2D Barcode File Authorization Against Cloud Credential Theft

The patent introduces a second barcode as an intermediary security mechanism between the cloud storage system and the file. This second barcode is embedded in the downloaded file and requires additional authorization from the file owner before the file can be accessed. The intermediary barcode system adds a layer of protection that operates independently from the cloud storage authentication system, preventing unauthorized access even when login credentials are compromised.

The patent uses a simplified barcode representation (second barcode) that contains encoded authorization information. Instead of implementing complex cryptographic verification systems, the invention uses a copied and encoded version of the authorization data in barcode format. This allows the additional security layer to be implemented through simple encoding and decoding operations rather than complex computational procedures.

The patent segments the security control into two distinct parts: the first barcode that authenticates the user to the cloud storage system, and the second barcode that controls access to the specific file. This segmentation allows the cloud storage system to maintain its encryption and access control mechanisms while adding an additional layer of file-specific authorization. The segmented approach enables flexible access control where the file owner can independently manage who can access their files without affecting the overall cloud storage security.