Encrypted Data Access via Intermediary Container and Key Negotiation

The patent introduces a container application as an intermediary layer between the encrypted data and third-party applications. The container app maintains security by keeping data encrypted while providing controlled access through its own interface. Third-party applications interact with the container application rather than directly accessing encrypted files, thus the intermediary protects the security boundary while enabling usability.

The patent extracts the file type handling logic from the container application itself and delegates it to separate third-party applications. The container application only manages encryption and container operations, while specific file types are handled by specialized applications that the user installs. This extraction reduces the storage and processing burden on the container application while maintaining support for multiple file types through the ecosystem of third-party apps.

The patent implements automatic key management where the container application handles key generation, storage, and rotation without requiring user intervention. The system automatically manages multiple encryption keys and handles the complexity of key updates in the background. This self-service approach maintains high security through frequent key updates while preserving user convenience by eliminating manual key management tasks.

The patent implements a mechanism where access policies and encryption keys are cached locally on the mobile device in advance. When the device is offline, it continues to enforce the cached policies without needing real-time communication with the server. This preliminary action ensures that policy updates are applied reliably even when the device is disconnected, as the device already has the necessary policy information stored locally from previous connections.