Encryption System Managing Multiple File Security Layers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure file storage systems often encrypt files multiple times, leading to difficulties in decryption and inefficient use of disk space, as they are not designed to handle multiple levels of encryption effectively, resulting in files becoming undecryptable when additional encryption layers are applied.
Innovation Solution
A system that stores and manages encryption information for each level of encryption, allowing files to be encrypted and decrypted multiple times while removing excess encryption layers efficiently, ensuring that only one level of encryption is necessary for data integrity, and allowing access requests to be handled while decrypting excess layers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the secure file storage area encrypts each new write request regardless of whether the underlying file is already encrypted, then the security mechanism is simplified and consistently applied, but the file becomes multiple-times encrypted and cannot be decrypted since the system is not aware of the initial encryption level
Solution Approach 1:
The system performs preliminary checking of encryption status before applying encryption to new write requests. By detecting whether a file is already encrypted in advance, the system avoids applying redundant encryption layers, thereby maintaining decryption capability while still ensuring security consistency.
Solution Approach 2:
The system implements a feedback mechanism that tracks the encryption status of files. This feedback information is used to control subsequent encryption operations, allowing the system to recognize already-encrypted files and prevent additional encryption, thus resolving the contradiction between consistent security application and file decryptability.
2Reliability
If the secure file storage area returns encrypted files to requesting programs, then security is maintained for unauthorized applications, but the system cannot handle cases where authorized applications need to access the original unencrypted content
Solution Approach 1:
The system dynamically adjusts its behavior based on the requesting application's authorization status. For unauthorized applications, files are returned encrypted; for authorized applications, the system can provide unencrypted content. This dynamic response enables the system to maintain security while adapting to different access requirements.
Solution Approach 2:
Different encryption handling is applied to different requesting applications based on their authorization levels. The system treats authorized and unauthorized applications differently, providing localized quality of service where authorized applications receive unencrypted content while unauthorized applications receive only encrypted files.
3Reliability
If multiple levels of encryption are applied to files, then security layers are increased, but disk space efficiency decreases and decryption complexity increases making files undecryptable
Solution Approach 1:
The system performs preliminary detection of encryption status before applying encryption operations. By checking whether a file is already encrypted in advance, the system prevents the creation of multiple encryption layers, thereby maintaining decryption simplicity and reducing processing complexity while still providing adequate security through single-level encryption.
Data Source
AI summary
Systems and methods are provided for automatically handling multiple levels of encryption and decryption. An electronic file is received to add to encrypted storage. The electronic file is encrypted to generate a new level of encryption for the electronic file using an encryption process that uses encryption data to generate the new level of encryption and to decrypt the new level of encryption. A set of existing encryption data associated with the electronic file is identified, wherein each existing encryption data from the set of existing encryption data is associated with an existing level of encryption already applied to the electronic file. The encryption data is added to the set of existing encryption data associated with the electronic file so that the existing levels of encryption and the new level of encryption can be decrypted.