Backup Encrypted Files via Encryption Filter Driver Disable
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computer file backup and restore systems are unable to effectively backup and restore encrypted files in their encrypted state due to the default enabled status of encryption filter drivers, which requires specific operating system APIs and lacks provisions for disabling the encryption filter driver during these processes.
Innovation Solution
A method and system that involves receiving the filename of the encrypted file, starting a backup or restore process, disabling the encryption filter driver using IOCTL requests, backing up or restoring the encrypted data and metadata, and reenabling the filter driver to maintain data integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the encryption filter driver is left enabled during backup, then data security is maintained, but the backup application cannot retrieve encrypted data and metadata in their encrypted state
Solution Approach 1:
The system performs preliminary actions by disabling the encryption filter driver before the backup process begins, allowing the backup application to access encrypted files in their encrypted state. After the backup is complete, the driver is re-enabled to restore security. This preliminary disabling action resolves the contradiction by temporarily suspending encryption during the backup operation.
Solution Approach 2:
The encryption filter driver's state is made dynamic rather than static. The driver can be enabled or disabled based on the operational context - enabled during normal operations to maintain security, and disabled during backup operations to allow access to encrypted data. This dynamic state change resolves the contradiction between security and backup capability.
2Ease of operation
If the encryption filter driver is disabled during backup, then encrypted files can be backed up in their encrypted state, but data security is temporarily compromised
Solution Approach 1:
The system performs preliminary actions by disabling the encryption filter driver before the backup process begins, allowing the backup application to access encrypted files in their encrypted state. After the backup is complete, the driver is re-enabled to restore security. This preliminary disabling action resolves the contradiction by temporarily suspending encryption during the backup operation.
Solution Approach 2:
The encryption filter driver is periodically enabled and disabled based on operational requirements. It remains enabled during normal operations, is temporarily disabled during backup operations, and is re-enabled afterward. This periodic state change resolves the contradiction by limiting the security compromise to only the necessary duration of the backup operation.
3Ease of operation
If operating system-specific API routines are used to access encrypted data, then encrypted files can be read, but the system complexity increases and portability decreases
Solution Approach 1:
The system performs preliminary actions by disabling the encryption filter driver before the backup process begins, allowing the backup application to access encrypted files in their encrypted state. After the backup is complete, the driver is re-enabled to restore security. This preliminary disabling action resolves the contradiction by temporarily suspending encryption during the backup operation.
Data Source
AI summary
The present invention provides a method and system of backing up at least one encrypted computer file encrypted by an encryption filter driver running on an operating system of a computer system and restoring at least one encrypted computer file encrypted by an encryption filter driver running on an operating system of a computer system. In an exemplary embodiment, the method and system of backing up at least one encrypted computer file encrypted by an encryption filter driver running on an operating system of a computer system include (1) receiving the filename of the encrypted computer file, (2) starting a backup process for the encrypted computer file, (3) disabling the encryption filter driver for the backup process, (4) backing up the encrypted computer file via the backup process, and (5) reenabling the encryption filter driver for the backup process.