Secure data parser method and system
AssigneeSecurity First Innovations, LLC
InventorsMark S. O'Hare, Rick L. Orsini, Roger S. Davenport, Steven Winick
Life of this patent
Estimating the term…
Abstract
A secure data parser is provided that may be integrated into any suitable system for securely storing and communicating data. The secure data parser parses data and then splits the data into multiple portions that are stored or communicated distinctly. Encryption of the original data, the portions of data, or both may be employed for additional security. The secure data parser may be used to protect data in motion by splitting original data into portions of data, that may be communicated using multiple communications paths.
Claims20
A method comprising:
- obtaining, by a computer system, a key encryption key;
- obtaining, by the computer system, a first network data packet of a video broadcasting application;
- obtaining, by the computer system, first data from the first network data packet of the video broadcasting application;
- splitting, by the computer system, the first data of the first network data packet of the video broadcasting application into a first plurality of data portions, wherein each of the first plurality of data portions comprises less than all of the first data, and wherein the first data can be reassembled using two or more of the first plurality of data portions;
- obtaining, by the computer system, a first plurality of data encryption keys which are distinct from each other;
- encrypting, by the computer system, each of the first plurality of data portions with a respective one of the first plurality of data encryption keys to provide a first plurality of encrypted data portions;
- encrypting, by the computer system, each of the first plurality of data encryption keys with the key encryption key to provide a first plurality of encrypted data encryption keys;
- storing, by the computer system, each of the first plurality of encrypted data portions with a respective data indicative of a respective one of the first plurality of encrypted data encryption keys;
- and
- storing, by the computer system, the key encryption key separate from the first plurality of encrypted data portions and the respective data indicative of the respective one of the first plurality of encrypted data encryption keys.
A computer system comprising:
- at least one hardware processor configured to:
- obtain a key encryption key;
- obtain a first network data packet of a video broadcasting application;
- obtain first data from the first network data packet of the video broadcasting application;
- split the first data of the first network data packet of the video broadcasting application into a first plurality of data portions, wherein each of the first plurality of data portions comprises less than all of the first data, and wherein the first data can be reassembled using two or more of the first plurality of data portions;
- obtain a first plurality of data encryption keys which are distinct from each other;
- encrypt each of the first plurality of data portions with a respective one of the first plurality of data encryption keys to provide a first plurality of encrypted data portions;
- encrypt each of the first plurality of data encryption keys with the key encryption key to provide a first plurality of encrypted data encryption keys;
- store each of the first plurality of encrypted data portions with a respective data indicative of a respective one of the first plurality of encrypted data encryption keys;
- and
- store the key encryption key separate from the first plurality of encrypted data portions and the respective data indicative of the respective one of the first plurality of encrypted data encryption keys.
A method comprising:
- obtaining, by a computer system, a key encryption key;
- obtaining, by the computer system, a first network data packet;
- obtaining, by the computer system, first data from the first network data packet;
- splitting, by the computer system, the first data of the first network data packet into a first plurality of data portions, wherein each of the first plurality of data portions comprises less than all of the first data, and wherein the first data can be reassembled using two or more of the first plurality of data portions;
- obtaining, by the computer system, a first plurality of data encryption keys which are distinct from each other;
- encrypting, by the computer system, each of the first plurality of data portions with a respective one of the first plurality of data encryption keys to provide a first plurality of encrypted data portions;
- encrypting, by the computer system, each of the first plurality of data encryption keys with the key encryption key to provide a first plurality of encrypted data encryption keys;
- storing, by the computer system, each of the first plurality of encrypted data portions with a respective data indicative of a respective one of the first plurality of encrypted data encryption keys;
- and
- storing, by the computer system, the key encryption key separate from the first plurality of encrypted data portions and the respective data indicative of the respective one of the first plurality of encrypted data encryption keys.
Dependencies are inferred from the claim text.