Secure storage of data via a distributed ledger system
The present disclosure describes systems and methods for use of a distributed ledger system to securely store data. Encrypted data files of one or more computing devices may be distributed to processing nodes of the distributed ledger system. The data may be subsequently retrieved and decrypted by the computing device or another device. Because the distributed ledger system creates a chain of hashes of prior blocks, the data may be immune to modification or corruption, as any changes to blocks storing the encrypted data may be immediately apparent.
1. A method for secure storage of data via distributed ledgers, comprising:
encrypting, by one or more processors of a first device, one or more files in a storage device maintained by the first device using a first key;
generating, by the one or more processors of the first device, an access key;
transmitting, by the first device to a second device operating as a full node for a distributed immutable ledger, the encrypted one or more files and the access key, receipt of the encrypted one or more files and the access key causing the second device to append the encrypted one or more files to the distributed immutable ledger at an address corresponding to the access key; and
providing, by the first device to a third device, the access key and the first key, the third device configured to retrieve the encrypted one or more files from the distributed immutable ledger via the access key, and decrypt the one or more files using the first key;
wherein providing the access key and the first key to the third device causes the third device to:
retrieve the encrypted one or more files from the distributed immutable ledger via the access key,
decrypt the one or more files using the first key,
compare the decrypted one or more files to a second one or more files stored in memory of the third device, and
responsive to the decrypted one or more files matching the second one or more files, identify the third device as not compromised or corrupted.
2. The method of claim 1 , wherein the set of encrypted one or more files are collected by the second device from one or more additional devices.
3. The method of claim 1 , wherein the one or more files comprise configuration files.
4. The method of claim 1 , wherein the set of encrypted one or more files are encrypted by the second device.
5. The method of claim 1 , wherein the second device generates the first key and a second key, the first key and second key used for encrypting the one or more files.
6. The method of claim 1 , wherein the access key comprises a user identifier.
7. The method of claim 1 , wherein the access key comprises the first key.
8. A system for secure storage of data via distributed ledgers, comprising:
a first device, comprising an encryption module, a network interface, and a storage device comprising one or more files, a first key, and a second key;
wherein the encryption module is configured to:
encrypt one or more files in a storage device maintained by the first device using a first key, and
generate an access key;
wherein the network interface is configured to:
transmit, to a second device operating as a full node for a distributed immutable ledger, the encrypted one or more files and the access key, receipt of the encrypted one or more files and the access key causing the second device to append the encrypted one or more files to the distributed immutable ledger at an address corresponding to the access key, and
provide, to a third device, the access key and the first key, the third device configured to retrieve the encrypted one or more files from the distributed immutable ledger via the access key, and decrypt the one or more files using the first key; and
wherein the encryption module is further configured to:
provide the access key and the first key to the third device, the third device configured to:
retrieve the encrypted one or more files from the distributed immutable ledger via the access key,
decrypt the one or more files using the first key,
compare the decrypted one or more files to a second one or more files stored in memory of the third device, and
responsive to the decrypted one or more files matching the second one or more files, identify the third device as not compromised or corrupted.
9. The system of claim 8 , wherein the set of encrypted one or more files are collected by the second device from one or more additional devices.
10. The system of claim 8 , wherein the one or more files comprise configuration files.
11. The system of claim 8 , wherein the set of encrypted one or more files are encrypted by the second device.
12. The system of claim 8 , wherein the second device generates the first key and a second key, the first key and second key used for encrypting the one or more files.
13. The system of claim 8 , wherein the access key comprises a user identifier.
14. The system of claim 8 , wherein the access key comprises the first key.