Cloud Folder Sync Security Scan Integration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current cloud folder synchronization services do not effectively integrate security scan results, leading to redundant security scans and the synchronization of potentially unsafe or malicious files across devices without remedial action.
Innovation Solution
A system and method that synchronizes files using a cloud folder synchronization service, propagates files to a backend server for security scanning, and adjusts synchronization based on the scan results, allowing known safe files to be skipped, blocking access to unsafe files, and requiring user approval for synchronization.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If cloud folder synchronization services automatically synchronize files between devices, then file accessibility and synchronization speed are improved, but security risks increase due to propagation of potentially unsafe or malicious files
Solution Approach 1:
The system performs security scanning of files before they are synchronized to other devices. The backend server scans files and returns results before the synchronization process completes, allowing potentially malicious files to be blocked in advance. This preliminary security check prevents harmful files from propagating across devices while maintaining efficient synchronization for safe files.
Solution Approach 2:
The backend server acts as an intermediary between client devices, receiving files for scanning, evaluating their safety, and returning results to control the synchronization process. This intermediary security scanning layer filters out malicious files before they can be automatically propagated, resolving the contradiction between fast synchronization and security protection.
2Reliability
If security scans are performed on all synchronized files, then security coverage is improved, but system performance deteriorates due to redundant scans
Solution Approach 1:
The system implements feedback by having the backend server return security scan results to client devices. When a file is scanned and deemed safe, this feedback information is cached and used to skip redundant security scans on subsequent synchronization operations. This feedback mechanism ensures comprehensive security coverage for unknown files while maintaining high synchronization performance for known safe files.
Solution Approach 2:
The system creates a copy of security scan results in the backend server's cache or database. Instead of performing the full security scan on every device, the system retrieves and uses the cached scan results, effectively copying the security verification across multiple devices without repeating the actual scanning operation.
3Productivity
If cloud folder synchronization services integrate security scan results, then security efficiency is improved, but system complexity increases
Solution Approach 1:
The backend server is designed to perform multiple functions: it handles file reception, security scanning, result caching, and synchronization control all within a single integrated system. This multi-functional approach consolidates what would otherwise be separate complex components into one unified service, improving security efficiency while managing system complexity through functional integration rather than component proliferation.
Data Source
AI summary
A computer-implemented method for providing security for synchronized files may include (1) synchronizing, using a cloud folder synchronization service, a backend server with both a client folder on a client machine and an additional client folder on an additional client machine, (2) propagating a file from the client folder to the backend server through the cloud folder synchronization service, (3) identifying, using the cloud folder synchronization service, a result of a security scan of the propagated file, and (4) adjusting, using the cloud folder synchronization service, the synchronization of the file with the additional client folder based on the result of the security scan. Various other methods, systems, and computer-readable media are also disclosed.