Document Encryption Key Generation and Access Binding
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Network-based storage systems face challenges in ensuring that encrypted documents are accessed only by authorized recipients while minimizing the risk of data tampering, especially when documents are shared among multiple users, as conventional methods struggle to maintain security after documents are copied to user devices.
Innovation Solution
A method and system that generate and allocate a new key for each sharing action, encrypting documents using a primary key and binding access rights, which includes sequence information about users in the sharing path, to ensure secure sharing and access, utilizing a shared path compression technique to reduce the need for multiple decryptions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If a single key is used to encrypt the document for secure sharing, then the encryption simplicity is improved, but the security risk increases because the key must be constantly protected and the document remains vulnerable after being copied to user devices
Solution Approach 1:
The patent segments the encryption process by generating a unique key for each sharing action rather than using a single key. Each key is tied to specific access rights and sharing path information, dividing the security management into discrete, controllable units that can be individually revoked or modified without affecting other shares
Solution Approach 2:
The patent binds access rights and sharing path information to the key in advance before the document is shared. This preliminary binding ensures that the key inherently contains the necessary authorization information, eliminating the need for separate key management and protection mechanisms during the sharing process
2Reliability
If multiple decryptions are performed to retrieve the original document through the sharing path, then the security verification is improved, but the time required to retrieve the document increases
Solution Approach 1:
The patent merges the key generation, access rights binding, and sharing path information into a single cryptographic operation. By combining these functions into one step, the system eliminates the need for sequential multiple decryptions while maintaining security verification, as the single key inherently contains all necessary authorization information
Data Source
AI summary
Methods and systems for encrypting shared information through its life cycle are described. The method includes receiving and storing a document. The method further includes encrypting document using a primary key. Further, the method includes receiving sharing request from current user of document for sharing document with a next user. The method includes, for each time the document is to be shared with next user in a series, generating a key for next user specified in sharing request. The method further includes encrypting document for next user using key generated for corresponding next user. Furthermore, the method includes binding access rights to document for authorizing request to access document by next user. The method includes sharing encrypted document with next user. Thereafter, the method includes receiving a request to access the document from the next user and providing the access to encrypted document meant for next user to next user.