Systems, methods, and computer-readable media for utilizing anonymous sharding techniques to protect distributed data
Systems, methods, and computer-readable media for protecting distributed data are provided. The data is distributed according to a time-based shard distribution scheme that splits data into multiple pieces to prevent an attacker who successfully breaches a terminal device from reassembling the pieces.
1. A method comprising:
receiving search query for a data page not stored on a terminal device but is stored as a plurality of shard units on a plurality of remote servers, the search query comprising:
an epoch address that corresponds to an epoch associated with the data page;
a multiplier extension that specified a particular data page associated with the epoch; and
a page shard count;
generating an encrypted page address based on the search query and a terminal device ID that is sourced from a hardware component of the terminal device;
obtaining anonymous addresses for each of the plurality shard units based on the encrypted page address and the page shard count;
fetching the plurality of shard units from the plurality of remote servers based on the anonymous addresses, each of the plurality of shard units comprises an anonymous address and a data shard;
reconstructing the data page based on the fetched shard units; and
displaying the reconstructed data page.
2. The method of claim 1 , further comprising generating plaintext addresses based on encrypted page address and the page shard count.
3. The method of claim 2 , further comprising using the plaintext addresses and the anonymous address to determine data shard correlation among the plurality of shard units, wherein reconstructing the data page further comprises using the data shard correlation to position each data shard in the correct order to reconstruct the data page.
4. The method of claim 1 , wherein the data page contains communications data records derived from the terminal device, wherein the communications data records are arranged in a communication stream time order, and wherein the epoch associated with the data page has a particular epoch timeframe having a start time and an end time within the communication stream time order.
5. The method of claim 1 , wherein page shard count is the same for all data pages stored as shard units in the plurality of remote servers.
6. A computer-readable storage medium containing program instructions for a method being executed by an application, the application comprising code for one or more components that are called by the application during runtime, wherein execution of the program instructions by one or more processors of a computer system causes the one or more processors to perform steps comprising:
receiving search query for a data page not stored on a terminal device but is stored as a plurality of shard units on a plurality of remote servers, the search query comprising:
an epoch address that corresponds to an epoch associated with the data page;
a multiplier extension that specified a particular data page associated with the epoch; and
a page shard count;
generating an encrypted page address based on the search query and a terminal device ID that is sourced from a hardware component of the terminal device;
obtaining anonymous addresses for each of the plurality shard units based on the encrypted page address and the page shard count;
fetching the plurality of shard units from the plurality of remote servers based on the anonymous addresses, each of the plurality of shard units comprises an anonymous address and a data shard;
reconstructing the data page based on the fetched shard units; and
displaying the reconstructed data page.
7. The computer readable storage medium of claim 6 , wherein execution of the program instructions by one or more processors of a computer system causes the one or more processors to perform steps comprising: generating plaintext addresses based on encrypted page address and the page shard count.
8. The computer readable storage medium of claim 7 , wherein execution of the program instructions by one or more processors of a computer system causes the one or more processors to perform steps comprising: using the plaintext addresses and the anonymous address to determine data shard correlation among the plurality of shard units, wherein reconstructing the data page further comprises using the data shard correlation to position each data shard in the correct order to reconstruct the data page.
9. The computer readable storage medium of claim 6 , wherein the data page contains communications data records derived from the terminal device, wherein the communications data records are arranged in a communication stream time order, and wherein the epoch associated with the data page has a particular epoch timeframe having a start time and an end time within the communication stream time order.
10. The computer readable storage medium of claim 6 , wherein page shard count is the same for all data pages stored as shard units in the plurality of remote servers.