Secure Cloud Data Access via Guardian Authorization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing cloud storage and sharing platforms have limitations in access control and usability, failing to meet the technical specifications required by business and personal users, particularly in ensuring secure and customizable access to digitally stored information.
Innovation Solution
The system provides secure access control through a graphical user interface (GUI) on multiple devices, allowing data owners to allocate vault space, associate keyholders and guardians, and manage access requests and authorizations, ensuring that only authorized individuals can access the data, even in emergency situations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If cloud storage platforms provide file sharing functionality with download capabilities, then users can access and use shared files conveniently, but the original owner loses control over the files after sharing
Solution Approach 1:
The patent introduces a cloud storage platform as an intermediary between the file owner and the user. The platform maintains encrypted files on its servers and controls all access operations. Users receive shareable links that grant view-only access through the platform's interface, but cannot download or obtain the actual files. The platform acts as a mediator that enables convenient access while preserving the owner's control by designating itself as the sole authority for file distribution.
2Reliability
If cloud storage platforms allow users to specify other users with account credentials for file access, then access control is enhanced, but the system complexity increases
Solution Approach 1:
The patent extracts the authentication mechanism from the file sharing system. Instead of requiring users to have account credentials or be registered on the platform, the system uses anonymous shareable links that contain all necessary access information. The links can be freely distributed without requiring the recipient to create an account or log in. This separates the authentication function from the user management system, simplifying the overall architecture while maintaining secure access control.
3Reliability
If cloud storage platforms implement emergency access features with time-delayed approval, then data security is improved, but the access time is delayed
Solution Approach 1:
The patent implements preliminary action by requiring file owners to pre- designate trusted contacts and define access conditions before any sharing event occurs. The system stores these predetermined instructions in encrypted form on its servers. When a sharing event is triggered (such as an emergency situation), the system automatically executes the pre-configured access rules without requiring real-time human intervention or approval delays. This eliminates time delays while maintaining security through advance planning.
Data Source
AI summary
Systems, methods, and software for secure access control to digitally stored information. Owners of digitally stored information enter access control data using a first graphical user interface (GUI) on a first device. Vault space is allocated in memory for receiving and storing the information remotely from the first device. A keyholder and a guardian identified by the access control data are associated with the information. A keyholder access request for the information is transmitted via a second GUI on a second device. Responsive to determining the keyholder to be associated with the information, a third device of a guardian receives a notification of the access request, and the guardian may use a third GUI to transmit an access authorization. The information may be transmitted to the second device upon determining that the guardian is associated with the information.