Secure data parser method and system
A secure data parser is provided that may be integrated into any suitable system for securely storing and communicating data. The secure data parser parses data and then splits the data into multiple portions that are stored or communicated distinctly. Encryption of the original data, the portions of data, or both may be employed for additional security. The secure data parser may be used to protect data in motion by splitting original data into portions of data, that may be communicated using multiple communications paths.
1. A method for securing data, the method comprising:
executing code by a processor to perform:
receiving a first key from a storage system;
generating a plurality of data chunks based on a data set, wherein each data chunk of the plurality of data chunks comprises less than an entirety of data of the data set, and wherein the data set can be reconstructed using at least a minimum number of the plurality of chunks;
encrypting each respective data chunk of the plurality of data chunks with a respective second key, wherein each of the respective second keys are distinct from each other;
performing a cryptographic operation based on the first key to further secure the plurality of data chunks; and
storing, in a memory coupled to the processor, at least one data chunk of the plurality of data chunks with data indicative of at least one of the distinct encryption keys on at least one storage device.
2. The method of claim 1 , further executing the code by the processor to perform: storing with each data chunk of the plurality of data chunks data indicative of at least one of the distinct encryption keys.
3. The method of claim 1 , further executing the code by the processor to perform: storing with each data chunk of the plurality of data chunks data indicative of a distinct encryption key used to encrypt that data chunk.
4. The method of claim 1 , wherein generating the plurality of data chunks comprises using a random technique or pseudorandom technique.
5. The method of claim 1 , wherein generating the plurality of chunk comprises a substantially random distribution of a subset of the data set.
6. The method of claim 1 , wherein generating the plurality of data chunks comprises:
generating a split encryption key based on the external key; and
distributing the data set based on the split encryption key.
7. The method of claim 1 , further executing the code by the processor to perform: encrypting each of the chunks of the plurality of chunks with the external key.
8. The method of claim 7 , wherein the data set is recoverable using at least a minimum number of the plurality of data chunks and the external key.
9. The method of claim 1 , wherein the external key is an AES key.
10. The method of claim 1 , wherein the external key is an DES key.