Removing information from data

1. An apparatus comprising:

a first information-restricted domain;

a first unrestricted domain;

a first computing device in the first unrestricted domain, the first computing device comprising a program on non-transitory memory and a processor that runs the program, the program comprising a first function that uses a non-informational data E and informational data as inputs to generate non-informational data D as an output, the first computing device moving the non-informational data D to storage in the first information-restricted domain and retaining in said unrestricted domain a location of said storage;

a second computing device in the first information restricted domain, the second computing device managing storage of the non-informational data D in the first information-restricted domain,

wherein the non-informational data E is usable for regenerating said informational data from the non-informational data D retrieved from the first information-restricted domain by said first computing device using said storage location, and

wherein the non-informational data E and the non-informational data D are never simultaneously present in the first information-restricted domain.

2. The apparatus of claim 1 wherein a size of the non-informational data E is equivalent to or greater than a size of the informational data.

3. The apparatus of claim 2 comprising a seed and a second function that generates the non-informational data E from the seed, wherein the seed is smaller than the non-informational data E and the non-informational data E comprises a pseudorandom string of bits.

4. The apparatus of claim 3 comprising a second information-restricted domain comprising a storage device on which the seed is stored, and wherein the seed is not maintained in the first unrestricted domain when not in use.

5. The apparatus of claim 1 comprising an inverse function that uses the non-informational data E and non-informational data D from the first information-restricted domain as inputs to re-generate the informational data as an output in the first unrestricted domain.

6. The apparatus of claim 1 comprising a second unrestricted domain comprising an inverse function that uses sets of non-informational data E and sets of non-informational data D as inputs to generate a transaction record.

7. The apparatus of claim 1 wherein the first function comprises an exclusive OR function.

8. The apparatus of claim 1 comprising program code that generates at least one masking non-informational data E from the non-informational data E, the masking non-informational data E comprising a subset of bits of the non-informational data E.

9. The apparatus of claim 1 comprising program code that triggers generation of a new non-informational data E and new non-informational data D, the new non-informational data E replacing the non-informational data E in storage and the new non-informational data D replacing the non-informational data D in storage.

10. The apparatus of claim 9 wherein the program code triggers generation of the new non-informational data E and the new non-informational data D in response to a write to the informational data.

11. A method comprising:

generating non-informational data D as an output in response to a non-informational data E and informational data as inputs with a first function on a computing device in a first information-restricted domain; moving the non-informational data D to storage in a first information-restricted domain and retaining in said unrestricted domain a location of said storage;

managing storage of the non-informational data D in the first information-restricted domain with a second computing device,

wherein the non-informational data E is usable for regenerating said informational data from the non-informational data D retrieved from the first information-restricted domain by said first computing device using said storage location, and

wherein the non-informational data E and the non-informational data D are never simultaneously present in the first information-restricted domain.

12. The method of 11 . comprising generating the non-informational data E with a size equivalent to or greater than a size of the informational.

13. The method of claim 12 comprising generating the non-informational data E from a seed using a second function, wherein the seed is smaller than the non-informational data E and the non-informational data E comprises a pseudorandom string of bits.

14. The method of claim 13 comprising storing the seed on a storage device in a second information-restricted domain, and flushing the seed from the first unrestricted domain when the seed is not in use.

15. The method of claim 11 comprising re-generating the informational data as an output in the first unrestricted domain using an inverse function that uses the non-informational data E and non-informational data D from the first information-restricted domain as inputs.

16. The method of claim 11 comprising generating a transaction record comprising sets of informational data using sets of non-informational data E and sets of non-informational data D as inputs to an inverse function.

17. The method of claim 11 comprising using an exclusive OR function as the first function.

18. The method of claim 11 comprising generating at least one masking non-informational data E from the non-informational data E, the masking non-informational data E comprising a subset of bits of the non-informational data E.

19. The method of claim 11 triggering generation of a new non-informational data E and new non-informational data D, the new non-informational data E replacing the non-informational data E in storage and the new non-informational data D replacing the non-informational data D in storage.

20. The method of claim 19 comprising triggering generation of the new non-informational data E and the new non-informational data D in response to a write to the informational data.