Dynamic Key Fragmentation for Quantum-Resistant Data Transport

The patent divides the encryption key into multiple separate key fragments that are distributed across different physical storage devices. Instead of using a single 256-bit key, the system uses multiple smaller key pieces (e.g., 128-bit keys) stored on separate devices. This segmentation makes it impossible for attackers to compromise all key fragments simultaneously, thereby resolving the contradiction between encryption simplicity and security against quantum/hardware attacks.

The patent introduces a physical dimension to key storage by distributing key fragments across multiple separate storage devices located in different physical locations. This spatial distribution adds a new dimension to security that complements the cryptographic dimension, making the system resistant to both computational attacks and physical compromise of individual storage devices.

The system segments large encryption keys into multiple smaller key fragments stored on separate devices. For example, a 256-bit key is divided into two 128-bit key fragments stored on different storage devices. This segmentation reduces the complexity of key management compared to handling a single large key, as each fragment can be independently managed and the system only needs to coordinate their combination during encryption/decryption operations.

The patent performs key fragment generation and distribution as preliminary actions before data encryption. The key fragments are pre-generated and distributed to separate storage devices in advance, so that when data needs to be encrypted, the fragments are already available and can be quickly combined without complex real-time key management operations.

The patent separates the encrypted data and encryption keys onto different physical storage devices. The encrypted data is stored on one or more data storage devices while the encryption key fragments are stored on separate key storage devices. This physical separation ensures that even if one device is stolen or corrupted, the attacker cannot access both the data and the keys, thereby eliminating the harmful factor of data exposure from device theft or corruption.

The patent introduces a key management system as an intermediary that coordinates between the data storage devices and key storage devices. This intermediary manages the distribution and combination of key fragments, providing a layer of abstraction that maintains security while enabling efficient data access operations.

The system segments the storage architecture into distinct data storage devices and key storage devices, with each component having a specific, well-defined function. This segmentation actually simplifies the overall system design by creating modular components that can be independently managed, rather than creating a complex integrated system. Each device type can be optimized for its specific purpose and managed separately.

The patent uses multiple copies of the same encryption key fragment stored on different storage devices. Instead of creating entirely different key structures, the system creates redundant copies of key fragments that can be combined to reconstruct the full key. This copying approach simplifies key management while providing security, as the same key material is replicated across multiple devices rather than requiring complex key derivation operations.