Bit level sharding of sensitive data for increased security
AssigneeDell Products L.P.
InventorsThomas L. Watson, Yevgeni Gehtman, Tomer Shachar, Maxim Balin, Arieh Don
Life of this patent
Estimating the term…
Abstract
Techniques for obfuscating and/or de-obfuscating data using bit-level shard masks are disclosed. Shard masks are generated. The shard masks are designed to shard a block of data into a number of shards for distribution and storage among a number of storage arrays. The shard masks shard the block of data at a bit-level granularity. The shard masks are applied to the block of data to generate the shards. The shards are then distributed among the storage arrays for storage on the storage arrays.
Claims16
A method for obfuscating data using bit-level shard masks, said method comprising:
- determining a number of storage arrays that are available for storing data;
- based at least in part on the number of storage arrays, generating shard masks, wherein the shard masks are designed to shard a block of data into a number of shards for distribution and storage among the storage arrays, and wherein the shard masks shard the block of data at a bit-level granularity;
- applying the shard masks to the block of data to generate the shards;
- and
- distributing the shards among the storage arrays for storage on the storage arrays,
- wherein the shard masks include a first shard mask and a second shard mask, and wherein the second shard mask is a bit-level complemented version of the first shard mask.
A method for de-obfuscating data using bit-level shard masks, said method comprising:
- identifying a plurality shards that are distributed among a plurality of storage arrays;
- accessing a plurality of shard masks, wherein each shard mask is designed to shard a block of data into a corresponding shard, which is included among the plurality of shards, and wherein the plurality of shard masks sharded the block of data at a bit-level granularity;
- generating the block of data from the plurality of shards by:
- for each shard in the plurality of shards, identifying which shard mask in the plurality of shard masks corresponds to said each shard;
- performing a binary AND operation on each shard and said each shard's corresponding shard mask to generate a set of unmasked shards;
- and
- performing a binary OR operation on the set of unmasked shards to generate the block of data,
- wherein data included within each shard of the plurality of shards includes data originating from the block of data and random noise data.
A method for obfuscating and de-obfuscating data using bit-level shard masks, said method comprising:
- generating shard masks, wherein the shard masks are designed to shard a block of data into a number of shards for distribution and storage among a number of storage arrays, and wherein the shard masks shard the block of data at a bit-level granularity;
- applying the shard masks to the block of data to generate the shards;
- distributing the shards among the storage arrays for storage on the storage arrays;
- after the shards have been distributed, identifying the shards that have been distributed among the storage arrays;
- accessing the shard masks;
- generating the block of data from the shards by:
- for each shard included in the shards, identifying which shard mask included in the shard masks corresponds to said each shard;
- performing a binary AND operation on each shard and said each shard's corresponding shard mask to generate a set of unmasked shards;
- and
- performing a binary OR operation on the set of unmasked shards to generate the block of data,
- wherein each shard in said shards includes bits that are randomly generated noise bits, and
- wherein each shard in said shards includes bits that are randomly generated noise bits.
Dependencies are inferred from the claim text.