Bit level sharding of sensitive data for increased security
AssigneeDell Products L.P.
InventorsThomas L. Watson, Yevgeni Gehtman, Tomer Shachar, Maxim Balin, Arieh Don
Life of this patent
Estimating the term…
Abstract
Techniques for obfuscating and/or de-obfuscating data using bit-level shard masks are disclosed. Shard masks are generated. The shard masks are designed to shard a block of data into a number of shards for distribution and storage among a number of storage arrays. The shard masks shard the block of data at a bit-level granularity. The shard masks are applied to the block of data to generate the shards. The shards are then distributed among the storage arrays for storage on the storage arrays.
Claims20
A method for obfuscating data using bit-level shard masks, said method comprising:
- determining a number of storage arrays that are available for storing data;
- based at least in part on the number of storage arrays, generating shard masks, wherein the shard masks are designed to shard a block of data into a number of shards for distribution and storage among the storage arrays, and wherein the shard masks shard the block of data at a bit-level granularity;
- applying the shard masks to the block of data to generate the shards;
- and
- distributing the shards among the storage arrays for storage on the storage arrays.
A method for de-obfuscating data using bit-level shard masks, said method comprising:
- identifying a plurality shards that are distributed among a plurality of storage arrays;
- accessing a plurality of shard masks, wherein each shard mask is designed to shard a block of data into a corresponding shard, which is included among the plurality of shards, and wherein the plurality of shard masks sharded the block of data at a bit-level granularity;
- generating the block of data from the plurality of shards by:
- for each shard in the plurality of shards, identifying which shard mask in the plurality of shard masks corresponds to said each shard;
- performing a binary AND operation on each shard and said each shard's corresponding shard mask to generate a set of unmasked shards;
- and
- performing a binary OR operation on the set of unmasked shards to generate the block of data.
A method for obfuscating and de-obfuscating data using bit-level shard masks, said method comprising:
- generating shard masks, wherein the shard masks are designed to shard a block of data into a number of shards for distribution and storage among a number of storage arrays, and wherein the shard masks shard the block of data at a bit-level granularity;
- applying the shard masks to the block of data to generate the shards;
- distributing the shards among the storage arrays for storage on the storage arrays;
- after the shards have been distributed, identifying the shards that have been distributed among the storage arrays;
- accessing the shard masks;
- generating the block of data from the shards by:
- for each shard included in the shards, identifying which shard mask included in the shard masks corresponds to said each shard;
- performing a binary AND operation on each shard and said each shard's corresponding shard mask to generate a set of unmasked shards;
- and
- performing a binary OR operation on the set of unmasked shards to generate the block of data.
Dependencies are inferred from the claim text.