Data security is the cornerstone of every data storage system and encryption is invariably employed as a means of protection. Users of encrypted storage systems assume that their data are 100% secure against intrusion but, unfortunately, no system can ever be 100% secure – merely as secure as the limits of current technology permit.

Disregarding the issue of recoverability of data, the security of encrypted systems is a fallacy designed to sell “peace of mind” in a fashion analogous to software malware protection since anti-virus software, for example, can provide protection only until the newest strain of virus not dealt with by the software is released.

The problem is often made worse by the fact that in network architectures, encryption takes place on the storage disk (becoming the responsibility of a potentially disgruntled employee) whereas it should be occurring at the workplace which then creates additional management overhead. As it is, even multiple-key encrypted workplace hard-drives are extremely susceptible to security breaches as shown in the research undertaken by J. A. Halderman et al of Princeton University, USA.

“True security” can only be provided in a multiple-key workplace environment providing automated total removal of all relevant encrypted data to multiply-redundant disaster-protected server storage disks. The fact that no data reside at the workplace overcomes the issue raised by Halderman et al; multiple user-defined encryption keys overcome any “disgruntled/dismissed employee” issue. Simultaneously, the architecture proposed overcomes the recoverability issue referred to at the beginning. Even in the event of the implementation of encryption software, this should be supplemented by implementing the above measures.

Currently, only one commercially available system meets all the requirements, namely CyberStor developed and marketed by SAFENCRYPTS. In addition to providing the aforementioned necessary additional security and in a way which does not unnecessarily overload management overhead, CyberStor addresses another important issue, namely data storage-capacity overhead and which it substantially reduces.