SECURE DATA TRANSMISSION UTILIZING DISTRIBUTED STORAGE
A method includes dispersed storage error encoding a plurality of data segments to produce a plurality of sets of encoded data slices and dispersed storage error encoding auxiliary data to produce a set of encoded auxiliary data slices. The method further includes obfuscating a first set of encoded data slices of the plurality of sets of encoded data slices using at least one encoded auxiliary data slices of the set of encoded auxiliary data slices to produce a first set of obfuscated encoded data slices. The method further includes obfuscating a second set of encoded data slices of the plurality of sets of encoded data slices using at least one other encoded auxiliary data slice of the set of encoded auxiliary data slices to produce a second set of obfuscated encoded data slices. The method further includes outputting the first and second sets of obfuscated encoded data slices for storage.
1 . A method comprises:
dispersed storage error encoding, by a computing device of a dispersed storage network (DSN), a plurality of data segments to produce a plurality of sets of encoded data slices;
dispersed storage error encoding, by the computing device, auxiliary data to produce a set of encoded auxiliary data slices;
obfuscating, by the computing device, a first set of encoded data slices of the plurality of sets of encoded data slices using at least one encoded auxiliary data slices of the set of encoded auxiliary data slices to produce a first set of obfuscated encoded data slices;
obfuscating, by the computing device, a second set of encoded data slices of the plurality of sets of encoded data slices using at least one other encoded auxiliary data slice of the set of encoded auxiliary data slices to produce a second set of obfuscated encoded data slices; and
outputting, by the computing device, the first and second sets of obfuscated encoded data slices for storage.
2 . The method of claim 1 further comprises:
dispersed storage error encoding, by the computing device, the auxiliary data to produce a second set of encoded auxiliary data slices;
obfuscating, by the computing device, the first set of obfuscated encoded data slices using at least one encoded auxiliary data slices of the second set of encoded auxiliary data slices to produce a first set of further obfuscated encoded data slices; and
obfuscating, by the computing device, the second set of obfuscated encoded data slices using at least one other encoded auxiliary data slice of the second set of encoded auxiliary data slices to produce a second set of further obfuscated encoded data slices.
3 . The method of claim 1 , wherein the auxiliary data comprises one or more of:
null data;
authentication information;
a next pseudo random output sequencing order;
a pseudo random output sequencing order identifier;
a next outputting threshold;
a random number generator output;
an encryption key;
a starting point for the pseudo random output sequencing order;
a device identifier;
a data identifier;
a data type;
a data size indictor;
a priority indicator;
a security indicator; and
a performance indicator.
4 . The method of claim 1 further comprises:
encrypting, by the computing device, the plurality of data segments to produce a plurality of encrypted data segments; and
dispersed storage error encoding, by the computing device, the plurality of encrypted data segments to produce the plurality of sets of encoded data slices.
5 . The method of claim 4 further comprises:
encrypting, by the computing device, the auxiliary data to produce encrypted auxiliary data; and
dispersed storage error encoding, by the computing device, the encrypted auxiliary data to produce the set of encoded auxiliary data slices.
6 . The method of claim 5 , wherein the auxiliary data is encrypted via an encryption methodology used to encrypt the plurality of data segments to produce the encrypted auxiliary data.
7 . The method of claim 5 , wherein the auxiliary data is encrypted via an all or nothing transformation to produce the encrypted auxiliary data and the plurality of data segments is encrypted via an all or nothing transformation to produce the plurality of encrypted data segments.
8 . The method of claim 1 , wherein the obfuscating the first set of encoded data slices comprises:
interspersing, by the computing device, the at least one encoded auxiliary data slices within the first set of encoded data slices in accordance with a pseudo random output sequencing order to produce the first set of obfuscated encoded data slices.
9 . A computing device of a dispersed storage network (DSN), the computing device comprises:
an interface;
memory; and
a processing module operably coupled to the memory and the interface, wherein the processing module is operable to:
dispersed storage error encode a plurality of data segments to produce a plurality of sets of encoded data slices;
dispersed storage error encode auxiliary data to produce a set of encoded auxiliary data slices;
obfuscate a first set of encoded data slices of the plurality of sets of encoded data slices using at least one encoded auxiliary data slices of the set of encoded auxiliary data slices to produce a first set of obfuscated encoded data slices;
obfuscate a second set of encoded data slices of the plurality of sets of encoded data slices using at least one other encoded auxiliary data slice of the set of encoded auxiliary data slices to produce a second set of obfuscated encoded data slices; and
output the first and second sets of obfuscated encoded data slices for storage.
10 . The computing device of claim 9 , wherein the processing module is further operable to:
dispersed storage error encode the auxiliary data to produce a second set of encoded auxiliary data slices;
obfuscate the first set of obfuscated encoded data slices using at least one encoded auxiliary data slices of the second set of encoded auxiliary data slices to produce a first set of further obfuscated encoded data slices; and
obfuscate the second set of obfuscated encoded data slices using at least one other encoded auxiliary data slice of the second set of encoded auxiliary data slices to produce a second set of further obfuscated encoded data slices.
11 . The computing device of claim 9 , wherein the auxiliary data comprises one or more of:
null data;
authentication information;
a next pseudo random output sequencing order;
a pseudo random output sequencing order identifier;
a next outputting threshold;
a random number generator output;
an encryption key;
a starting point for the pseudo random output sequencing order;
a device identifier;
a data identifier;
a data type;
a data size indictor;
a priority indicator;
a security indicator; and
a performance indicator.
12 . The computing device of claim 9 , wherein the processing module is further operable to:
encrypt the plurality of data segments to produce a plurality of encrypted data segments; and
dispersed storage error encode the plurality of encrypted data segments to produce the plurality of sets of encoded data slices.
13 . The computing device of claim 12 , wherein the processing module is further operable to:
encrypt the auxiliary data to produce encrypted auxiliary data; and
dispersed storage error encode the encrypted auxiliary data to produce the set of encoded auxiliary data slices.
14 . The computing device of claim 13 , wherein the processing module is further operable to:
encrypt the auxiliary data an encryption methodology used to encrypt the plurality of data segments to produce the encrypted auxiliary data.
15 . The computing device of claim 13 , wherein the processing module is further operable to:
encrypt the auxiliary data via an all or nothing transformation to produce the encrypted auxiliary data and encrypt the plurality of data segments via an all or nothing transformation to produce the plurality of encrypted data segments.
16 . The computing device of claim 9 , wherein the processing module is further operable to obfuscate the first set of encoded data slices by:
interspersing the at least one encoded auxiliary data slices within the first set of encoded data slices in accordance with a pseudo random output sequencing order to produce the first set of obfuscated encoded data slices.