Method and system for encryption and assured deletion of information

A method for encryption and assured deletion of information, the method comprising the steps of:

• sorting fields of original information into at least two sensitivity levels wherein a user having access to fields of a certain sensitivity level also has access to fields of sensitivity levels lower than that level, but not vice versa;
• generating an encryption key and key shards thereof based on a predetermined threshold at each sensitivity level, and creating mapping between the fields of the original information and the key shards at each sensitivity level,
• based on the encryption keys at each sensitivity level, encrypting fields of the original information at the corresponding sensitivity level and deleting the fields of the original information and the encryption key;
• and
• in response to a recover request, recovering the encryption key based on the key shards at each sensitivity level and performing decryption of encrypted fields of the original information, so as to recover the original information,
• wherein the steps of sorting fields of original information and generating encryption key and key shards thereof is performed by a primary server, wherein the primary server distributes the key shards to one or more secondary servers, and wherein the recover request is issued by an arbitrary terminal.