Data Fragmentation and Reconstruction for Secure Migration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data security methods restrict data migration and backup operations, as sensitive data like private keys cannot be easily transferred to new devices, limiting device upgrades and maintenance while exposing data to risks during migration.
Innovation Solution
Data fragmentation across multiple secure entities, using random number generation and chunking processes to obscure and distribute fragments, allowing secure reconstruction on new devices without exposing the data to malicious entities.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is stored in secure storage of a computing device, then data security is improved, but data migration and backup operations are restricted
Solution Approach 1:
The patent divides sensitive data into multiple fragments using secret sharing schemes (e.g., Shamir's Secret Sharing). Each fragment is stored in different secure locations or entities, so that no single entity possesses the complete sensitive data. This segmentation enables data migration by allowing fragments to be transferred independently to new devices while maintaining security, as the full data remains reconstructible only through combination of all fragments.
2Adaptability or versatility
If data is migrated to a new device, then device upgrades are enabled, but data security is compromised during migration
Solution Approach 1:
By segmenting data into fragments before migration, the patent allows data to be transferred to new devices in a secure manner. Each fragment can be migrated independently through secure channels, and the fragmentation itself provides security during transit since no single fragment reveals the complete sensitive information.
Solution Approach 2:
The patent introduces secure intermediaries (such as trusted entities or secure enclaves) that facilitate the migration process. These intermediaries help transfer data fragments between devices while maintaining security protocols, acting as mediators that ensure data remains protected during the migration transition.
3Reliability
If data is kept in secure storage, then data privacy is maintained, but backup operations are limited
Solution Approach 1:
The patent enables backup operations by segmenting data into fragments that can be distributed across multiple backup locations or entities. Each fragment can be backed up independently to different secure locations, allowing comprehensive backup coverage while maintaining privacy, as no single backup location contains the complete sensitive data.
Data Source
AI summary
One or more computing devices, systems, and/or methods for data fragmentation and reconstruction are provided. Random number generation information, indicating a number of fragments into which data stored by a client device is to be fragmented, is received. The data is fragmented according to the number of fragments as a set of fragments. Authentication data is incorporated with the set of fragments. A set of entities capable of storing the set of fragments with the authentication data is identified. The set of fragments with the authentication data are stored across the set of entities.