Secure storage of data via a distributed ledger system
The present disclosure describes systems and methods for use of a distributed ledger system to securely store data. Encrypted data files of one or more computing devices may be distributed to processing nodes of the distributed ledger system. The data may be subsequently retrieved and decrypted by the computing device or another device. Because the distributed ledger system creates a chain of hashes of prior blocks, the data may be immune to modification or corruption, as any changes to blocks storing the encrypted data may be immediately apparent.
1. A method for secure storage of data via distributed ledgers, comprising:
encrypting, by a processor of a first device, one or more files in a storage device maintained by the first device using a first key;
generating, by a processor of the first device, an access key;
transmitting, by the first device to a second device operating as a full node for a distributed immutable ledger, the encrypted one or more files and the access key, receipt of the encrypted one or more files and the access key causing the second device to append the encrypted one or more files to the distributed immutable ledger at an address corresponding to the access key; and
providing, by the first device to a third device, the access key and the first key, the third device configured to:
retrieve the encrypted one or more files from the distributed immutable ledger via the access key,
decrypt the one or more files using the first key,
compare the decrypted one or more files to a second one or more files stored in memory of the third device, and
responsive to a difference between the decrypted one or more files and the second one or more files, identify the third device as compromised or corrupted.
2. The method of claim 1 , further comprising collecting the one or more files, by the first device from one or more additional devices.
3. The method of claim 1 , wherein the one or more files comprise configuration files.
4. The method of claim 1 , wherein encrypting the one or more files further comprises encrypting, by an encryption coprocessor of the first device, the one or more files.
5. The method of claim 1 , further comprising generating the first key and a second key, the first key and second key used for encrypting the one or more files.
6. The method of claim 1 , wherein the access key comprises a user identifier.
7. The method of claim 1 , wherein the access key comprises the first key.
8. A system for secure storage of data via distributed ledgers, comprising:
a first device, comprising an encryption module, a network interface, and a storage device comprising one or more files, and a first key;
wherein the encryption module is configured to:
encrypt one or more files in a storage device maintained by the first device using the first key, and
generate an access key;
wherein the network interface is configured to:
transmit, to a second device operating as a full node for a distributed immutable ledger, the encrypted one or more files and the access key, such that receipt of the encrypted one or more files and the access key causes the second device to append the encrypted one or more files to the distributed immutable ledger at an address corresponding to the access key, and
provide, to a third device, the access key and the first key, the third device configured to:
retrieve the encrypted one or more files from the distributed immutable ledger via the access key,
decrypt the one or more files using the first key,
compare the decrypted one or more files to a second one or more files stored in memory of the third device, and
responsive to a difference between the decrypted one or more files and the second one or more files, identify the third device as compromised or corrupted.
9. The system of claim 8 , wherein the network interface is further configured for collecting the one or more files from one or more additional devices.
10. The system of claim 8 , wherein the one or more files comprise configuration files.
11. The system of claim 8 , wherein the encryption module comprises a hardware encryption coprocessor.
12. The system of claim 8 , wherein the encryption module is configured to generate the first key and a second key, the first key and second key used for encrypting the one or more files.
13. The system of claim 8 , wherein the access key comprises a user identifier.
14. The system of claim 8 , wherein the access key comprises the first key.