Browser Drag Drop Encryption via Virtual File System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Information handling systems face security risks when users upload files through web browsers, as the files become accessible to unintended recipients, and existing encryption methods may not adequately protect data during upload processes, especially with drag and drop functionality.
Innovation Solution
Implementing a virtual file system that operates in the background to encrypt files before upload, preventing unencrypted files from being retrieved by the browser and ensuring encryption standards are met through a transformer module, which directs file input/output activity and enforces encryption algorithms during browser drag and drop operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a virtual file system is implemented to encrypt files in the background, then data security is improved, but device complexity increases
Solution Approach 1:
A virtual file system is introduced as an intermediary layer between the user and the physical file system. This virtual layer intercepts file access requests, applies encryption/decryption operations, and manages key storage, thereby providing security without requiring changes to user applications or browsers. The virtual file system acts as a transparent mediator that handles security operations in the background.
Solution Approach 2:
The system implements automatic encryption and decryption operations without requiring user intervention. The virtual file system automatically detects when files are being accessed through the browser drag-and-drop interface and applies encryption/decryption transparently. Users simply drag and drop files as usual, while the system self-manages the security operations in the background.
2Reliability
If encryption is enforced during browser drag and drop uploads, then data security is improved, but ease of operation deteriorates
Solution Approach 1:
The virtual file system automatically handles encryption and decryption operations without requiring user awareness or intervention. When users drag and drop files into the browser, the system self-service manages the security operations transparently in the background, maintaining simple user interaction while ensuring security compliance.
Solution Approach 2:
The virtual file system serves as an intermediary that transparently handles encryption/decryption between the file system and the browser application. Users interact with the simple drag-and-drop interface while the virtual file system mediates the security operations, hiding the complexity of encryption management from the user.
3Reliability
If unencrypted files are prevented from being retrieved by the browser, then data security is improved, but productivity decreases
Solution Approach 1:
Files are pre-encrypted at rest in the file system before any browser access occurs. The virtual file system maintains encrypted files on disk and only decrypts them temporarily during active browser sessions. This preliminary encryption ensures security is established before potential security threats arise, while allowing efficient access during authorized operations.
Solution Approach 2:
The virtual file system acts as an intermediary that manages encryption/decryption operations efficiently. It maintains encrypted files on disk and provides decrypted access only when needed for active browser sessions, optimizing the balance between security and performance by managing cipher operations transparently in the background.
Data Source
AI summary
Some websites accessed via browser allow for file uploading via drag and drop functionality. In a drag and drop operation, a user selects a file on the information handling system and drags the file to a browser window for uploading via the browser. File encryption systems, such as virtual file systems, may implement an encryption algorithm and enforce encryption standards, set by a user or organization, when uploading files via a browser, including uploading of files performed via file drag and drop functionality.