Containerized Third-Party Application Data Exchange
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for secure data exchange with third-party applications face challenges in managing access rights and ensuring data security, particularly when dealing with non-trusted applications and forgotten passwords, which can lead to unauthorized access and data leakage.
Innovation Solution
The system converts non-trusted third-party applications into containerized applications with restricted access and applies a wrapper suite to trusted applications incapable of recognizing access rights, ensuring secure operations by encrypting documents with asymmetric key pairs and implementing access limitations, while allowing authorized users to perform document-related operations within a virtual secured space.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If corporate data is stored in encrypted form to prevent access by malicious third parties, then data security is improved, but the corporate enterprise may be unable to access the encrypted space without the user's password and administrators cannot recover the data if the user forgets the password
Solution Approach 1:
The patent introduces a trusted third-party application as an intermediary that holds the decryption capability. The system architecture includes a key management service that securely stores encryption keys and allows authorized access without requiring the original user password, thus mediating between data security and accessibility requirements
Solution Approach 2:
The system performs preliminary actions by pre-establishing trust relationships and key management infrastructure before data encryption occurs. The trusted third-party application is configured with appropriate permissions and key access capabilities in advance, enabling password recovery without compromising security
2Ease of operation
If users use personal computers for work-related computing to improve convenience, then ease of operation is improved, but personal computers have more risk of being hacked or stolen than corporate computers, increasing risk of leaking sensitive corporate documents
Solution Approach 1:
The patent implements local quality by creating a secured virtual space with differentiated security properties on the personal computer. Within this virtualized environment, corporate data receives enhanced security protection through encryption and access controls, while the rest of the system maintains normal operational convenience
Solution Approach 2:
The system segments the personal computer environment into isolated virtual spaces - a secured container for corporate data and applications, separated from the unsecured host environment. This segmentation prevents compromise of corporate data even if the personal computer is hacked or stolen
3Adaptability or versatility
If a rogue application or unauthorized application registers itself on the same device to perform operations, then application functionality is improved, but the rogue application can receive the corporate data and may be able to access and freely redistribute all the corporate data
Solution Approach 1:
The trusted third-party application serves as an intermediary between rogue/unauthorized applications and corporate data. It controls and mediates all data access requests, allowing applications to function while preventing unauthorized data exposure through enforced access policies and encryption
Solution Approach 2:
The system applies local quality by granting different security permissions to different applications within the secured virtual space. The trusted third-party application receives appropriate access rights while rogue applications are restricted, allowing functional versatility while maintaining security through differentiated local permissions
Data Source
AI summary
Methods and systems for performing exchange of data with third-party applications are described. The method includes receiving a request for performing document related operation on document using a third-party application. The method includes converting third-party application into containerized application using containerization mechanism. The method includes allocating virtual secured space to containerized application. The method includes encrypting document using public key of containerized application. The method includes providing encrypted document to containerized application that implements limitations on encrypted document. The method includes facilitating performance of document related operation on encrypted document to create updated document. The encrypted document is decrypted using private key of containerized application before performing document related operation on encrypted document. The method includes decrypting updated document re-encrypted by third-party application using encryption key. The method further includes storing updated document in virtual secured space.