METHOD AND SYSTEM FOR DATA SECURITY

• US 20080046493A1
• Filed: 08/16/2007
• Published: 02/21/2008
• Est. Priority Date: 08/17/2006
• Status: Active Grant

• Current Assignee: University of Miami
• Original Assignee: University of Miami
• Inventors: ROSENBERG, Burton
• Granted Patent: US 8,156,168 B2
• Time in Patent Office: Days
• US Class Current: 708/250
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2107 File encryption

Abstract

A method, system and apparatus that advantageously provide a security protocol for data security. The apparatus includes a random number generator for generating random numbers and a share calculator in communication with the random number generator, the share calculator processes the data to generate one or more encoded data shares where the processing is based at least in part on the random numbers. The apparatus may further include a router that routes the encoded data shares, a switching fabric and associated logic. The data security system includes one or more storage devices that store client data and a splitter that controls access to the client data stored on the one or more storage devices where the splitter apparatus encodes at least a portion of the client data that is stored on the one or more storage devices.

Claims

1. An apparatus for data security, the apparatus comprising:

a random number generator, the random number generator generating random numbers; and

a share calculator in communication with the random number generator, the share calculator processing the data to generate one or more encoded data shares, the processing being based at least in part on the random numbers.

2. The apparatus of claim 1, further comprising a router in communication with the share calculator, the router routing the encoded data shares.

3. The apparatus of claim 1, wherein the share calculator includes an encoder, the encoder being one of an exclusive-or summer and a Rabin polynomial model.

4. A data security system, the system comprising:

one or more storage devices, the one or more storage devices storing client data; and

a splitter, the splitter controlling access to the client data stored on the one or more storage devices, the splitter encoding at least a portion of the client data that is stored on the one or more storage devices.

5. The system of claim 4, wherein the splitter is located on a network path between one or more client devices and the one or more storage devices.

6. The system of claim 4, wherein the splitter encodes the client data sent from one or more client devices to the one or more storage devices using an encoding method.

7. The system of claim 6, wherein the encoding method is one of an exclusive-or summer and a Rabin polynomial model.

8. The system of claim 4, wherein the splitter decodes the client data sent from the one or more storage devices to one or more client devices using a decoding method.

9. The system of claim 8, wherein the decoding method is one of an exclusive-or summer and a Rabin polynomial model.

10. A method for securing data in storage devices on a network, the method comprising:

generating at least one random number;

processing at least a portion of the data to generate encoded data shares, the processing being based at least in part on the at least one random number; and

storing the encoded data shares in a plurality of data storage devices.

11. The method for securing data of claim 10, further comprising:

routing the encoded data shares to the plurality of data storage devices.

12. The method for securing data of claim 10, further comprising:

controlling access to the stored encoded data shares.

13. The method for securing data of claim 10, further comprising:

decoding at least a portion of the stored encoded data shares.

14. The method for securing data of claim 10, wherein processing at least a portion of the data includes using an encoding process, the encoding process is one of an exclusive—

or summer and a Rabin polynomial model.

15. The method for securing data of claim 10, further comprising:

controlling access to a network path between one or more client devices and the plurality of data storage devices.

16. The method for securing data of claim 10, further including:

determining a number of encoded data shares based on a number of available storage devices for receiving the encoded data shares; and

retrieving a plurality of the stored encoded data shares from the storage devices;

comparing the number of retrieved stored encoded data shares to a preset reconstruction threshold factor; and

accepting a data reconstruction of the plurality of the stored encoded data shares conditioned upon the number of retrieved stored encoded data shares being greater than the preset reconstruction threshold factor.

17. The method for securing data of claim 16, wherein the number of available storage devices is ten and the preset reconstruction threshold factor is seven.

18. The method for securing data of claim 10, further comprising:

transporting a portion of the client data along a first communication path of a network; and

storing a portion of the client data along a second communication path of the network.

19. The method for securing data of claim 18, wherein the storing a portion of the client data along a second path of the network includes storage in a physically detachable storage device.

20. The method for securing data of claim 18, further comprising using a second splitter to decode the at least a portion of the client data that is stored on the one or more storage devices.