Distributed parallel data protection system and method

1. A method for protecting and storing data, the method comprising:

utilizing multiple storage devices in disparate locations; and

performing operations using at least one processor of a data protection server connected over a network with the multiple storage devices, the operations including:

generating independent keys, each independent key corresponding to a respective portion of segmented data;

encrypting each portion of segmented data with a respective independent key;

generating a master key;

encrypting the independent keys with the master key;

storing each portion of the segmented data adjacent to the corresponding encrypted independent key in a data and key storage device;

segmenting the master key, thereby creating multiple master key segments; and

storing the multiple master key segments in respective ones of the multiple storage devices in the disparate locations separate from the data.

2. The method of claim 1 , further comprising receiving data over a network from participant systems and segmenting the received data into multiple portions of the segmented data.

3. The method of claim 1 , wherein segmenting the master key comprises segmenting the master key into “n” shares, wherein a quantity of at least “t” of the “n” shares is required to recover the master key.

4. The method of claim 3 , wherein any subset of fewer than “t” shares reveals no information.

5. The method of claim 1 , further comprising choosing the disparate locations to reduce chances of compromising security.

6. The method of claim 1 , wherein the multiple storage devices are spread across multiple logical locations, or multiple physical locations, or a combination of at least one logical and at least one physical location.

7. The method of claim 6 , further comprising storing the segmented data across multiple logical locations, or multiple physical locations, or a combination of at least one logical and at least one physical location.

8. The method of claim 6 , further comprising storing the master key segments across multiple logical locations, or multiple physical locations, or a combination of at least one logical and at least one physical location.

9. A system for protecting and storing data, the system comprising:

multiple storage devices in disparate locations; and

a data protection server connected over a network with the multiple storage devices, the data protection server having at least one processor configured for:

generating independent keys, each independent key corresponding to respective portion of segmented data;

encrypting each portion of the segmented data with a respective independent key;

encrypting the independent keys using a master key;

storing each portion of the segmented data adjacent to the corresponding encrypted independent key in a data and key storage area;

segmenting the master key creating multiple master key segments; and

storing the multiple master key segments in respective ones of the multiple storage devices in the disparate locations separate from the data.

10. The system of claim 9 , wherein the processor receives data over a network from participant systems and segments the received data into multiple portions of the segmented data.

11. The system of claim 9 , wherein segmenting the master key comprises segmenting the master key into “n” shares, wherein a quantity of at least “t” of the “n” shares is required to recover the master key.

12. The system of claim 11 , wherein any subset of fewer than “t” shares reveals no information.

13. The system of claim 9 , further comprising choosing the disparate locations to reduce chances of compromising security.

14. The system of claim 9 , wherein the multiple storage devices are spread across multiple logical locations, or multiple physical locations, or a combination of at least one logical and at least one physical location.

15. The system of claim 14 , further comprising storing the segmented data across multiple logical locations, or multiple physical locations, or a combination of at least one logical and at least one physical location.

16. The method of claim 14 , further comprising storing the master key segments across multiple logical locations, or multiple physical locations, or a combination of at least one logical and at least one physical location.

17. A non-transitory computer readable medium storing instructions executable by at least one processor for securing and managing data by executing instructions to perform steps including:

generating independent keys each independent key corresponding to a respective portion of segmented data;

encrypting each portion of segmented data with a respective independent key;

generating a master key;

encrypting the independent keys with the master key;

storing each portion of the segmented data adjacent to the corresponding encrypted independent key in a data and key storage device;

segmenting the master key, thereby creating multiple master key segments; and

storing the multiple master key segments in respective ones of the multiple storage devices in the disparate locations separate from the data.

18. The non-transitory computer readable medium of claim 17 , wherein the steps further comprise receiving data over a network from participant systems and segmenting the received data into multiple portions of the segmented data.

19. The non-transitory computer readable medium of claim 17 , wherein segmenting the master key comprises segmenting the master key into “n” shares, wherein a quantity of at least “t” of the “n” shares is required to recover the master key.

20. The non-transitory computer readable medium of claim 17 , wherein the steps further comprise choosing the disparate locations to reduce chances of compromising security.