Digital information infrastructure and method for security designated data and with granular data stores

What is this patent about?

’169 is related to the field of distributed cloud-based data management and information security. It addresses the technical challenge of protecting sensitive information within an open ecosystem where data is frequently moved, shared, or stored in unstructured formats. The background context involves the risk of data leakage from both external hackers and internal actors, necessitating a more robust method for isolating mission-critical content from common data across a network of distributed storage nodes.

The underlying idea behind ’169 is the physical and logical decoupling of sensitive information from its original context through a process of granular extraction and dispersal. Rather than relying solely on perimeter defenses or file-level encryption, the invention identifies specific high-value data elements—referred to as select content—and separates them from the remaining data. This creates a state of 'formlessness' where the sensitive components and the residual 'remainder' data are stored in different locations, rendering the information useless to an unauthorized actor who cannot access all the necessary pieces simultaneously.

The claims of ’169 focus on a method for organizing data by extracting security (SEC) designated data and storing it in specific select content (SC) data stores, while simultaneously parsing the remaining data into granular data stores. This process is governed by a dual-parsing mechanism that utilizes both random distribution and predetermined algorithms linked to the sensitive content. Access to any of these distributed components is strictly regulated by independent access controls at each store, ensuring that data can only be withdrawn and reconstructed when the proper credentials are provided.

In practice, the system functions by scanning incoming data streams or documents and identifying predetermined words, images, or objects that match an enterprise's security policy. These elements are pulled into the cloud-based SC stores, while the leftover data is broken into fragments and scattered across granular stores. To rebuild the original information, a reconstruction module must navigate the access controls of multiple stores to pull the SEC data and the parsed remainder data back together, effectively acting as a secure compiler for the authorized user.

This approach differs from prior solutions by moving away from simple classification labels, which can be manipulated or bypassed by attackers. Traditional systems often treat a document as a single unit of security; however, ’169 treats data at a granular level, ensuring that even if one storage node is compromised, the attacker only obtains an incoherent fragment of the whole. By integrating random parsing with algorithmic dispersal, the invention forces a 'digital bureaucracy' that requires multiple successful authentications across a distributed network to recover any meaningful information.