Browser Drag-and-Drop Encryption via Virtual File System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Information handling systems face security risks when users upload files through web browsers, as the files become accessible to unintended recipients, and existing encryption methods may not adequately protect data during upload processes, especially in public internet environments and remote storage systems.
Innovation Solution
Implementing a virtual file system that operates in the background to encrypt files using encryption algorithms, preventing unencrypted files from being uploaded by detecting drag and drop operations and redirecting file input/output activities through a transformer module, ensuring that only encrypted files are uploaded to secure sites.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If files are uploaded through web browsers to remote storage systems, then file accessibility and ease of operation are improved, but file security and protection against unauthorized access deteriorate
Solution Approach 1:
The system performs preliminary encryption of files before they are uploaded to remote storage systems. The encryption process is initiated automatically when a user attempts to upload a file, ensuring that the file is secured before leaving the local system. This preliminary action prevents unauthorized access during transmission and storage, resolving the security concern while maintaining ease of operation.
Solution Approach 2:
The patent introduces an intermediary encryption layer between the user's local system and the remote storage system. This intermediary process encrypts files using encryption keys stored locally, creating a security buffer that protects files even when stored on remote systems. The intermediary encryption mechanism allows users to maintain both easy file accessibility and strong security protection.
2Reliability
If encryption is applied to files before upload, then file security is improved, but processing time and system complexity increase
Solution Approach 1:
The system implements self-service encryption where the encryption process is automatically triggered by user actions without requiring manual intervention. When a user attempts to upload a file, the encryption process initiates automatically, selects appropriate encryption keys from local storage, and completes the encryption without user involvement. This self-service approach minimizes additional processing time while maintaining strong security.
Solution Approach 2:
Encryption keys are pre-stored and prepared in the system before upload operations occur. By having encryption keys ready in advance and establishing encryption protocols beforehand, the system reduces the actual processing time required during the upload operation. The preliminary preparation of encryption resources minimizes the time penalty associated with encryption.
3Ease of operation
If drag and drop functionality is allowed in browsers, then ease of operation is improved, but risk of unencrypted file upload increases
Solution Approach 1:
The patent introduces an intermediary security layer that intercepts drag and drop file operations before they reach the browser's upload functionality. This intermediary mechanism detects when a user attempts to drag and drop a file, automatically triggers encryption of the file, and then allows the upload to proceed. The intermediary process protects against unencrypted transmission while preserving the convenient drag and drop user experience.
Solution Approach 2:
The system applies preliminary anti-action by preventing unencrypted files from being uploaded through drag and drop operations. Before the upload can occur, the system checks the file's encryption status and blocks the upload if the file is not encrypted. This preliminary prevention mechanism eliminates the security risk while maintaining user convenience through automatic encryption integration.
Data Source
AI summary
Some websites accessed via browser allow for file uploading via drag and drop functionality. In a drag and drop operation, a user selects a file on the information handling system and drags the file to a browser window for uploading via the browser. File encryption systems, such as virtual file systems, may implement an encryption algorithm and enforce encryption standards, set by a user or organization, when uploading files via a browser, including uploading of files performed via file drag and drop functionality.