Systems, methods, and computer-readable media for utilizing anonymous sharding techniques to protect distributed data
Systems, methods, and computer-readable media for protecting distributed data are provided. The data is distributed according to a time-based shard distribution scheme that splits data into multiple pieces to prevent an attacker who successfully breaches a terminal device from reassembling the pieces.
1. A computer-readable storage medium containing program instructions for a method being executed by an application, the application comprising code for one or more components that are called by the application during runtime, wherein execution of the program instructions by one or more processors of a computer system causes the one or more processors to perform steps comprising:
selecting an encrypted data page;
generating an encrypted data page address for the encrypted data page, the encrypted data page address comprising:
a terminal device ID that is sourced from a hardware component of a terminal device;
an epoch address that corresponds to an epoch associated with the encrypted data page; and
a multiplier extension that corresponds to a specified page associated with the epoch;
splitting the encrypted data page into a plurality of data shards, each data shard having an associated page shard count number;
generating anonymous addresses for the plurality of data shards using the associated page shard count number and the encrypted page address; and
merging the anonymous addresses with the plurality of data shards to produce a plurality of shard units.
2. The computer readable storage medium of claim 1 , the method further comprising distributing the plurality of shard units to a plurality of remote servers.
3. The computer readable storage medium of claim 2 , wherein the shard units stored on the plurality of remote servers are inaccessible during an active panic mode.
4. The computer readable storage medium of claim 1 , wherein the encrypted data page contains communications data records derived from a terminal device within the system, wherein the communications data records are arranged in a communication stream time order, and wherein the epoch associated with the encrypted data page has a particular epoch timeframe having a start time and an end time within the communication stream time order.
5. The computer readable storage medium of claim 4 , wherein the encrypted data page is one a plurality of is one of a plurality of historical data pages that have been split according to a shard distribution scheme and stored as shard units in the plurality of remote servers.
6. The computer readable storage medium of claim 4 , wherein a portion of the communications data records are included in a current data page that is stored on the terminal device.
7. The computer readable storage medium of claim 6 , wherein the current data page contains the only communication data records that can be compromised during an attack.
8. The computer readable storage medium of claim 6 , wherein the current data page transitions to become one of the historical data pages.
9. A method comprising:
selecting an encrypted data page;
generating an encrypted data page address for the encrypted data page, the encrypted data page address comprising:
a terminal device ID that is sourced from a hardware component of a terminal device;
an epoch address that corresponds to an epoch associated with the encrypted data page; and
a multiplier extension that corresponds to a specified page associated with the epoch;
splitting the encrypted data page into a plurality of data shards, each data shard having an associated page shard count number;
generating anonymous addresses for the plurality of data shards using the associated page shard count number and the encrypted page address; and
merging the anonymous addresses with the plurality of data shards to produce a plurality of shard units.
10. The method of claim 9 , further comprising distributing the plurality of shard units to a plurality of remote servers.
11. The method of claim 10 , wherein the shard units stored on the plurality of remote servers are inaccessible during an active panic mode.
12. The method claim 9 , wherein the encrypted data page contains communications data records derived from a terminal device within the system, wherein the communications data records are arranged in a communication stream time order, and wherein the epoch associated with the encrypted data page has a particular epoch timeframe having a start time and an end time within the communication stream time order.
13. The method of claim 12 , wherein the encrypted data page is one a plurality of is one of a plurality of historical data pages that have been split according to a shard distribution scheme and stored as shard units in the plurality of remote servers.
14. The method of claim 12 , wherein a portion of the communications data records are included in a current data page that is stored on the terminal device.
15. The method of claim 14 , wherein the current data page contains the only communication data records that can be compromised during an attack.
16. The method of claim 14 , wherein the current data page transitions to become one of the historical data pages.