Passwordless security system for data-at-rest

Abstract

The disclosed embodiments relate to a passwordless method for securing data-at-rest. The method includes encrypting and / or decrypting data with a cryptographic key. For example, the encrypted data canbe stored on a non-transitory computer memory of a first device. The method can include generating key shards based on the cryptographic key, which can be reconstituted from the key shards, and distributing the key shards among devices such that the encrypted data is secured at the first device because the first device is incapable of decrypting the encrypted data due to an absence of the cryptographic key.

Description

[0001] Cross References to Related Applications [0002] This application claims priority to U.S. Patent Application No. 16 / 106,564, filed August 21, 2018, which claims U.S. Provisional Patent Application No. 62 / 643,539, titled "Password-Free Encryption of Data at Rest," both of which are hereby incorporated by reference in their entirety. technical field [0003] The disclosed teachings generally relate to data encryption and / or decryption. More particularly, the disclosed teachings relate to password-free encryption and / or decryption techniques for securing data at rest. Background technique [0004] The term "data-at-rest" is often used as a complement to "data-in-use" and "data-in-transit", which together define Three stages of digital data. Data at rest generally refers to inactive data that is stored physically in digital form (for example, databases, data warehouses, spreadsheets, archives, tapes, offsite backups (off site backups), mobile devices). For example,...

AI Technical Summary

Problems solved by technology

As a result, securing data at rest often involves high-risk "all or nothing" approaches, or prohibitively complex sets of keys that are stored and managed separately from the file

Images