Encrypted Host File Sharing With Sender Authorization Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing file sharing methods require all users to have decryption software or be registered to a file sharing service, making them cumbersome and limiting accessibility.
Innovation Solution
A file sharing system that uses symmetric encryption to create an enriched host file containing an encrypted file and a certificate, allowing recipients without decryption software or prior registration to access the file after authorization by the sender, including payment and confidence level settings.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If symmetric encryption is used to create enriched host files with certificates, then file accessibility for unregistered users is improved, but system complexity increases due to certificate management and authorization protocols
Solution Approach 1:
The sender performs preliminary actions by generating a certificate containing their public key and embedding it within the enriched host file before transmission. This preliminary certification enables the recipient to verify the sender's identity and establish secure communication without requiring prior registration or complex setup procedures on the recipient side.
Solution Approach 2:
The certificate acts as an intermediary element that mediates between the sender and recipient. It contains the sender's public key and enables the recipient to encrypt messages or verify signatures without needing the sender's private key or having access to complex key management infrastructure. The certificate bridges the security gap between asymmetric encryption capabilities and simple file sharing interfaces.
2Reliability
If authorization protocols and confidence levels are implemented, then security control is improved, but ease of operation deteriorates due to additional authentication steps
Solution Approach 1:
The system implements partial authorization by allowing senders to specify confidence levels (low, medium, high) that correspond to different authorization thresholds. Instead of requiring full authentication for all operations, the system applies authorization checks proportionate to the sensitivity of the file and the established confidence level, reducing unnecessary authentication steps while maintaining security for critical operations.
Solution Approach 2:
The authorization requirements are made dynamic based on the confidence level established between sender and recipient. As confidence increases through successful interactions, the system dynamically adjusts the authorization threshold, allowing faster access for trusted parties while maintaining strict controls for new or low-confidence connections. This dynamic approach balances security with operational efficiency.
Data Source
AI summary
A file sharing system is described, and includes a management electronic device, a sender electronic device associated with a first user and having access to an originating file, and a receiver electronic device associated with a second user. The electronic devices are connectable to a telecommunication network. The system is configured to encrypt the original file to obtain an encrypted file, insert the encrypted file and a link to the management device into a host file obtaining an enriched host file, accessing the enriched host file via the receiving device, and communicating with the management device via the link by activating an authorization procedure, decrypting the encrypted file, and making the encrypted file at least viewable at the receiving device when said procedure grants authorization to the second user.