Encrypted File Sharing With SSO Verification and Auto-Deletion
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing file sharing methods, such as cloud storages and end-to-end encryption, face security vulnerabilities due to custodial storage and memory overhead issues, while traditional email sharing is insecure and inefficient.
Innovation Solution
Implementing a file sharer that performs independent encryption and automatic deletion of files, using a Single Sign-On (SSO) service for user verification, and managing metadata separately from the cloud storage to enhance security and reduce memory overhead.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If cloud storage is used for file sharing, then ease of operation is improved, but security is worsened due to custodial storage vulnerabilities
Solution Approach 1:
The patent introduces an intermediary encryption layer between the user and cloud storage. Files are encrypted using recipient-specific keys before upload to cloud storage, making the cloud storage provider unable to access file contents. This intermediary encryption mechanism resolves the contradiction by maintaining cloud storage's operational convenience while eliminating its security vulnerabilities.
Solution Approach 2:
The patent segments the file sharing process into distinct cryptographic operations: key generation, file encryption, and secure transmission. By separating these functions, the system achieves both ease of operation (automated key management) and security (recipient-specific encryption keys that prevent unauthorized access).
2Reliability
If end-to-end encryption is implemented, then security is improved, but device complexity is worsened due to memory overhead
Solution Approach 1:
The patent implements self-service cryptography where the system automatically generates and manages encryption keys without requiring user intervention. The key management infrastructure handles complex cryptographic operations autonomously, reducing perceived device complexity while maintaining strong security through automated key generation, distribution, and rotation.
3Ease of operation
If traditional email sharing is used, then ease of operation is improved, but security is worsened due to insecure transmission
Solution Approach 1:
The patent applies preliminary encryption action before file transmission. Files are encrypted with recipient-specific keys prior to upload, ensuring that even if transmission is intercepted, the content remains inaccessible. This preliminary security measure maintains the simplicity of cloud-based file sharing while eliminating the security vulnerabilities of traditional email transmission.
Data Source
AI summary
In some implementations, a file sharer may receive, from a first user device, a file and an indication of a set of additional users and may perform encryption on the file to generate an encrypted file. The file sharer may transmit the encrypted file to a cloud storage. The file sharer may receive, from a second user device, a request for the file and may contact a single sign on service to authenticate a user of the second user device. The file sharer may verify that the user of the second user device is included in the set of additional users. The file sharer may receive the encrypted file from the cloud storage and may perform decryption on the encrypted file to generate a copy of the file. The file sharer may transmit, to the second user device, the copy of the file.