Secure data storing and retrieval system and method

Abstract

Aspects of the subject disclosure may include, for example, a processing system including a processor; and a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations including: dividing data provided for storage into data segments; encrypting each data segment of the data segments with an encryption key, thereby creating encrypted data slices; arranging a cluster of sectorized servers in an ordered list of sectorized servers; selecting a first sectorized server from the ordered list of sectorized servers; generating an access key; and sending a first encrypted data slice of the encrypted data slices and the access key to the first sectorized server, wherein the first sectorized server stores the first encrypted data slice in a sector of the first sectorized server, and retrieves the first encrypted data slice from the sector upon presentation of the access key. Other embodiments are disclosed.

What is claimed is: 
     
         1 . A non-transitory machine-readable medium, comprising executable instructions that, when executed by a processing system including a processor, facilitate performance of operations, the operations comprising:
 receiving a data segment and an access key;   storing the data segment in a data sector;   generating a record in a directory, wherein the record comprises an identification of the data sector, a length of the data segment, and the access key;   receiving a broadcast comprising the access key from a trusted computer system;   retrieving the data segment from the data sector based on receiving the access key; and   sending the data segment to the trusted computer system.   
     
     
         2 . The non-transitory machine-readable medium of  claim 1 , wherein the operations further comprise:
 generating a hash of the data segment;   storing the hash in the record of the directory; and   sending the hash with the data segment to the trusted computer system.   
     
     
         3 . The non-transitory machine-readable medium of  claim 2 , wherein the operations further comprise: choosing the data sector at random from unused data sectors. 
     
     
         4 . The non-transitory machine-readable medium of  claim 3 , wherein the operations further comprise:
 moving the data segment from the data sector to a randomly chosen data sector selected from the unused data sectors; and   updating the record of the directory with an identification of the randomly chosen data sector.   
     
     
         5 . The non-transitory machine-readable medium of  claim 4 , wherein the moving of the data segment is performed periodically. 
     
     
         6 . The non-transitory machine-readable medium of  claim 5 , wherein the processor comprises a plurality of processors operating in a distributed computing environment. 
     
     
         7 . A method, comprising:
 broadcasting, by a processing system including a processor, a first access key to a cluster of sectorized servers;   receiving, by the processing system, a second access key with a first encrypted data segment from a first sectorized server of the cluster of sectorized servers; and   decrypting, by the processing system, the first encrypted data segment using a decryption key, thereby creating a first data segment.   
     
     
         8 . The method of  claim 7 , further comprising:
 broadcasting, by the processing system, the second access key to the cluster of sectorized servers;   receiving, by the processing system, a third access key with a second encrypted data segment from a second sectorized server of the cluster of sectorized servers;   decrypting, by the processing system, the second encrypted data segment using the decryption key, thereby creating a second data segment; and   appending the second data segment to the first data segment.   
     
     
         9 . The method of  claim 8 , further comprising:
 repeating the steps of receiving, decrypting, and appending data segments until all data segments have been appended, thereby creating retrieved data; and   sending the retrieved data to a trusted computer system.   
     
     
         10 . The method of  claim 9 , further comprising:
 receiving user credentials from the trusted computer system; and   generating the first access key from the user credentials.   
     
     
         11 . A device comprising:
 a processing system including a processor; and   a memory that stores executable instructions that, when executed by the processing system, facilitate performance of operations, the operations comprising:   generating a record in a directory, wherein the record comprises an identification of a data sector, a length of a data segment stored in the data sector, and an access key;   receiving a broadcast comprising the access key from a trusted computer system;   retrieving the data segment from the data sector based on receiving the access key; and   sending the data segment to the trusted computer system based on the retrieving of the data segment.   
     
     
         12 . The device of  claim 11 , wherein the operations further comprise:
 generating a hash of the data segment.   
     
     
         13 . The device of  claim 12 , wherein the operations further comprise:
 sending the hash with the data segment to the trusted computer system.   
     
     
         14 . The device of  claim 11 , wherein the operations further comprise:
 choosing the data sector at random from unused data sectors.   
     
     
         15 . The device of  claim 14 , wherein the operations further comprise:
 moving the data segment from the data sector to a randomly chosen data sector selected from the unused data sectors; and   updating the record of the directory with an identification of the randomly chosen data sector.   
     
     
         16 . The device of  claim 15 , wherein the moving of the data segment is performed periodically. 
     
     
         17 . The device of  claim 11 , wherein the receiving of the broadcast is based on an authentication of a user. 
     
     
         18 . The device of  claim 17 , wherein the authentication of the user is based on a username and a password. 
     
     
         19 . The device of  claim 11 , wherein the operations further comprise:
 decrypting the data segment based on the retrieving of the data segment, resulting in a decrypted data segment.   
     
     
         20 . The device of  claim 19 , wherein the sending of the data segment to the trusted computer system comprises sending the decrypted data segment to the trusted computer system.