SECURE BACKUP AND RECOVERY SYSTEM FOR PRIVATE SENSITIVE DATA

摘要

A device includes a backup activator and a backup generator. The backup activator decrypts an encrypted concealed snapshot of a user's secret using a protection key, producing a concealed snapshot, and reconstructs a snapshot from the concealed snapshot, the user's password and a multiparty secret reconstruction system. The backup generator conceals the snapshot with a password of the user and the multiparty secret protection system, generates the protection key and encrypts the concealed snapshot with the protection key. The backup activator includes a helper based key recovery unit which sends encrypted portions of the protection key, each portion being associated with and decryptable by a helper, and which combines decrypted portions into the protection key. The backup generator includes a helper based key encrypter to split the protection key into at least one portion per an associated helper and to encrypt each portion with the associated helper's public key.

主权项

1. A device comprising:
a helper based key recovery unit to send encrypted portions of a protection key to a message exchange service, each said portion being associated with at least one helper, and to combine decrypted portions into said protection key, said decrypted portions being received from said message exchange service after a user of said device requests that each at least one helper retrieve his or her associated portion from said message exchange service and after said at least one helper enables his or her associated portion to be decrypted using his or her private key and sent back to said message exchange service; and a helper based key encrypter to split said protection key into at least one portion per associated helper and to encrypt each portion with said associated helper's public key.