| 摘要 |
<p>The present invention provides a method and system for securing sensitive data from unauthorized access or use. The invention is useful in a wide variety of settings, including commercial settings generally available to the public which may be extremely large or small with respect to the number of users. The invention is also useful in a more private setting, such as with a corporation or governmental agency, as well as between corporation, governmental agencies or any other entity. Data is securely stored and retrieved by receiving a primary write request that specifies a primary data unit to be written to a primary storage location; cryptographically splitting the primary data unit into a plurality of secondary data units such that the primary data block can be reconstructed using any subset of the secondary data units that includes at least a minimum number of secondary data units and cannot be reconstructed using any subset of the secondary data units that includes fewer than the minimum number of secondary data units, wherein the minimum number of secondary data units is less than or equal to a total number of the secondary data units; and storing each of the secondary data units at secondary storage locations of different storage devices in a set of storage devices at a plurality of geographically separated sites. Figure 1 TRUST ENGINE [iiTHETICATONJ BIOMETRIC USER. DATA DEVICE SYSTEM COMMUNICATION 125 VENDOR CERTIFICATE SYSTEM /20 AUTHORITY 1/5</p> |
