Encrypting distributed computing data

摘要

A method begins by a dispersed storage (DS) processing module encoding data to produce slices and redundancy slices and selecting primary and redundancy storage and execution units. The method continues with the DS processing module assigning partial tasks to the primary storage and execution units and generating a unique key set for each of the primary storage and execution units. The method continues with the DS processing module encrypting each of the slices with a corresponding one of the unique key sets to produce encrypted slices and sending the encrypted slices and an indication of the assigned partial tasks to the primary storage and execution units for storage and execution of the assigned partial tasks on the encrypted slices. The method continues with the DS processing module sending the redundancy slices to the set of redundancy storage and execution units for storage therein.

主权项

1. A method for execution by one or more processing modules of one or more computing devices, the method comprises:
encoding data using a dispersed storage error encoding function to produce a plurality of sets of encoded data slices, wherein a set of the plurality of sets of encoded data slices includes encoded data slices and redundancy encoded data slices, wherein the encoded data slices of the plurality of sets of encoded data slices are arranged into chunksets of slices and wherein the redundancy encoded data slices of the plurality of sets of encoded data slices are arranged into chunksets of redundancy slices; selecting a set of primary storage and execution units for the chunksets of slices and a set of redundancy storage and execution units for the chunksets of redundancy slices; assigning partial tasks of one or more distributed computing tasks to the set of primary storage and execution units; generating a unique key set for each of the primary storage and execution units based on at least one of: the assigned partial task for the corresponding primary storage and execution unit, information regarding the corresponding primary storage and execution unit, information regarding key generation, and a pseudo random function; encrypting each of the chunksets of slices with a corresponding one of the unique key sets to produce chunksets of encrypted slices; sending the chunksets of encrypted slices and an indication of the assigned partial tasks to the set of primary storage and execution units for storage of the chunksets of encrypted slices and execution of the assigned partial tasks on the chunksets of encrypted slices; and sending the chunksets of redundancy slices to the set of redundancy storage and execution units for storage therein.