark S., Orsini, Rick L., Davenport, Roger S., Winick, Steven
• Primary Examiner(s): Revak, Christopher
• Application Number:
  US14/546,887
• Publication Number:
  US 20150074430A1
• Time in Patent Office: 1,435 Days
• Field of Search: None
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 9/085 Secret sharing or secret splitting, e.g. threshold schemes
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

A secure data parser is provided that may be integrated into any suitable system for securely storing and communicating data. The secure data parser parses data and then splits the data into multiple portions that are stored or communicated distinctly. Encryption of the original data, the portions of data, or both may be employed for additional security. The secure data parser may be used to protect data in motion by splitting original data into portions of data, that may be communicated using multiple communications paths.

Claims

1. A method for securing data using a portable device, the method comprising:

generating a plurality of portions of data from a dataset based at least in part on a key, each of the plurality of portions comprising less than all data of the dataset, wherein the key and at least two of the portions of data are sufficient to reconstruct the dataset;

storing at least one of the generated data portions at one or more storage devices;

storing the key on a portable device, wherein the portable device is different from the one or more storage devices; and

storing at least one of the generated data portions on the portable device.

2. The method of claim 1, wherein the portable device is a removable storage device.

3. The method of claim 2, wherein the removable storage device couples to an end user device via a Universal Serial Bus (USB) interface.

4. The method of claim 1, wherein the key is one of an encryption key, a split key, and an authentication key.

5. The method of claim 4, wherein the key is a split key, and wherein the method further comprises encrypting the generated data portions with one or more encryption keys.

6. The method of claim 4, wherein generating a plurality of portions of data comprises substantially randomly distributing the dataset into the plurality of portions of data.

7. The method of claim 1, wherein the plurality of portions of data are generated using a split algorithm and a split key associated with the split algorithm.

8. A method for securing data using a portable device, the method comprising:

generating a plurality of portions of data from a dataset based at least in part on a key, each of the plurality of portions comprising less than all data of the dataset, wherein the key and at least two portions of data are sufficient to reconstruct the dataset;

storing the key at one or more storage devices;

storing at least one of the generated data portions on a portable device, wherein the portable device is different from the one or more storage devices; and

storing at least one of the generated data portions on the one or more storage devices.

9. The method of claim 8, wherein storing the key at one or more storage devices comprises splitting the key into at least two parts and storing the at least two parts of the key at the one or more storage devices.

10. The method of claim 8, wherein the portable device is a removable storage device.

11. The method of claim 10, wherein the removable storage device couples to an end user device via a Universal Serial Bus (USB) interface.

12. The method of claim 8, wherein the key is one of an encryption key, a split key and an authentication key.

13. The method of claim 12, wherein the key is a split key, and wherein the method further comprises encrypting the generated data portions with one or more encryption keys.

14. The method of claim 12, wherein generating a plurality of portions of data comprises substantially randomly distributing the dataset into the plurality of portions of data.

15. The method of claim 8, wherein the plurality of portions of data are generated using a split algorithm and a split key associated with the split algorithm.

16. A system for securing data using a portable device, the system comprising:

at least one non-transitory computer readable medium storing computer executable instructions; and

computer processor communicatively coupled to the at least one non-transitory computer readable medium and operable to execute the computer-readable instructions stored thereon, the computer processor configured to;

generate a plurality of portions of data from a dataset based at least in part on a key, each of the plurality of portions comprising less than all data of the dataset, wherein the key and at least two of the portions of data are sufficient to reconstruct the dataset;

store at least one of the generated data portions at one or more storage devices;

store the key on a portable device, wherein the portable device is different from the one or more storage devices; and

store at least one of the generated data portions on the portable device.

17. The system of claim 16, wherein the portable device is a removable storage device.

18. The system of claim 17, wherein the removable storage device couples to an end user device via a Universal Serial Bus (USB) interface.

19. The system of claim 16, wherein the key is one of an encryption key, a split key, and an authentication key.

20. The system of claim 19, wherein the key is a split key, and wherein the computer processor is further configured to encrypt the generated data portions with one or more encryption keys.

21. The system of claim 19, wherein the computer processor is configured to generate a plurality of portions of data by substantially randomly distributing the dataset into the plurality of portions of data.

22. The system of claim 16, wherein the at least two portions of data are generated using a split algorithm and a split key associated with the split algorithm.

23. A system for securing data using a portable device, the system comprising:

at least one non-transitory computer readable medium storing computer executable instructions; and

computer processor communicatively coupled to the at least one non-transitory computer readable medium, the computer processor configured to;

generate a plurality of portions of data from a dataset based at least in part on a key, each of the plurality of portions comprising less than all data of the dataset, wherein the key and at least two portions of data are sufficient to reconstruct the dataset;

store the key at one or more storage devices;

store at least one of the generated data portions on a portable device, wherein the portable device is different from the one or more storage devices; and

store at least one of the generated data portions on the one or more storage devices.

24. The system of claim 23, wherein the computer processor is configured to store the key at one or more storage devices comprises by splitting the key into at least two parts and storing the at least two parts of the key at the one or more storage devices.

25. The system of claim 23, wherein the portable device is a removable storage device.

26. The system of claim 25, wherein the removable storage device couples to an end user device via a Universal Serial Bus (USB) interface.

27. The system of claim 23, wherein the key is one of an encryption key, a split key and an authentication key.

28. The system of claim 27, wherein the key is a split key, and wherein the system further comprises encrypting the generated data portions with one or more encryption keys.

29. The system of claim 27, wherein the computer processor is configured to generate the plurality of portions of data by substantially randomly distributing the dataset into the plurality of portions of data.

30. The system of claim 23, wherein the at least two portions of data are generated using a split algorithm and a split key associated with the split algorithm.