Dual Secret Code Data Access for Secure File Closing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data management systems lack security measures to confirm the correctness of input and operation data during the closing process, leading to potential errors or unauthorized access, especially in sensitive applications like personal data storage, where incorrect data can be inadvertently or intentionally altered and transmitted, posing risks of data leakage.
Innovation Solution
A data management system that employs a dual secret code system, where an open secret code authenticates data access and decryption during data access and editing, and a close secret code re-encrypts data upon completion, ensuring correct input and operation content verification and secure closure, even when personal data is stored on a network.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security measures are implemented only at the opening stage of data access, then authentication is performed, but data may be incorrectly altered or leaked during closing without verification
Solution Approach 1:
The patent applies preliminary action by requiring the close secret code authentication before the closing operation is finalized. The system预先 (in advance) prepares the verification mechanism that mandates authentication at the closing stage, ensuring data integrity checks are performed before data is committed to storage, thus preventing incorrect alterations without complicating the user interface.
Solution Approach 2:
The patent implements feedback by introducing a verification loop at the closing stage where the close secret code is authenticated and the data is verified before final storage. This feedback mechanism ensures that any incorrect data alterations are detected and prevented, maintaining data integrity while providing a structured closing process.
2Ease of operation
If data is stored in decrypted state for easy access, then browsing and editing are convenient, but unauthorized access and data leakage risks increase
Solution Approach 1:
The patent applies preliminary action by decrypting data only after the open secret code authentication is successfully performed. The system prepares the decrypted state conditionally, ensuring that data is made accessible only when proper authentication has occurred, thus balancing convenience with security.
Solution Approach 2:
The patent inverts the conventional approach by not automatically decrypting data upon opening, but rather requiring authentication first and then selectively decrypting. This inversion ensures that the decrypted state is achieved only through proper authorization, reducing unauthorized access risks while maintaining ease of operation for authorized users.
3Productivity
If simple closing process is allowed without authentication, then operation speed is maintained, but data leakage and unauthorized modifications cannot be prevented
Solution Approach 1:
The patent applies preliminary action by preparing the authentication verification in advance at the closing stage. The close secret code check is readied before the actual closing operation, ensuring that security verification is performed efficiently without significantly impacting the closing speed, while simultaneously preventing data leakage.
Solution Approach 2:
The patent implements skipping by allowing authorized closing operations to proceed quickly once the close secret code is authenticated. The system rushes through the verification process for authorized users, maintaining high productivity while ensuring security through the mandatory authentication mechanism.
Data Source
AI summary
To provide an application in which security settings for verifying that input content and operation content are correct are set not only when opening an application file but also when terminating and closing the application file, thereby effectively reducing erroneous input unauthorized input. A data management system of the present invention includes: a data access unit open program module in which an open secret code for opening each data access unit by the application program and a close secret code for closing each data access unit that is opened by the application program are set for each data access unit. When the authentication of the open secret code is established, corresponding data access unit are downloaded in an encrypted state, decrypted and opened. When the authentication of the close secret code is established, the data access unit in the open state is terminated, re-encrypted and closed.