Secure storage network and methods for use therewith
A storage network operates by: encoding a data segment into a set of encoded data slices, wherein a read threshold of encoded data slices of the set of encoded data slices is required to decode the data segment, wherein the read threshold has a value greater than one, and wherein the data segment has an associated security level; selecting a subset of the plurality of storage units based on the security level, wherein the subset includes at least the read threshold of storage units of the plurality of storage units, wherein each of the subset of the plurality of storage units has a connection security approach that corresponds to the security level; and communicating the set of encoded data slices to the subset of the plurality of storage units in accordance with the connection security approach associated with each of the subset of the plurality of storage units.
1. A method for execution by one or more computing devices of a storage network having a plurality of storage units, the method comprises:
encoding a data segment into a set of encoded data slices, wherein a read threshold of encoded data slices of the set of encoded data slices is required to decode the data segment, wherein the read threshold has a value greater than one, and wherein the data segment has an associated security level;
selecting a subset of the plurality of storage units based on the security level, wherein the subset includes at least the read threshold of storage units of the plurality of storage units, wherein each of the subset of the plurality of storage units has a connection security approach that corresponds to the security level; and
communicating the set of encoded data slices to the subset of the plurality of storage units in accordance with the connection security approach associated with each of the subset of the plurality of storage units.
2. The method of claim 1 , wherein the connection security approach for one of the subset of the plurality of storage units includes a first key.
3. The method of claim 2 , wherein the connection security approach for another one of the subset of the plurality of storage units includes a second key.
4. The method of claim 1 , wherein the connection security approach for one of the subset of the plurality of storage units includes a first the connection security approach for another one of the subset of the plurality of storage units includes a second cipher employed.
5. The method of claim 1 , wherein the connection security approach for one of the subset of the plurality of storage units includes at least one of:
a transmission control protocol connection that is based on a user identifier and security credentials;
a transport layer security null cipher connection that is based on the user identifier and the security credentials; or
a transport layer security cipher connection that is based on the user identifier and the security credentials.
6. The method of claim 1 , wherein the security level includes one of:
a first level with no tampering protection and with no eavesdropping protection;
a second level with the tampering protection and with the no eavesdropping protection; or
a third level with the tampering protection and with eavesdropping protection.
7. The method of claim 1 wherein the security level is determined based on a corresponding proximity of each of the subset of the plurality of storage units from the one or more computing devices.
8. A processing unit for use in a storage network having a plurality of storage units, the processing unit comprising:
an interface;
memory; and
one or more processors operably coupled to the interface and the memory, wherein the one or more processors are operable to perform operations including:
encoding a data segment into a set of encoded data slices, wherein a read threshold of encoded data slices of the set of encoded data slices is required to decode the data segment, wherein the read threshold has a value greater than one, and wherein the data segment has an associated security level;
selecting a subset of the plurality of storage units based on the security level, wherein the subset includes at least the read threshold of storage units of the plurality of storage units, wherein each of the subset of the plurality of storage units has a connection security approach that corresponds to the security level; and
communicating the set of encoded data slices to the subset of the plurality of storage units in accordance with the connection security approach associated with each of the subset of the plurality of storage units.
9. The processing unit of claim 8 , wherein the connection security approach for one of the subset of the plurality of storage units includes a first key.
10. The processing unit of claim 9 , wherein the connection security approach for another one of the subset of the plurality of storage units includes a second key.
11. The processing unit of claim 8 , wherein the connection security approach for one of the subset of the plurality of storage units includes a first the connection security approach for another one of the subset of the plurality of storage units includes a second cipher employed.
12. The processing unit of claim 8 , wherein the connection security approach for one of the subset of the plurality of storage units includes at least one of:
a transmission control protocol connection that is based on a user identifier and security credentials;
a transport layer security null cipher connection that is based on the user identifier and the security credentials; or
a transport layer security cipher connection that is based on the user identifier and the security credentials.
13. The processing unit of claim 8 , wherein the security level includes one of:
a first level with no tampering protection and with no eavesdropping protection;
a second level with the tampering protection and with the no eavesdropping protection; or
a third level with the tampering protection and with eavesdropping protection.
14. The processing unit of claim 8 , wherein the security level is determined based on a corresponding proximity of each of the subset of the plurality of storage units from the processing unit.
15. A tangible computer readable storage medium for use in a storage network having a plurality of storage units, the tangible computer readable storage medium comprising:
at least one non-transitory memory section that stores operational instructions that, when executed by one or more processors of one or more computing devices of a storage network, causes the one or more computing devices to perform operations including:
encoding a data segment into a set of encoded data slices, wherein a read threshold of encoded data slices of the set of encoded data slices is required to decode the data segment, wherein the read threshold has a value greater than one, and wherein the data segment has an associated security level;
selecting a subset of the plurality of storage units based on the security level, wherein the subset includes at least the read threshold of storage units of the plurality of storage units, wherein each of the subset of the plurality of storage units has a connection security approach that corresponds to the security level; and
communicating the set of encoded data slices to the subset of the plurality of storage units in accordance with the connection security approach associated with each of the subset of the plurality of storage units.
16. The tangible computer readable storage medium of claim 15 , wherein the connection security approach for one of the subset of the plurality of storage units includes a first key.
17. The tangible computer readable storage medium of claim 16 , wherein the connection security approach for another one of the subset of the plurality of storage units includes a second key.
18. The tangible computer readable storage medium of claim 15 , wherein the connection security approach for one of the subset of the plurality of storage units includes a first the connection security approach for another one of the subset of the plurality of storage units includes a second cipher employed.
19. The tangible computer readable storage medium of claim 15 , wherein the connection security approach for one of the subset of the plurality of storage units includes at least one of:
a transmission control protocol connection that is based on a user identifier and security credentials;
a transport layer security null cipher connection that is based on the user identifier and the security credentials; or
a transport layer security cipher connection that is based on the user identifier and the security credentials.
20. The tangible computer readable storage medium of claim 15 , wherein the security level is determined based on a corresponding proximity of each of the subset of the plurality of storage units from the one or more computing devices.