Encrypted Authorization Combination for Secure File Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing block-based storage systems lack secure verification of client authority and validation of block lists, as they rely on trusted networks and clients, with block lists being transmitted in plain text, which compromises data access security.
Innovation Solution
A method and system that generate an authorization combination at a metadata server, including a block list and an authorization prefix, encrypt it, and then decrypt it at the storage server to ensure secure data access, verifying user permissions and authenticity through a token-based mechanism.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If block lists are transmitted in plain text over the network, then ease of operation is improved, but security is worsened
Solution Approach 1:
The patent introduces an encryption intermediary mechanism where block lists are encrypted using a key derived from user credentials before transmission. The storage server acts as a mediator that decrypts and validates these encrypted block lists using stored hashed credentials, preventing plain text exposure while maintaining operational functionality.
Solution Approach 2:
The patent transforms the block list from plain text format to encrypted format by applying cryptographic transformations. User credentials are hashed to generate encryption keys, changing the parameter state of data from readable to protected form during transmission and storage operations.
2Device complexity
If trusted network assumptions are made, then device complexity is reduced, but reliability is worsened
Solution Approach 1:
The patent performs preliminary authentication by hashing user credentials and generating encryption keys before any data access operations. The storage server pre-stores these hashed credentials and uses them to validate encrypted block lists, ensuring verification occurs before data transfer rather than relying on network trust assumptions.
3Ease of operation
If no validation of block list authenticity is performed, then ease of operation is improved, but security is worsened
Solution Approach 1:
The patent implements a feedback validation mechanism where the storage server decrypts the encrypted block list using the user's hashed credentials and verifies its authenticity before allowing data access. This feedback loop ensures that only properly authenticated and authorized block lists are processed, preventing unauthorized access while maintaining operational ease for legitimate users.
Data Source
AI summary
A method and system of enforcing file authorization access. The method may include generating an authorization combination at a metadata server and encrypting the authorization combination. The authorization combination may include a block combination including a block list for accessing user requested data from a storage server system and an authorization prefix. The authorization prefix may indicate at least one operation which the user requesting data access is authorized to perform. The method may further include receiving the encrypted authorization combination at the storage server, and decrypting the encrypted authorization combination to recover the block list for retrieving the user requested data.