METHOD AND SYSTEM FOR PROCESSING INFORMATION

• US 20100031088A1
• Filed: 12/21/2007
• Published: 02/04/2010
• Est. Priority Date: 12/26/2006
• Status: Abandoned Application

• Current Assignee: Kyndryl Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Nakayama, Kiyotaka
• Application Number:
  US12/519,209
• Publication Number:
  US 20100031088A1
• Time in Patent Office: Days
• US Class Current: 714/15
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 21/88 Detecting or preventing theft or loss
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen

Abstract

A method and system for processing information. An apparatus divides target information into N pieces of divided data using a secret sharing scheme in which a predetermined number (K) of pieces of the N pieces of divided data is required to restore the target information, wherein N>K. The apparatus is an information processing device or an external storage device. The apparatus selects M pieces from the N pieces, wherein K≦M<N. After selecting M pieces, the M pieces are stored in the external storage device. After storing the M pieces, the target information is restored from at least K pieces of the N pieces. After the restoring, D pieces of the M pieces in the external storage device are destroyed, wherein D>M−K.

Claims

1-15. -15. (canceled)

16. A method for processing information, said method comprising:

an apparatus dividing target information into N pieces of divided data using a secret sharing scheme in which a predetermined number (K) of pieces of the N pieces of divided data is required to restore the target information, wherein N>

K, and wherein the apparatus is an information processing device or an external storage device;

said apparatus selecting M pieces from the N pieces, wherein K≦

M<

N;

after said selecting M pieces, storing the M pieces in the external storage device;

after said storing the M pieces, restoring the target information from at least K pieces of the N pieces, and

after said restoring, destroying D pieces of the M pieces in the external storage device, wherein D>

M−

K.

17. The method of claim 16, wherein the apparatus is the information processing device, wherein a remaining N−

M pieces results from said selecting the M pieces from the N pieces, and wherein the method further comprises;

after said selecting M pieces and before said storing the M pieces, said information processing device transmitting the M pieces to the external storage device; and

after said storing the selected M pieces and before said restoring the target information, storing L pieces of the remaining N−

M pieces in the information processing device, wherein D≦

M−

K+L.

18. The method of claim 17, wherein a remaining N−

M−

L pieces results from said storing L pieces, and wherein the method further comprises;

after said storing L pieces and before said restoring the target information, registering P pieces of the remaining N−

M−

L pieces with an external server, wherein D≦

M−

K+L+P; and

said information processing device receiving M′

pieces of the M pieces from the external storage device, wherein said restoring is performed by the information processing device and comprises utilizing the M′

pieces.

19. The method of claim 18, wherein M′

≧

K, and wherein the at least K pieces consist of the M′

pieces.

20. The method of claim 18, wherein M′

<

K, wherein the method further comprises said information processing device accessing the L pieces and the P pieces, and wherein the at least K pieces comprise the M′

pieces, the L pieces, and the P pieces.

21. The method of claim 16, wherein the apparatus is the external storage device, and wherein the method further comprises:

before said dividing target information, said external storage device receiving the target information from the information processing device.

22. The method of claim 16, wherein said restoring is performed by the external storage device, wherein the at least K pieces consist of M′

pieces of the M pieces, wherein M′

≧

K, and wherein the method further comprises said external storage device transmitting the restored target information to the information processing device.

23. The method of claim 16, wherein said destroying comprises:

randomly selecting at least one bit in each piece of the D pieces; and

after said randomly selecting at least one bit in each piece of the D pieces, inverting a value of each bit of the at least one bit in each piece of the D pieces.

24. The method of claim 23, wherein said dividing the target information comprises using an encoding scheme that employs an error correcting code, and wherein the at least one bit in each piece of the D pieces consists of a number of bits that is larger than a correction limit of the error correcting code.

25. The method of claim 16, wherein the method comprises:

determining a reference time;

after said storing the M pieces and before said destroying D pieces, said external storage device ascertaining that a predetermined operation has been performed with respect to the external storage device and that the reference time has elapsed since the predetermined operation was performed; and

performing said destroying in response to said ascertaining.

26. The method of claim 25, wherein the predetermined operation is:

a removal of the external storage device from the information processing device, said removal having occurred after insertion of the external storage device into the information processing device;

or

an operation of a switch comprised by the external storage device, wherein said operation of a switch has resulted in the external storage device receiving the reference time or a destruction rate according to which said destroying is to be performed.

27. The method of claim 25, wherein said determining the reference time is selected from the group consisting of:

determining the reference time as a function of a measured frequency at which the external storage device is connected to the information processing device;

determining the reference time as a function of a shape or color of a cap placed on a connection terminal of the external storage device;

determining the reference time as a function of a keyword used as a key in a search that retrieved a file comprising the keyword in the M pieces of divided data stored in the external storage device; and

determining the reference time as a function of a type of a predetermined operation received by a switch comprised by the external storage device.

28. A computer program product, comprising a computer readable storage medium having computer readable program code stored therein, said program code configured to perform the method of claim 16 by being executed by the external storage device or by both the external storage device and the information processing device.

29. A system comprising an external storage device and an information processing device, said information processing device and said external storage device configured to perform a method for processing information, said method comprising:

an apparatus dividing target information into N pieces of divided data using a secret sharing scheme in which a predetermined number (K) of pieces of the N pieces of divided data is required to restore the target information, wherein N>

K, and wherein the apparatus is the information processing device or the external storage device;

said apparatus selecting M pieces from the N pieces, wherein K≦

M<

N;

after said selecting M pieces, storing the M pieces in the external storage device;

after said storing the M pieces, restoring the target information from at least K pieces of the N pieces, and

after said restoring, destroying D pieces of the M pieces in the external storage device, wherein D>

M−

K.

30. The system of claim 29, wherein the apparatus is the information processing device, wherein a remaining N−

M pieces results from said selecting the M pieces from the N pieces, and wherein the method further comprises;

after said selecting M pieces and before said storing the M pieces, said information processing device transmitting the M pieces to the external storage device; and

after said storing the selected M pieces and before said restoring the target information, storing L pieces of the remaining N−

M pieces in the information processing device, wherein D≦

M−

K+L.

31. The system of claim 30, wherein a remaining N−

M−

L pieces results from said storing L pieces, and wherein the method further comprises;

after said storing L pieces and before said restoring the target information, registering P pieces of the remaining N−

M−

L pieces with an external server, wherein D≦

M−

K+L+P; and

said information processing device receiving M′

pieces of the M pieces from the external storage device, wherein said restoring is performed by the information processing device and comprises utilizing the M′

pieces.

32. The system of claim 31, wherein M′

≧

K, and wherein the at least K pieces consist of the M′

pieces.

33. The system of claim 31, wherein M′

<

K, wherein the method further comprises said information processing device accessing the L pieces and the P pieces, and wherein the at least K pieces comprise the M′

pieces, the L pieces, and the P pieces.

34. The system of claim 29, wherein the apparatus is the external storage device, and wherein the method further comprises:

before said dividing target information, said external storage device receiving the target information from the information processing device.

35. The system of claim 29, wherein said restoring is performed by the external storage device, wherein the at least K pieces consist of M′

pieces of the M pieces, wherein M′

≧

K, and wherein the method further comprises said external storage device transmitting the restored target information to the information processing device.

36. The system of claim 29, wherein said destroying comprises:

randomly selecting at least one bit in each piece of the D pieces; and

after said randomly selecting at least one bit in each piece of the D pieces, inverting a value of each bit of the at least one bit in each piece of the D pieces.

37. The system of claim 36, wherein said dividing the target information comprises using an encoding scheme that employs an error correcting code, and wherein the at least one bit in each piece of the D pieces consists of a number of bits that is larger than a correction limit of the error correcting code.

38. The system of claim 29, wherein the method comprises:

determining a reference time;

after said storing the M pieces and before said destroying D pieces, said external storage device ascertaining that a predetermined operation has been performed with respect to the external storage device and that the reference time has elapsed since the predetermined operation was performed; and

performing said destroying in response to said ascertaining.

39. The system of claim 38, wherein the predetermined operation is:

a removal of the external storage device from the information processing device, said removal having occurred after insertion of the external storage device into the information processing device;

or

an operation of a switch comprised by the external storage device, wherein said operation of a switch has resulted in the external storage device receiving the reference time or a destruction rate according to which said destroying is to be performed.

40. The system of claim 38, wherein said determining the reference time is selected from the group consisting of:

determining the reference time as a function of a measured frequency at which the external storage device is connected to the information processing device,

determining the reference time as a function of a shape or color of a cap placed on a connection terminal of the external storage device,

determining the reference time as a function of a keyword used as a key in a search that retrieved a file comprising the keyword in the M pieces of divided data stored in the external storage device, and

determining the reference time as a function of a type of a predetermined operation received by a switch comprised by the external storage device.