Methods for secure data storage

A server for secure data storage comprising:

• a processor;
• a memory coupled to the processor;
• and
• a non-transitory computer-readable medium storing instructions that are operative, when executed by the processor, to:
• construct an encryption key from a plurality of key elements, the constructing including:
• distributing the plurality of key elements to a plurality of key maintenance entities, each of the plurality of key maintenance entities employing a plurality of independent safe guards for their respective key elements of the plurality of key elements;
• and
• require access to the plurality of key elements to construct the encryption key;
• encrypt data at a client node, the encrypting including:
• receiving a subset of the plurality of key elements via a twice-encrypted communications channel;
• and
• regenerating the encryption key at the client node;
• and
• after encrypting data, delete the subset of the plurality of key elements received over the twice-encrypted communications channel, retaining any of the plurality of key elements previously stored at the client node;
• storing the encrypted data in one or more servers coupled to the client node;
• and
• decrypt the data at the client node, the decrypting including:
• receiving the subset of the plurality of key elements via the twice-encrypted communications channel;
• and
• regenerating the encryption key at the client node;
• and
• after decrypting the data, deleting the subset of the plurality of key elements received over the twice-encrypted communications channel, retaining any of the plurality of key elements previously stored at the client node.