| CPC G06F 21/62 (2013.01) [H04L 9/085 (2013.01); H04L 9/3231 (2013.01); H04L 9/3247 (2013.01); H04L 63/0428 (2013.01); H04L 2209/56 (2013.01); H04L 2209/80 (2013.01)] | 27 Claims |

|
1. A method comprising:
obtaining, by a computer system, a key encryption key;
obtaining, by the computer system, a plurality of data blocks;
obtaining, by the computer system, a first data block of the plurality of data blocks, the first data block having first user data;
splitting, by the computer system, the first user data of the first data block into a first plurality of data portions, wherein each of the first plurality of data portions comprises less than all of the first user data, and wherein the first user data can be reassembled using two or more of the first plurality of data portions;
obtaining, by the computer system, a first plurality of data encryption keys which are distinct from each other;
encrypting, by the computer system, each of the first plurality of data portions with a respective one of the first plurality of data encryption keys to provide a first plurality of encrypted data portions;
encrypting, by the computer system, each of the first plurality of data encryption keys with the key encryption key to provide a first plurality of encrypted data encryption keys;
storing, by the computer system, each of the first plurality of encrypted data portions with a respective data indicative of a respective one of the first plurality of encrypted data encryption keys; and
storing, by the computer system, the key encryption key separate from the first plurality of encrypted data portions and the respective data indicative of the respective one of the first plurality of encrypted data encryption keys.
|