Distribute Encryption Keys Securely and Efficiently

A method comprising:

• receiving, at data processing hardware, a table associated with a particular user, the table comprising a plurality of data blocks;
• splitting, by the data processing hardware, the table into a plurality of tablets, each tablet comprising a corresponding portion of the plurality of data blocks of the table;
• generating, by the data processing hardware, a resource key uniquely associated with the table;
• for each tablet of the plurality of tablets:
• generating, by the data processing hardware, a unique data encryption key for the corresponding tablet;
• and
• encrypting, by the data processing hardware, the corresponding tablet with the unique data encryption key;
• encrypting, by the data processing hardware, each data encryption key with the resource key;
• distributing, by the data processing hardware, control of each encrypted tablet and each corresponding encrypted data encryption key to a plurality of tablet servers, each tablet server in the plurality of tablet servers independent from each other tablet server in the plurality of tablet servers and controlling one or more of the encrypted tablets from the table;
• and
• transmitting, by the data processing hardware, the resource key to a remote entity, the resource key when received by the remote entity causing the remote entity to:
• encrypt the resource key with a user key associated with the particular user and kept secret from the data processing hardware;
• and
• transmit the encrypted resource key to the data processing hardware.