System and method for managing the security of sensitive data using multiple encryption

Abstract

Methods and systems for managing data are disclosed. An endpoint may rely on access to sensitive data in order to provide computer-implemented services. The sensitive data may be encrypted using a volume master key (VMK). The VMK may be protected by security protocols implemented on the endpoint that may prevent access to the VMK if hardware of the endpoint has failed and/or has been altered. Thus, a hardware failure may result in an indefinite loss of access to the sensitive data. To prevent loss of data access, the VMK may be managed using secure backup and recovery processes. The processes may include multiply encrypting the VMK using key pairs managed by multiple entities, and the decryption keys may be secured in multiple locations. To sequentially decrypt the VMK during the recovery process, security checks may be performed by each entity, and the final decryption may be performed by the endpoint.