Access-Based Folder and File Name Masking for Content Privacy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users without access rights can guess the contents of folders or files by their displayed names, which are not modified in existing systems.
Innovation Solution
An information processing device modifies the names of folders or files to which users do not have access rights into different character strings, preventing the contents from being guessed.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the name of a folder or file is displayed without modification, then the user can easily identify the contents, but users without access rights can guess the contents from the displayed name
Solution Approach 1:
The patent applies local quality by differentiating the display treatment based on user access rights. Files and folders are categorized into two groups: those the user has access rights to (displayed with original names) and those the user does not have access rights to (displayed with modified names). This localized differentiation maintains information visibility for authorized users while enhancing security for unauthorized users.
Solution Approach 2:
The patent changes the parameter of the file/folder name from its original state to a modified state based on access rights. The name modification involves replacing the original name with a generated character string that does not reveal content information. This parameter change dynamically adjusts the information disclosure level according to the user's authorization status.
2Reliability
If the name of a folder or file is modified to prevent guessing, then security is enhanced, but the user cannot easily identify the contents
Solution Approach 1:
The patent applies local quality by differentiating the display treatment based on user access rights. Files and folders are categorized into two groups: those the user has access rights to (displayed with original names) and those the user does not have access rights to (displayed with modified names). This localized differentiation maintains information visibility for authorized users while enhancing security for unauthorized users.
Solution Approach 2:
Instead of modifying all file names to prevent guessing (which would hurt usability), the patent inverts the approach by only modifying names for files/folders where security is needed (those without access rights). The original names are preserved for authorized files, effectively using the absence of modification as the security indicator rather than the presence of modification.
3Reliability
If all folder or file names are modified, then security is maximized, but information accessibility is reduced for authorized users
Solution Approach 1:
The patent applies local quality by differentiating the display treatment based on user access rights. Files and folders are categorized into two groups: those the user has access rights to (displayed with original names) and those the user does not have access rights to (displayed with modified names). This localized differentiation maintains information visibility for authorized users while enhancing security for unauthorized users.
Solution Approach 2:
Instead of applying name modification to all files and folders (excessive action), the patent applies it only to the subset of files/folders where the user lacks access rights (partial action). This selective approach provides sufficient security for sensitive content while maintaining full accessibility for authorized content, avoiding the unnecessary loss of information visibility.
Data Source
AI summary
An information processing device includes a hardware processor. The hardware processor modifies a name of a folder or a file into a different character string with respect to the original character string describing the folder or file and output the modified character string to the terminal device when a request for displaying the name of the folder or the file stored in a memory is received from a user of the terminal device who is not granted with an access right for accessing the folder or the file stored in the memory.


