RESILIENT SECRET SHARING CLOUD BASED ARCHITECTURE FOR DATA VAULT

摘要

A method of securely storing data is described. The method comprises: providing, within a secure data storage system, a plurality of secret sharing methods for selection and identifying, a striping policy for storage of the data, in accordance with input preferences. The method further comprises, splitting the data into a plurality, N, of secret shares according to a selected one of the plurality of secret sharing methods, the selection being determined by the striping policy, wherein a threshold number, T, of such shares is sufficient to recover the data, where T is less than N, generating metadata associated with the data, the metadata identifying the selected secret sharing method and storing the metadata within the secure data storage system and writing the secret shares to storage that includes storage outside the secure data storage system, such that, when at least T shares are retrieved, the metadata can be recalled to identify the selected secret sharing method for recovery of the data.