Systems and methods for securing data

Abstract

Systems and methods are provided for securing data. A processing device receives a data set and identifies a first subset of data from a first dimension of a multi-dimensional representation of the data set. The processing device encrypts the first subset of data using a first encryption technique to yield a first encrypted subset of data and replaces the first subset of data in the multi-dimensional representation of the data set with the first subset of encrypted data. The processing device then identifies a second subset of data from a second dimension of the multi-dimensional representation of the data set, with the second subset of data including at least a portion of the first subset of encrypted data, and encrypts the second subset of data using a second encryption technique to yield a second encrypted subset of data.

1 . (canceled) 
     
     
         2 . A method for securing data, comprising:
 receiving a data set by processing circuitry;   identifying a first subset of data based on a first attribute of the data set;   encrypting the first subset of data using a first encryption technique to yield a first encrypted subset of data;   identifying a second subset of data based on a second attribute of the data set, wherein the second subset of data includes overlapping data that corresponds to at least a portion of the first encrypted subset of data, and wherein the second attribute is different from the first attribute; and   encrypting the second subset of data using a second encryption technique to yield a second encrypted subset of data, thereby encrypting the overlapping data using the first encryption technique and the second encryption technique.   
     
     
         3 . The method of  claim 2 , further comprising:
 producing two or more shares of data from the second encrypted subset of data, each share containing a selection of data from the second encrypted subset of data; and   outputting via an output, the two or more shares for storage at separate storage locations.   
     
     
         4 . The method of  claim 2 , wherein the first and second encryption techniques are different encryption techniques. 
     
     
         5 . The method of  claim 2 , wherein the first and second encryption techniques are the same encryption techniques but use different keys. 
     
     
         6 . The method of  claim 2 , wherein the first subset of data is identified deterministically. 
     
     
         7 . The method of  claim 2 , wherein the first subset of data is identified according to a keyed arrangement technique. 
     
     
         8 . The method of  claim 3 , wherein the second encrypted subset of data includes a cipherblock of data encrypted using the second encryption technique, and the two or more shares are produced such that no share includes all of the cipherblock. 
     
     
         9 . The method of  claim 2 , wherein the first encrypted subset of data includes a cipherblock of data encrypted using the first encryption technique, and the second subset of data does not include all of the cipherblock. 
     
     
         10 . The method of  claim 2 , wherein the first subset of data is identified as a row of a two-dimensional representation of the data set. 
     
     
         11 . The method of  claim 10 , wherein the second subset of data is identified as a column of the two-dimensional representation of the data set. 
     
     
         12 . A system for securing data, comprising:
 a data input; and   a processing circuitry in communication with the data input port and configured to:   receive, via the data input, a data set;   identify a first subset of data based on a first attribute of the data set;   encrypt the first subset of data using a first encryption technique to yield a first encrypted subset of data;   identify a second subset of data based on a second attribute of the data set, wherein the second subset of data includes overlapping data that corresponds to at least a portion of the first encrypted subset of data, and wherein the second attribute is different from the first attribute; and   encrypt the second subset of data using a second encryption technique to yield a second encrypted subset of data, thereby encrypting the overlapping data using the first encryption technique and the second encryption technique.   
     
     
         13 . The system of  claim 12 , further comprising a data output in communication with the processing circuitry, wherein the processing circuitry is further configured to:
 produce two or more shares of data from the second encrypted subset of data, each share containing a selection of data from the second encrypted subset of data; and   output, via the data output, the two or more shares for storage at separate storage locations.   
     
     
         14 . The system of  claim 12 , wherein the first and second encryption techniques are different encryption techniques. 
     
     
         15 . The system of  claim 12 , wherein the first and second encryption techniques are the same encryption techniques but use different keys. 
     
     
         16 . The system of  claim 12 , wherein the first subset of data is identified deterministically. 
     
     
         17 . The system of  claim 12 , wherein the first subset of data is identified according to a keyed arrangement technique. 
     
     
         18 . The system of  claim 13 , wherein the second encrypted subset of data includes a cipherblock of data encrypted using the second encryption technique, and the two or more shares are produced such that no share includes all of the cipherblock. 
     
     
         19 . The system of  claim 12 , wherein the first encrypted subset of data includes a cipherblock of data encrypted using the first encryption technique, and the second subset of data does not include all of the cipherblock. 
     
     
         20 . The system of  claim 12 , wherein the first subset of data is identified as a row of a two-dimensional representation of the data set. 
     
     
         21 . The system of  claim 20 , wherein the second subset of data is identified as a column of the two-dimensional representation of the data set. 
     
     
         22 . A non-transitory computer readable medium storing computer executable instructions which, when executed by a processor, cause a method for securing data to be performed, the method comprising:
 receiving a data set;   identifying a first subset of data based on a first attribute of the data set;   encrypting the first subset of data using a first encryption technique to yield a first encrypted subset of data;   identifying a second subset of data based on a second attribute of the data set, wherein the second subset of data includes overlapping data that corresponds to at least a portion of the first encrypted subset of data, and wherein the second-attribute is different from the first attribute; and   encrypting the second subset of data using a second encryption technique to yield a second encrypted subset of data, thereby encrypting the overlapping data using the first encryption technique and the second encryption technique.   
     
     
         23 . The non-transitory computer readable medium of  claim 22 , further comprising:
 producing two or more shares of data from the second encrypted subset of data, each share containing a selection of data from the second encrypted subset of data; and   outputting the two or more shares for storage at separate storage locations.   
     
     
         24 . The non-transitory computer readable medium of  claim 22 , wherein the first and second encryption techniques are different encryption techniques. 
     
     
         25 . The non-transitory computer readable medium of  claim 22 , wherein the first and second encryption techniques are the same encryption techniques but use different keys. 
     
     
         26 . The non-transitory computer readable medium of  claim 22 , wherein the first subset of data is identified deterministically. 
     
     
         27 . The non-transitory computer readable medium of  claim 22 , wherein the first subset of data is identified according to a keyed arrangement technique. 
     
     
         28 . The non-transitory computer readable medium of  claim 22 , wherein the second encrypted subset of data includes a cipherblock of data encrypted using the second encryption technique, and the two or more shares are produced such that no share includes all of the cipherblock. 
     
     
         29 . The non-transitory computer readable medium of  claim 22 , wherein the first encrypted subset of data includes a cipherblock of data encrypted using the first encryption technique, and the second subset of data does not include all of the cipherblock. 
     
     
         30 . The non-transitory computer readable medium of  claim 22 , wherein the first subset of data is identified as a row of a two-dimensional representation of the data set. 
     
     
         31 . The non-transitory computer readable medium of  claim 30 , wherein the second subset of data is identified as a column of the two-dimensional representation of the data set.