Cryptographic key split binder for use with tagged data elements

A process of creating a cryptographic key to secure one or more respectively tagged data elements, comprising:

• generating a plurality of cryptographic key splits from seed data;
• and
• binding the cryptographic key splits together to produce the cryptographic key;
• wherein at least one of the cryptographic key splits is based on at least one of the one or more respective tags.

A process of cryptographically securing one or more respectively tagged data elements, comprising:

• generating a plurality of cryptographic key splits from seed data;
• binding the cryptographic key splits together to produce a cryptographic key;
• and
• encrypting the one or more respectively tagged data elements with the cryptographic key;
• wherein at least one of the cryptographic key splits is based on at least one of the one or more respective tags.

A process of transporting keying data corresponding to a cryptographic key used to decipher one or more respectively tagged, cryptographically secured, data elements, comprising:

• selecting the keying data corresponding to the cryptographic key;
• and
• sending the selected keying data to an intended recipient;
• wherein the keying data is encrypted before sending;
• and
• wherein the keying data is encrypted based on an encryption key and an encryption algorithm, and the keying data comprises an encryption algorithm identifier corresponding to the encryption algorithm.

A method of providing multi-level cryptographic security of respectively tagged data elements, comprising:

• accessing a constructive key manager;
• selecting at least one respectively tagged data element from a data instance;
• for each selected data element,
• generating a cryptographic key based on the respective tag of the selected data element,
• encrypting the selected data element based on the cryptographic key,
• labeling the encrypted data element with the respective tag, and
• storing the respectively tagged encrypted data element;
• reading the respective tag of the at least one encrypted data element;
• determining access authorization based on the respective tag;
• and
• decrypting the data element if access authorization is granted.