Securing data in a dispersed storage network using shared secret slices
View Patent ↗A data element can be encoded into multiple encoded data elements using an encoding algorithm that includes an encoding function and one or more encoder constant. The encoded data elements can be organized into multiple pillars, each having a respective pillar number. Each of the pillars is sent to a different storage unit of a distributed storage network. To recover the original data element, the encoded data elements are retrieved from storage, and the encoder constant is recovered using multiple encoded data elements. Recovering the encoder constant allows the encoding algorithm originally used to encode the data elements to be determined, and used to recover the original data element. The security of the stored data is enhanced, because an encoded data element from a single pillar is insufficient to identify the encoder constant.
1. A computing device comprising:
an interface to receive a plurality of encoded data slices from a plurality of different storage units included in a vault of a distributed storage network, each of the encoded data slices associated with a pillar having a respective pillar number, and encoded using an encoder algorithm including an encoding function and at least one encoder constant;
memory;
a processing module operably coupled to the interface and the memory, wherein the processing module is operable to implement:
a decoder to recover the at least one encoder constant and determine the encoder algorithm using the plurality of encoded data elements, the respective pillar number, and the encoding function, wherein the at least one encoder constant is recovered using more than one of the plurality of encoded data slices;
the decoder further to decode the plurality of encoded data slices to generate a decoded data element using the encoding algorithm.
2. The computing device of claim 1 , wherein the plurality of encoded data slices includes a greater number of encoded data slices than required to recover the encoder constant, the computing device further comprising:
the decoder further to recover the at least one encoder constant and determine the encoder algorithm using fewer than all of the plurality of encoded data elements.
3. The computing device of claim 2 , further comprising:
the decoder to verify an integrity of the decoded data element by solving for the at least one encoder constant, wherein solving includes decoding more than one of the plurality of encoded data segments using the encoding algorithm.
4. The computing device of claim 2 , further comprising:
the decoder to verify an integrity of the plurality of encoded data slices by recovering the at least one encoder constant using at least one more encoded data slice of the plurality of encoded data elements than minimally required.
5. A method for execution by a processing module of a computing device, the method comprising:
receiving, via an interface of the computing device, a plurality of encoded data slices from a plurality of different storage units included in a vault of a distributed storage network, each of the encoded data slices associated with a pillar having a respective pillar number, and encoded using an encoder algorithm including an encoding function and at least one encoder constant;
recovering, by the processing module, the at least one encoder constant and determining the encoder algorithm using the plurality of encoded data slices, the respective pillar number, and the encoding function, wherein the at least one encoder constant is recovered using more than one of the plurality of encoded data slices;
decoding, by the processing module, the plurality of encoded data slices to generate a decoded data element using the encoding algorithm.
6. The method of claim 5 , wherein the plurality of encoded data slices includes a greater number of encoded data slices than required to recover the encoder constant, the method further comprising:
recovering the at least one encoder constant and determining the encoder algorithm using fewer than all of the plurality of encoded data slices.
7. The method of claim 5 , further comprising:
verifying an integrity of the decoded data element by solving for the at least one encoder constant, the solving including decoding more than one of the plurality of encoded data slices using the encoding algorithm.
8. The method of claim 5 , further comprising:
verifying an integrity of the plurality of encoded data slices by recovering the at least one encoder constant using at least one more encoded data slice of the plurality of encoded data slices than minimally required.