Variable Data Segmentation and Chaff for Distributed Storage Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data storage methods lack sufficient security measures to protect sensitive information, particularly personal identifying information (PII) and transaction data, as they are vulnerable to compromise when stored across various parties.
Innovation Solution
The data is segregated into variable segments and combined with chaff segments, then encrypted and distributed across multiple storage devices using biometrics for authentication, with reconstruction records stored separately to enhance security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is stored in distributed storage across multiple parties, then data availability and storage capacity are improved, but data security and vulnerability to compromise worsen
Solution Approach 1:
The patent divides data into multiple segments and distributes them across different storage devices and parties. Each party holds only a portion of the data, making it difficult for any single party to access or compromise the complete data set. This segmentation approach maintains data availability while improving security by eliminating single points of failure and reducing the impact of any single compromise.
Solution Approach 2:
The patent implements multi-layered security measures where encryption is nested within segmentation, and authentication mechanisms are nested within the storage architecture. Biometric authentication and encryption keys are layered to provide multiple barriers against unauthorized access, creating a nested defense-in-depth strategy that protects distributed data storage.
2Object-affected harmful factors
If traditional encryption methods are used to protect sensitive data, then data confidentiality is improved, but ease of access and retrieval worsens
Solution Approach 1:
The patent implements automated authentication and decryption systems that use biometric data to automatically unlock encrypted segments. The system self-manages the complex cryptographic operations, key management, and segment reassembly processes, eliminating the need for users to manually handle encryption/decryption operations while maintaining strong security protection.
3Device complexity
If data is divided into fixed segments for distributed storage, then storage organization is improved, but security against reconstruction attacks worsens
Solution Approach 1:
The patent employs dynamic segmentation where the data is divided into a variable number of segments rather than fixed segments. The segmentation strategy can adapt based on security requirements, storage availability, and threat models. This dynamic approach makes it more difficult for attackers to predict or exploit segment structures, while the system maintains efficient organization through adaptive management of segment distribution.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Systems and methods are provided for storing data blocks in distributed storage. One example computer-implemented method includes, in response to receipt of a data block comprising data, generating a value N for the data block, wherein the value N includes a variable integer greater than one and dividing the data block into N segments, wherein each segment includes a portion of the data. The method also includes generating a value M for the data block, wherein the value M includes a variable integer greater than or equal to one, and adding M segments of chaff to the N segments. The method then includes encrypting the N segments and the M segments of chaff and distributing the M segments and the N segments in distributed storage, wherein the N segments and the M segments of chaff are stored in multiple different storage devices included in the distributed storage.