Secure Recovery of Security Credential Information
AssigneeSoftiron Limited
InventorsCharles C. Ruffino, Stephen Hardwick, Mark Chen
Life of this patent
Estimating the term…
Abstract
A system includes a shard generation circuit configured to create shards from a security credential, and to recreate the security credential from the shards. The system includes a secret generation circuit configured to create secrets from a shard and to recreate the shard from a subset of the secrets, and store at least one of secrets in a location. The system includes another secret generation circuit configured to create secrets from another shard, recreate the other shard of the shards, and store at least one the shards in another, different location.
Claims46
A system, comprising:
- a shard generation circuit configured to:
- create a plurality of shards from a security credential;
- and
- recreate the security credential from the plurality of shards;
- a first secret generation circuit configured to:
- create a plurality of first secrets from a first shard of the plurality of shards;
- recreate the first shard of the plurality of shards from a subset of the plurality of secrets;
- and
- store at least one of the plurality of first secrets in a first location;
- and
- a second secret generation circuit configured to:
- create a plurality of second secrets from a second shard of the plurality of shards;
- recreate the second shard of the plurality of shards from a subset of the plurality of second secrets;
- and
- store at least one of the plurality of second secrets in a second location, the second location in a different machine than the first location.
A method, comprising, on a server:
- creating a plurality of shards from a security credential;
- creating a plurality of first secrets from a first shard of the plurality of shards;
- creating a plurality of second secrets from a second shard of the plurality of shards;
- storing at least one of the plurality of first secrets in a first location;
- storing at least one of the plurality of second secrets in a second location, the second location in a different machine than the first location;
- recreating the first shard of the plurality of shards from a subset of the plurality of secrets after retrieval of the at least one of the plurality of first secrets from the first location;
- recreating the second shard of the plurality of shards from a subset of the plurality of second secrets after retrieval of the at least one of the plurality of second secrets from the second location;
- and
- recreating the security credential from the plurality of shards as recreated from the first and second secrets.
Dependencies are inferred from the claim text.