Information security using blockchains

1. A network device, comprising:

a network interface configured to receive data from one or more user devices associated with a user;

a memory operable to store:

a set of anonymization rules, wherein each anonymization rule is linked with a data classification type; and

a distributed ledger comprising information for:

a private blockchain associated with the user; and

a semi-private blockchain associated with the user, wherein:

blocks in the semi-private blockchain mirror blocks in the private blockchain; and

the semi-private blockchain comprises one or more anonymized blocks;

an information security engine implemented by a processor operably coupled to the network interface and the memory, configured to:

receive data from the one or more user devices;

encrypt the data using a first encryption key, wherein the first encryption key is shared with other devices;

store the encrypted data in the private blockchain;

determine a data classification type for the data;

determine to anonymize the data based on the data classification type;

anonymize the data in accordance with the set of anonymization rules using a second encryption key, wherein the second encryption key is not shared with other devices;

encrypt the anonymized data using the first encryption key; and

store the encrypted anonymized data in the semi-private blockchain.

2. The device of claim 1 , wherein anonymizing the data comprises replacing the data with predetermined padding data to generate the anonymized data.

3. The device of claim 1 , wherein receiving data from the one or more user devices occurs periodically at predetermined time intervals.

4. The device of claim 1 , wherein the data comprises location information for the user.

5. The device of claim 1 , wherein:

storing the data in the private blockchain updates a copy of the distributed ledger in one or more other network devices; and

storing the encrypted anonymized data in the semi-private blockchain updates the copy of the distributed ledger in the one or more other network devices.

6. An information security method, comprising:

receiving data from one or more user devices associated with a user;

encrypting the data using a first encryption key, wherein the first encryption key is shared with other devices;

storing the encrypted data in a private blockchain associated with the user;

determining a data classification type for the data;

determining to anonymize the data based on the data classification type;

anonymizing the data in accordance with a set of anonymization rules using a second encryption key, wherein:

each anonymization rule is linked with a data classification type; and

the second encryption key is not shared with other devices;

encrypting the anonymized data using the first encryption key; and

storing the encrypted anonymized data in a semi-private blockchain, wherein:

blocks in the semi-private blockchain mirror blocks in the private blockchain; and

the semi-private blockchain comprises one or more anonymized blocks.

7. The method of claim 6 , wherein anonymizing the data comprises replacing the data with predetermined padding data to generate the anonymized data.

8. The method of claim 6 , wherein receiving data from the one or more user devices occurs periodically at predetermined time intervals.

9. The method of claim 6 , wherein the data comprises location information for the user.

10. The method of claim 6 , wherein:

storing the data in the private blockchain updates a copy of a distributed ledger in one or more other network devices; and

storing the encrypted anonymized data in the semi-private blockchain updates the copy of the distributed ledger in the one or more other network devices.

11. A computer program comprising executable instructions stored in a non-transitory computer readable medium that when executed by a processor causes the processor to:

receive data from one or more user devices associated with a user;

encrypt the data using a first encryption key, wherein the first encryption key is shared with other devices;

store the encrypted data in a private blockchain associated with the user;

determine a data classification type for the data;

determining, by the information security engine, to anonymize the data based on the data classification type;

anonymize the data in accordance with a set of anonymization rules using a second encryption key, wherein:

each anonymization rule is linked with a data classification type; and

the second encryption key is not shared with other devices;

encrypt the anonymized data using the first encryption key; and

store the encrypted anonymized data in a semi-private blockchain, wherein:

blocks in the semi-private blockchain mirror blocks in the private blockchain; and

the semi-private blockchain comprises one or more anonymized blocks.

12. The computer program of claim 11 , wherein anonymizing the data comprises replacing the data with predetermined padding data to generate the anonymized data.

13. The computer program of claim 11 , wherein receiving data from the one or more user devices occurs periodically at predetermined intervals.

14. The computer program of claim 11 , wherein the data comprises location information for the user.