Cloud-Based Secure File Transfer with Identity-Based Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for person-to-person secure file transfers are often overly complex and require users to manage encryption keys, making it difficult for non-technical users to securely transfer confidential files between computers.
Innovation Solution
A system that uses a cloud computing system to manage public and private keys for identity-based encryption, allowing users to securely send and receive files by encrypting files with a message key and decrypting them using the recipient's public and private keys, respectively, without the need for users to handle key management.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional secure file transfer methods (PGP, cloud services with SSL) are used, then file confidentiality is protected during transit and at rest, but the process becomes overly complicated and requires users to manage encryption keys
Solution Approach 1:
The patent introduces a certificate authority (CA) as an intermediary that issues digital certificates containing public keys. Instead of users directly managing complex key pairs, the CA mediates the key distribution process by providing pre-configured certificates that users can simply share. This intermediary layer abstracts the complexity of asymmetric encryption while maintaining security.
Solution Approach 2:
The system enables users to automatically generate and manage their own digital certificates without requiring manual key exchange or complex cryptographic operations. The originating computer automatically creates a certificate with its public key, and the receiving computer automatically verifies it using the CA's public key, making the entire process transparent to users.
2Reliability
If users are required to exchange and manage encryption keys, then secure file transfer can be achieved, but the complexity increases significantly for non-technical users
Solution Approach 1:
The system performs preliminary actions by having the certificate authority pre-generate and sign digital certificates before they are needed for file transfer. Users receive pre-configured certificates that already contain valid public keys authenticated by the CA, eliminating the need for users to perform key generation, exchange, or management operations at the time of file transfer.
Solution Approach 2:
The patent extracts the complex key management functionality from the user's responsibility and places it in the system automatically. The originating computer automatically generates and shares certificates, while the receiving computer automatically verifies them using the CA's public key, removing key management complexity from the user's task.
3Ease of operation
If simple email attachment transfer is used, then ease of operation is maintained, but file confidentiality is compromised
Solution Approach 1:
The patent replaces the simple but insecure mechanical process of attaching and emailing files with an automated cryptographic system. The originating computer automatically encrypts the file using the receiving computer's public key from its certificate, and the receiving computer automatically decrypts it using its private key, maintaining simplicity while adding security through cryptographic substitution.
Data Source
AI summary
A person-to-person secure file transfer system includes an originating computer that receives a public key of a recipient from a cloud computing system. The originating computer encrypts a file using a message key, and encrypts the message key using the public key of the recipient. The encrypted file is stored in the cloud computing system. In response to a request from a receiving computer, the cloud computing system decrypts the encrypted message key using a private key of the recipient, decrypts the encrypted file using the message key, and provides the now decrypted file to the receiving computer. In another example, the cloud computing system provides the private key of the recipient and the encrypted file to the receiving computer, which decrypts the encrypted message key using the private key of the recipient and decrypts the encrypted file using the message key.