Fault-tolerant access to digital assets without storing sensitive security data for decryption

A non-transitory, computer-readable medium storing source code that, when executed by a processor, performs a method in a security device for securing and providing access to protected digital assets, with live data redundancy and without using stored sensitive security data, for decryption, the method comprising:

• receiving
• a request to protect a digital asset, and in response:
• defining and storing a group of functions for sensitive security data collection and a plurality of distinct subgroups of functions needed for decryption, wherein the sensitive security data is derived from live data retrieved in real-time from a user context, and wherein a function describes a live data requirement that is converted to an X value upon collection;
• creating an encryption key from a first subgroup of functions from a plurality of distinct subgroups of functions, wherein the plurality of distinct subgroups are each selected from the group of functions;
• encrypting the digital asset with the encryption key sourced from the first subgroup of functions using the live data, for storage;
• generating a polynomial, wherein coefficients to the polynomial are derived from bits of the encryption key;
• calculating Y values as solutions to the polynomial, by using a plurality of distinct X values sourced from the plurality of distinct subgroups of functions using the live data including the first subgroup of functions;
• and
• deleting the encryption key and the live sensitive data, and storing the identifiers of the plurality of the subgroups of functions and a Y value associated with each of the plurality of subgroups of functions;
• subsequently receiving a request for access to the digital asset, and in response:
• obtaining from a subgroup of functions current-live sensitive data in real-time from a current user context,
• creating a decryption key wherein bits of the decryption key are derived from the coefficients of a polynomial, wherein the coefficients are regenerated from both the stored Y-values and current-live sensitive data, wherein the current-live sensitive data is sourced from a subgroup of functions from the plurality of subgroups;
• and
• decrypting the digital asset with the decryption key, derived from the current live sensitive security data, for access to the digital asset.

A digital assets server to secure and provide access to protected digital assets, with live data redundancy and without using stored sensitive security data, for decryption, the digital assets server comprising:

• a processor;
• a network interface communicatively coupled to the processor and to the hybrid wireless network;
• and
• a memory, communicatively coupled to the processor and storing source code, that when executed by the processor, cause the processor to:
• a receive a request to protect a digital asset, and in response, defines a group of functions for initial sensitive security data collection and a plurality of distinct subgroups of functions needed for decryption, wherein the initial sensitive security data is live data retrieved in real-time from a user context, and wherein a function describes a live data requirement that is converted to an X value upon collection,
• wherein the encryption creates an encryption key from a first subgroup of functions from a plurality of distinct subgroups of functions, wherein the plurality of distinct subgroups are each selected from the group of functions,
• wherein the encryption encrypts the digital asset with the encryption key of the first subgroup of functions using the live sensitive data, for storage,
• wherein the encryption generates a polynomial, wherein coefficients to the polynomial are derived from bits of the encryption key,
• wherein the encryption calculates Y values as solutions to the polynomial, by using a plurality of distinct X values from the plurality of distinct subgroups of functions using the live sensitive data including the first subgroup of functions, and
• wherein the encryption deletes the encryption key and the live sensitive data, and stores identifiers of the plurality of subgroups of functions and a Y value associated with each of the subgroups of functions;
• wherein the monitoring subsequently receives a request for access to the digital asset, and in response,
• the decryption module obtains from a subgroup of functions current-live sensitive data in real-time from a current user context,
• wherein the encryption creates a decryption key wherein bits of the decryption key are derived from the coefficients of a polynomial, wherein the coefficients are regenerated from both the stored Y-values and the current-live sensitive data from a subgroup of functions from the plurality of subgroups, and
• wherein the decryption decrypts the digital asset with the decryption key, derived from current sensitive security data for access to the digital asset.