Processing information

• US 9,208,351 B2
• Filed: 09/17/2013
• Issued: 12/08/2015
• Est. Priority Date: 06/15/2009
• Status: Expired due to Fees

• Current Assignee: Kyndryl Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Nakayama, Kiyotaka
• Primary Examiner(s): Najjar, Saleh
• Assistant Examiner(s): Pan, Peiliang
• Application Number:
  US14/028,998
• Publication Number:
  US 20140019774A1
• Time in Patent Office: 812 Days
• Field of Search: 726/2, 726/14, 726/26, 713/189, 713/193
• US Class Current: 1/1
• CPC Class Codes: G06F 11/1008 in individual solid state devices G06F11/1004 takes precedence
• CPC Class Codes: G06F 11/1076 Parity data used in redundant arrays of independent storages, e.g. in RAID systems
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories
• CPC Class Codes: G06F 21/85 interconnection devices, e.g. bus-connected or in-line devices
• CPC Class Codes: G06F 2201/84 Using snapshots, i.e. a logical point-in-time copy of the data
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps

Abstract

A method and system for processing information. An apparatus divides target information into N pieces of divided data using a secret sharing scheme in which a predetermined number (K) of pieces of the N pieces of divided data is required to restore the target information, wherein N>K, and wherein the apparatus is an information processing device or an external storage device. The apparatus selects M pieces from the N pieces, wherein K<M<N. After selecting the M pieces, the M pieces are stored in the external storage device which limits a totality of pieces of the N pieces being stored on the external storage device to the M pieces. After storing the M pieces, the target information is restored from at least K pieces of the N pieces after which D pieces of the M pieces in the external storage device are destroyed, wherein D>M−K.

Claims

1. A method for processing information, said method comprising:

an apparatus dividing target information into N pieces of divided data using a secret sharing scheme in which a predetermined number (K) of pieces of the N pieces of divided data is required to restore the target information, wherein N>

K, and wherein the apparatus is an information processing device or an external storage device;

said apparatus selecting M pieces from the N pieces, wherein K<

M<

N;

after said selecting M pieces, storing the M pieces in the external storage device which limits a totality of pieces of the N pieces being stored on the external storage device to the M pieces;

after said storing the M pieces, restoring the target information from at least K pieces of the N pieces;

after said restoring, destroying D pieces of the M pieces in the external storage device, wherein D>

M−

K,

determining a reference time; and

after said storing the M pieces and before said destroying D pieces, said external storage device ascertaining that a predetermined operation has been performed with respect to the external storage device and that the reference time has elapsed since the predetermined operation was performed, wherein said destroying in response to said ascertaining.

2. The method of claim 1, wherein the apparatus is the information processing device, wherein a remaining N−

M pieces results from said selecting the M pieces from the N pieces, and wherein the method further comprises;

after said selecting M pieces and before said storing the M pieces, said information processing device transmitting the M pieces to the external storage device; and

after said storing the selected M pieces and before said restoring the target information, storing L pieces of the remaining N−

M pieces in the information processing device, wherein D≦

M−

K+L.

3. The method of claim 2, wherein a remaining N−

M−

L pieces results from said storing L pieces, and wherein the method further comprises;

after said storing L pieces and before said restoring the target information, registering P pieces of the remaining N−

M−

L pieces with an external server, wherein D≦

M−

K+L+P; and

said information processing device receiving M′

pieces of the M pieces from the external storage device, wherein said restoring is performed by the information processing device and comprises utilizing the M′

pieces.

4. The method of claim 3, wherein M′

≧

K, and wherein the at least K pieces consist of the M′

pieces.

5. The method of claim 3, wherein M′

<

K, wherein the method further comprises said information processing device accessing the L pieces and the P pieces, and wherein the at least K pieces comprise the M′

pieces, the L pieces, and the P pieces.

6. The method of claim 1, wherein the apparatus is the external storage device, and wherein the method further comprises:

before said dividing target information, said external storage device receiving the target information from the information processing device.

7. The method of claim 1, wherein said restoring is performed by the external storage device, wherein the at least K pieces consist of M′

pieces of the M pieces, wherein M′

≧

K, and wherein the method further comprises said external storage device transmitting the restored target information to the information processing device.

8. The method of claim 1, wherein said destroying comprises:

randomly selecting at least one bit in each piece of the D pieces; and

after said randomly selecting at least one bit in each piece of the D pieces, inverting a value of each bit of the at least one bit in each piece of the D pieces.

9. The method of claim 8, wherein said dividing the target information comprises using an encoding scheme that employs an error correcting code, and wherein the at least one bit in each piece of the D pieces consists of a number of bits that is larger than a correction limit of the error correcting code.

10. The method of claim 1, wherein the predetermined operation is:

a removal of the external storage device from the information processing device, said removal having occurred after insertion of the external storage device into the information processing device;

or an operation of a switch comprised by the external storage device, wherein said operation of a switch has resulted in the external storage device receiving the reference time or a destruction rate according to which said destroying is to be performed.

11. The method of claim 1, wherein said determining the reference time is selected from the group consisting of:

determining the reference time as a function of a measured frequency at which the external storage device is connected to the information processing device;

determining the reference time as a function of a shape or color of a cap placed on a connection terminal of the external storage device;

determining the reference time as a function of a keyword used as a key in a search that retrieved a file comprising the keyword in the M pieces of divided data stored in the external storage device; and

determining the reference time as a function of a type of a predetermined operation received by a switch comprised by the external storage device.

12. A computer program product, comprising a computer readable storage device having computer readable program code stored therein, said program code configured to perform the method of claim 1 by being executed by the external storage device or by both the external storage device and the information processing device.

13. A system comprising an external storage device and an information processing device, said information processing device and said external storage device configured to perform a method for processing information, said method comprising:

an apparatus dividing target information into N pieces of divided data using a secret sharing scheme in which a predetermined number (K) of pieces of the N pieces of divided data is required to restore the target information, wherein N>

K, and wherein the apparatus is the information processing device or the external storage device;

said apparatus selecting M pieces from the N pieces, wherein K<

M<

N;

after said selecting M pieces, said external storage device storing the M pieces in the external storage device which limits a totality of pieces of the N pieces being stored on the external storage device to the M pieces;

after said storing the M pieces, said apparatus restoring the target information from at least K pieces of the N pieces, and

after said restoring, said external storage device destroying D pieces of the M pieces in the external storage device, wherein D>

M−

K,

wherein the apparatus is the information processing device, wherein a remaining N−

M pieces results from said selecting the M pieces from the N pieces, and wherein the method further comprises;

(i) after said selecting M pieces and before said storing the M pieces, said information processing device transmitting the M pieces to the external storage device; and

(ii) after said storing the selected M pieces and before said restoring the target information, said information processing device storing L pieces of the remaining N−

M pieces in the information processing device, wherein D≦

M−

K+L,

wherein a remaining N−

M−

L pieces results from said storing L pieces, and wherein the method further comprises;

(a) after said storing L pieces and before said restoring the target information, said information processing device registering P pieces of the remaining N−

M−

L pieces with an external server, wherein D≦

M−

K+L+P; and

(b) said information processing device receiving M′

pieces of the M pieces from the external storage device, wherein said restoring is performed by the information processing device and comprises utilizing the M′

pieces.

14. The system of claim 13, wherein M′

≧

K, and wherein the at least K pieces consist of the M′

pieces.

15. The system of claim 13, wherein M′

<

K, wherein the method further comprises said information processing device accessing the L pieces and the P pieces, and wherein the at least K pieces comprise the M′

pieces, the L pieces, and the P pieces.

16. The system of claim 13, wherein the apparatus is the external storage device, and wherein the method further comprises:

before said dividing target information, said external storage device receiving the target information from the information processing device.

17. The system of claim 13, wherein said restoring is performed by the external storage device, wherein the at least K pieces consist of M′

pieces of the M pieces, wherein M′

≧

K, and wherein the method further comprises said external storage device transmitting the restored target information to the information processing device.

18. The system of claim 13, wherein said destroying comprises:

randomly selecting at least one bit in each piece of the D pieces; and

after said randomly selecting at least one bit in each piece of the D pieces, inverting a value of each bit of the at least one bit in each piece of the D pieces.

19. The system of claim 18, wherein said dividing the target information comprises using an encoding scheme that employs an error correcting code, and wherein the at least one bit in each piece of the D pieces consists of a number of bits that is larger than a correction limit of the error correcting code.

20. The system of claim 13, wherein the method comprises:

said external storage device determining a reference time;

after said storing the M pieces and before said destroying D pieces, said external storage device ascertaining that a predetermined operation has been performed with respect to the external storage device and that the reference time has elapsed since the predetermined operation was performed, wherein said destroying is performed in response to said ascertaining.

21. The system of claim 20, wherein the predetermined operation is:

a removal of the external storage device from the information processing device, said removal having occurred after insertion of the external storage device into the information processing device;

or

an operation of a switch comprised by the external storage device, wherein said operation of a switch has resulted in the external storage device receiving the reference time or a destruction rate according to which said destroying is to be performed.

22. The system of claim 20, wherein said determining the reference time is selected from the group consisting of:

determining the reference time as a function of a measured frequency at which the external storage device is connected to the information processing device,

determining the reference time as a function of a shape or color of a cap placed on a connection terminal of the external storage device,

determining the reference time as a function of a keyword used as a key in a search that retrieved a file comprising the keyword in the M pieces of divided data stored in the external storage device, and

determining the reference time as a function of a type of a predetermined operation received by a switch comprised by the external storage device.