System and method for improving data security using dynamic data fragmentation and data generation
AssigneeBank of America Corporation
InventorsManu Kurian, Michael R. Young
Life of this patent
Estimating the term…
Abstract
A system for implementing data security using dynamic data fragmentation and storage is disclosed. The system accesses digital content and splits the digital content into a set of data shards according to a splitting rule. The splitting rule indicates that each data shard combined with a respective pseudo data shard should appear as the digital content. The system generates a pseudo data shard such that the first data shard together with the pseudo data shard appears as the digital content. The pseudo data shard comprises pseudo information that is a counterpart to the original information indicated in other data shards. The system communicates the first data shard and the pseudo data shard to a database.
Claims14
A system for implementing data security using dynamic data fragmentation and storage, comprising:
- a memory configured to store digital content, wherein the digital content comprises one or more files, one or more documents, or code;
- and
- a processor, operably coupled to the memory, and configured to:
- access the digital content;
- split, using a machine learning algorithm, the digital content into a set of data shards according to a splitting rule, wherein:
- the splitting rule indicates that each data shard, when combined with a respective pseudo data shard, should appear as the digital content;
- the set of data shards comprises a first data shard and a second data shard;
- for the first data shard, generate a first pseudo data shard such that the first data shard together with the first pseudo data shard appear as the digital content, wherein:
- the first pseudo data shard comprises pseudo information that is a counterpart to original information indicated in the second data shard;
- and
- the first data shard and the first pseudo data shard form a first data block;
- communicate the first data block to a first database;
- generate a map data that indicates that the first data block is communicated to the first database, and that the first data block is comprised of the first data shard and the first pseudo data shard;
- for the second data shard, generate a second pseudo data shard, such that the second data shard together with the second pseudo data shard appear as the digital content, wherein:
- the second pseudo data shard comprises pseudo information that is a counterpart to original information indicated in the first data shard;
- and
- the second data shard and the second pseudo data shard form a second data block;
- and
- communicate the second data block to a second database;
- wherein the map data further indicates that the second data block is communicated to the second database, and that the second data block is comprised of the second data shard and the second pseudo data shard;
- receive a request to access the digital content;
- in response to receiving the request:
- determine, by referencing the map data, that the first data block resides within the first database;
- retrieve the first data block from the first database;
- separate the first data shard from the first pseudo data shard;
- determine, by referencing the map data, that the second data block resides within the second database;
- retrieve the second data block from the second database;
- separate the second data shard from the second pseudo data shard;
- and
- combine the first data shard and the second data shard to form the digital content.
A method for implementing data security using dynamic data fragmentation and storage, comprising:
- accessing digital content, wherein the digital content comprises one or more files, one or more documents, or code;
- splitting, using a machine learning algorithm, the digital content into a set of data shards according to a splitting rule, wherein:
- the splitting rule indicates that each data shard, when combined with a respective pseudo data shard, should appear as the digital content;
- the set of data shards comprises a first data shard and a second data shard;
- for the first data shard, generating a first pseudo data shard such that the first data shard together with the first pseudo data shard appear as the digital content, wherein:
- the first pseudo data shard comprises pseudo information that is a counterpart to original information indicated in the second data shard;
- and
- the first data shard and the first pseudo data shard form a first data block;
- communicating the first data block to a first database;
- and
- generating a map data that indicates that the first data block is communicated to the first database, and that the first data block is comprised of the first data shard and the first pseudo data shard;
- for the second data shard, generating a second pseudo data shard such that the second data shard together with the second pseudo data shard appear as the digital content, wherein:
- the second pseudo data shard comprises pseudo information that is a counterpart to original information indicated in the first data shard;
- and
- the second data shard and the second pseudo data shard form a second data block;
- and
- communicating the second data block to a second database;
- wherein the map data further indicates that the second data block is communicated to the second database, and that the second data block is comprised of the second data shard and the second pseudo data shard;
- receiving a request to access the digital content;
- in response to receiving the request:
- determining, by referencing the map data, that the first data block resides within the first database;
- retrieving the first data block from the first database;
- separating the first data shard from the first pseudo data shard;
- determining, by referencing the map data, that the second data block resides within the second database;
- retrieving the second data block from the second database;
- separating the second data shard from the second pseudo data shard;
- and
- combining the first data shard and the second data shard to form the digital content.
A non-transitory computer-readable medium storing instructions that, when executed by a processor, cause the processor to:
- access digital content, wherein the digital content comprises one or more files, one or more documents, or code;
- split, using a machine learning algorithm, the digital content into a set of data shards according to a splitting rule, wherein:
- the splitting rule indicates that each data shard, when combined with a respective pseudo data shard, should appear as the digital content;
- the set of data shards comprises a first data shard and a second data shard;
- for the first data shard, generate a first pseudo data shard such that the first data shard together with the first pseudo data shard appear as the digital content, wherein:
- the first pseudo data shard comprises pseudo information that is a counterpart to original information indicated in the second data shard;
- and
- the first data shard and the first pseudo data shard form a first data block;
- communicate the first data block to a first database;
- and
- generate a map data that indicates that the first data block is communicated to the first database, and that the first data block is comprised of the first data shard and the first pseudo data shard;
- for the second data shard, generate a second pseudo data shard such that the second data shard together with the second pseudo data shard appear as the digital content, wherein:
- the second pseudo data shard comprises pseudo information that is a counterpart to original information indicated in the first data shard;
- and
- the second data shard and the second pseudo data shard form a second data block;
- and
- communicate the second data block to a second database;
- wherein the map data further indicates that the second data block is communicated to the second database, and that the second data block is comprised of the second data shard and the second pseudo data shard;
- receive a request to access the digital content;
- in response to receiving the request:
- determine, by referencing the map data, that the first data block resides within the first database;
- retrieve the first data block from the first database;
- separate the first data shard from the first pseudo data shard;
- determine, by referencing the map data, that the second data block resides within the second database;
- retrieve the second data block from the second database;
- separate the second data shard from the second pseudo data shard;
- and
- combine the first data shard and the second data shard to form the digital content.
Dependencies are inferred from the claim text.