Splitting encrypted key and encryption key used to encrypt key into key components allowing assembly with subset of key components to decrypt encrypted key

A system comprising:

• at least one processor;
• at least one memory communicatively coupled to the at least one processor;
• at least one network interface communicatively coupled to the at least one processor and configured to communicate with external computing devices;
• and
• wherein the at least one processor is configured to:
• generate a private key;
• generate at least one encryption key;
• apply at least one exclusive or (XOR) operation to the private key and the at least one encryption key to encrypt the private key using the at least one encryption key to generate an encrypted private key;
• split the encrypted private key into a first set of first key components, wherein at least a first subset of the first set of first key components can be used to reconstruct the encrypted private key, wherein the first set of first key components are configured to be provided to a first plurality of users;
• split the at least one encryption key into at least a second set of second key components, wherein at least a second subset of the second set of second key components can be used to reconstruct the at least one encryption key, wherein the at least the second set of second key components are configured to be provided to a second plurality of users;
• and
• erase the at least one encryption key from the at least one memory.

A system comprising:

• at least one processor;
• at least one memory communicatively coupled to the at least one processor;
• at least one network interface communicatively coupled to the at least one processor and configured to communicate with external computing devices;
• and
• wherein when an encryption key needs to be used that is encrypted as an encrypted key, the at least one processor is configured to:
• cause a request for key components to be communicated to users using the at least one network interface, wherein the request for key components is communicated to users in at least one of email, Short Message Service (SMS), Multimedia Messaging Service (MMS), instant messaging, push notification, push verify notification, polling a notification, pulling a notification, or by Bluetooth, WiFi, or near field (NFC) transmission;
• receive at least one set of key components from at least a subset of users that can be used to reconstruct the encrypted key and at least one encryption key used to decrypt the encrypted key into a key;
• when the at least one set of key components is received from the at least the subset of users that can be used to reconstruct the encrypted key and the at least one encryption key, reconstruct the encrypted key and the at least one encryption key;
• and
• when the encrypted key and the at least one encryption key have both been reconstructed, decrypt the encrypted key into the key using the at least one encryption key.

A system comprising:

• at least one processor;
• at least one memory communicatively coupled to the at least one processor;
• at least one network interface communicatively coupled to the at least one processor and configured to communicate with external computing devices;
• and
• wherein when a private key needs to be used, the at least one processor is configured to:
• cause a request for key components to be communicated to users using the at least one network interface, wherein the request for key components is communicated to users in at least one of email, Short Message Service (SMS), Multimedia Messaging Service (MMS), instant messaging, push notification, push verify notification, polling a notification, pulling a notification, or by Bluetooth, WiFi, or near field (NFC) transmission;
• receive at least one set of key components from at least a subset of users that can be used to reconstruct an encrypted private key and at least one encryption key used to decrypt the private key from the encrypted private key;
• when the at least one set of the key components is received from the at least the subset of users that can be used to reconstruct the encrypted private key and the at least one encryption key, reconstruct the encrypted private key and the at least one encryption key;
• when the encrypted private key and the at least one encryption key both have been reconstructed, apply at least one exclusive or (XOR) operation to the encrypted private key and the at least one encryption key to decrypt the encrypted private key using the at least one encryption key;
• and
• erase the private key from the at least one memory after use.

A system comprising:

• at least one processor;
• at least one memory communicatively coupled to the at least one processor;
• and
• wherein, when at least one encryption key needs to be generated to encrypt a key, the at least one processor is configured to:
• generate the at least one encryption key;
• encrypt the key using the at least one encryption key to generate an encrypted key;
• combine the encrypted key and the at least one encryption key together;
• split the encrypted key and the at least one encryption key into at least one set of key components, wherein at least a subset of key components of the at least one set of key components can be used to reconstruct the encrypted key and the at least one encryption key;
• and
• erase the key from the at least one memory.

A system comprising:

• at least one processor;
• at least one memory communicatively coupled to the at least one processor;
• at least one network interface communicatively coupled to the at least one processor and configured to communicate with external computing devices;
• and
• wherein the at least one processor is configured to:
• generate a private key;
• generate at least one encryption key;
• apply at least one exclusive or (XOR) operation to the private key and the at least one encryption key to encrypt the private key using the at least one encryption key to generate an encrypted private key;
• combine the encrypted private key and the at least one encryption key together;
• split the encrypted private key and the at least one encryption key into at least one set of key components, wherein at least a subset of key components of the at least one set of key components can be used to reconstruct the encrypted private key and the at least one encryption key;
• and
• erase the at least one encryption key from the at least one memory.

A system comprising:

• at least one processor;
• at least one memory communicatively coupled to the at least one processor;
• and
• wherein when an encryption key needs to be used that is encrypted as an encrypted key, the at least one processor is configured to:
• receive a single set of key components from at least a subset of users that can be used to reconstruct the encrypted key and at least one encryption key used to decrypt the encrypted key into a key;
• reconstruct a combined string, including both the encrypted key and the at least one encryption key, from the single set of key components;
• extract the encrypted key and the at least one encryption key from the combined string;
• and
• when the encrypted key and the at least one encryption key have both been reconstructed, decrypt the encrypted key into the key using the at least one encryption key.

A system comprising:

• at least one processor;
• at least one memory communicatively coupled to the at least one processor;
• and
• wherein when an encrypted key needs to be used, the at least one processor is configured to:
• receive a first subset of a first set of first key components from a first subset of users that can be used to reconstruct the encrypted key;
• receive at least a second subset of a second single set of key components from at least a second subset of users that can be used to reconstruct at least one encryption key used to decrypt the encrypted key into a decrypted key;
• when the first subset of the first set of first key components is received from the first subset of users, reconstruct the encrypted key;
• and
• when the at least the second subset of the at least the second set of second key components is received from the at least the second subset of users, reconstruct the at least one encryption key;
• and
• when the encrypted key and the at least one encryption key have both been reconstructed, decrypt the encrypted key into the decrypted key using the at least one encryption key.

A system comprising:

• at least one processor;
• at least one memory communicatively coupled to the at least one processor;
• and
• wherein when an encrypted key needs to be used, the at least one processor is configured to:
• receive a first subset of a first set of first key components from a first subset of users that can be used to reconstruct the encrypted key;
• receive at least a second subset of at least a second set of second key components from at least a second subset of users that can be used to reconstruct at least one encryption key used to decrypt the encrypted key into a decrypted key, wherein the at least the second set of second key components includes a plurality of sets of key components, wherein the at least the second subset of users includes a plurality of subsets of users, wherein each set of key components of the plurality of sets of key components is configured to be received from a corresponding subset of users of the plurality of subsets of users;
• when the first subset of the first set of first key components is received from the first subset of users, reconstruct the encrypted key;
• when the at least the second subset of the at least the second set of second key components is received from the at least the second subset of users, reconstruct the at least one encryption key;
• and
• when the encrypted key and the at least one encryption key have both been reconstructed, decrypt the encrypted key into the decrypted key using the at least one encryption key.

A system comprising:

• at least one processor;
• at least one memory communicatively coupled to the at least one processor;
• at least one network interface communicatively coupled to the at least one processor and configured to communicate with external computing devices;
• and
• wherein when a private key needs to be used, the at least one processor is configured to:
• cause a request for key components to be communicated to users using the at least one network interface, wherein the request for key components is communicated to users in at least one of email, Short Message Service (SMS), Multimedia Messaging Service (MMS), instant messaging, push notification, push verify notification, polling a notification, pulling a notification, or by Bluetooth, WiFi, or near field (NFC) transmission;
• receive at least one set of key components from at least a subset of users that can be used to reconstruct an encrypted private key and at least one encryption key used to decrypt the private key from the encrypted private key;
• when the at least one set of the key components is received from the at least the subset of users that can be used to reconstruct the encrypted private key and the at least one encryption key, reconstruct the encrypted private key and the at least one encryption key;
• when the encrypted private key and the at least one encryption key both have been reconstructed, apply at least one exclusive or (XOR) operation to the encrypted private key and the at least one encryption key to decrypt the encrypted private key using the at least one encryption key;
• and
• erase the private key from the at least one memory after use.