Protecting sensitive data
An example operation may include one or more of capturing a current version of sensitive data by a data processor node, hashing, by the data processor node, the current version of the sensitive data, storing, by the data processor node, a hash of the current version of the sensitive data on a first blockchain, encrypting, by the data processor node, the current version of the sensitive data using a secret key, and storing the encrypted current version of the sensitive data on a second blockchain.
1. A node of a blockchain network, the node comprising:
a processor that executes one or more instructions stored in a memory, wherein the processor is configured to:
perform a hash on data with a master secret key to generate a hash value, wherein peers of a first blockchain of the blockchain network share the master secret key;
store the data that has been hashed in the first blockchain;
encrypt the data with the hash value; and
store the data that has been encrypted in a second blockchain of the blockchain network;
generate a secret key to decrypt the data that has been encrypted based on the master secret key and the data that has been encrypted and stored among peers of the second blockchain;
receive a request to recover the data that has been encrypted from the second blockchain; and
decrypt the data that has been encrypted in response to the request with the secret key.
2. The blockchain network of claim 1 , wherein the first blockchain is configured to:
store only hashes of versions of the data.
3. The blockchain network of claim 1 , wherein the second blockchain is configured to:
receive full copies of versions of the data that has been encrypted.
4. The blockchain network of claim 1 , wherein the processor is further configured to:
receive a consensus from a minimum threshold number of peers to use the master secret key to issue the secret key.
5. A method, comprising:
hashing, by a node of a blockchain network, data with a master secret key to generate a hash value, wherein peers of a first blockchain of the blockchain network share the master secret key;
storing, by the node of a blockchain network, the data that has been hashed in the first blockchain;
encrypting, by the node of a blockchain network, the data with the hash value;
storing, by the node of a blockchain network, the data that has been encrypted in a second blockchain network;
generating, by the node of a blockchain network, a secret key to decrypt the data that has been encrypted based on the master secret key and the data that has been encrypted and stored among peers of the second blockchain;
receiving, by the node of a blockchain network, a request to recover the data that has been encrypted from the second blockchain; and
decrypting, by the node of a blockchain network, the data that has been encrypted in response to the request with the secret key.
6. The method of claim 5 , wherein the first blockchain is configured to:
store only hashes of versions of the data.
7. The method of claim 5 , wherein the second blockchain is configured to:
receive full copies of versions of the data that has been encrypted.
8. The method of claim 5 , further comprising:
receiving a consensus from a minimum threshold number to use the master secret key to issue the secret key.
9. A non-transitory computer program product comprising a computer-readable medium comprising one or more instructions that, when executed by a processor of a blockchain network, cause the processor to perform:
hashing data with a master secret key to generate a hash value, wherein peers of a first blockchain share the master secret key;
storing the data that has been hashed in the first blockchain;
encrypting the data with the hash value;
storing, by the node of a blockchain network, the data that has been encrypted in a second blockchain of the blockchain network;
generating a secret key to decrypt the data that has been encrypted based on the master secret key and the data and stored among peers of the second blockchain;
receiving a request to recover the data that has been encrypted from the second blockchain; and
decrypting the data that has been encrypted in response to the request with the secret key.
10. The non-transitory computer program product of claim 9 , wherein the first blockchain is configured to:
store only hashes of versions of the data, and
wherein the second blockchain is configured to:
receive full copies of versions of the data that has been encrypted.
11. The non-transitory computer program product of claim 9 , wherein the one or more instructions further cause the processor to perform:
receiving a consensus from a minimum threshold number of peers to use the master secret key to issue the secret key.