Data Sharding With Pseudo Fragments for Breach-Resistant Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data security systems are vulnerable to persistent cyberattacks and have a single point of failure, allowing unauthorized access to data once security measures are breached.
Innovation Solution
A system that splits digital content into data shards and appends dynamic pseudo data shards, making each shard unusable without a specific combination protocol, and stores these shards in different databases with deceptive pseudo data shards to mislead attackers, using machine learning for obfuscation and reassembly.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is stored in a database with security measures and protocols, then data protection is provided, but if a bad actor passes the security measures, they can gain access to the data
Solution Approach 1:
The patent divides data into multiple data shards and stores them across different databases. Each shard alone is unusable, and even if some databases are compromised, the complete data cannot be reconstructed without all shards and the decryption key, thereby resolving the contradiction between providing data protection and preventing unauthorized access.
Solution Approach 2:
The patent introduces an intermediary decryption key that is required to reconstruct the original data from the shards. This key acts as a mediator between the stored shards and the usable data, ensuring that even if shards are accessed unauthorizedly, the data remains protected without the key.
2Reliability
If data is split into multiple parts and stored across different locations, then access complexity increases, but persistent cyberattacks can still find and access the complete data
Solution Approach 1:
The patent segments data into multiple shards distributed across different databases, increasing access complexity for attackers while maintaining security. Each shard is stored in a separate location, and reconstructing the complete data requires accessing all shards and having the decryption key, thereby enhancing security against persistent cyberattacks.
Solution Approach 2:
The patent creates a composite data structure where multiple shards (analogous to different materials) are combined with a decryption key to form the complete usable data. This composite approach ensures that no single component reveals the complete information, resolving the contradiction between security and access complexity.
3Ease of operation
If a single point of access is implemented for data, then data retrieval is simplified, but it becomes a single point of failure if breached
Solution Approach 1:
The patent eliminates the single point of access by dividing data into multiple shards stored across different databases. Each shard can be accessed independently, but none provide complete data alone. This segmentation removes the single point of failure while maintaining controlled access through the decryption key mechanism.
Solution Approach 2:
The patent adds a new dimension to data access by introducing the decryption key as a separate required component. Instead of a single access point, data retrieval now requires both accessing the shards and possessing the key, creating a multi-dimensional access control system that eliminates single points of failure.
Data Source
AI summary
A system for implementing data security using dynamic data fragmentation and storage is disclosed. The system accesses digital content and splits the digital content into a set of data shards according to a splitting rule. The splitting rule indicates that each data shard combined with a respective pseudo data shard should appear as the digital content. The system generates a pseudo data shard such that the first data shard together with the pseudo data shard appears as the digital content. The pseudo data shard comprises pseudo information that is a counterpart to the original information indicated in other data shards. The system communicates the first data shard and the pseudo data shard to a database.