Event-Driven Encrypted File Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure communication methods do not effectively prevent unauthorized access to encrypted files until a specified event occurs, and they lack a mechanism for the recipient to verify the origin of the file before access is granted.
Innovation Solution
A system that uses public key encryption to encrypt files twice, once with the recipient's public key and again with a key pair associated with a future event, where the private key is released only upon the occurrence of that event, allowing the recipient to verify the sender's digital signature before decryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If public key encryption is used to secure the file during transmission, then the security of the communication channel is improved, but the recipient can decrypt the file immediately upon receipt without any time restriction
Solution Approach 1:
The patent applies preliminary action by encrypting the file with the recipient's public key in advance, but withholding the corresponding private key until a specified future event occurs. This allows the file to be prepared and transmitted early, while the actual decryption capability is delayed until the predetermined condition is met, thus resolving the contradiction between immediate security and controlled access timing
Solution Approach 2:
The patent introduces an intermediary mechanism - a trusted third party or automated system that holds and releases the private key only when the specified event occurs. This intermediary controls the timing of decryption access without compromising the security of the encrypted file during transmission, allowing the file to remain secure while preventing premature decryption
2Reliability
If the file is encrypted with the recipient's public key, then the recipient can verify the encryption, but the recipient cannot confirm the sender's identity
Solution Approach 1:
The patent merges two cryptographic functions into a single comprehensive encryption system: (1) encryption with the recipient's public key to ensure only the recipient can decrypt, and (2) digital signing with the sender's private key to verify the sender's identity. By combining these functions, the system simultaneously achieves both encryption verification and sender authentication without requiring separate mechanisms
3Ease of operation
If the private key is provided to the recipient immediately, then the recipient can decrypt the file right away, but the file becomes accessible before the specified event occurs
Solution Approach 1:
The patent applies preliminary action by providing the encrypted file to the recipient in advance, but withholding the private key until the specified event occurs. The recipient receives the file early and can verify its encryption, but cannot decrypt it until the predetermined condition is met, thus maintaining both operational readiness and access control reliability
Solution Approach 2:
The patent introduces dynamic control over the decryption process by making the private key availability conditional on a future event. The system transitions from a static state where the key is either always available or never available, to a dynamic state where key access is granted only when specific conditions are met, thereby maintaining security while enabling future access
Data Source
AI summary
A system may include reception of a request for an encryption key pair including a first private encryption key and a first public encryption key, the encryption key pair associated with a future event, generation of the encryption key pair, transmission of the first public encryption key to a second device, reception, from the second device, of a file encrypted using the first public encryption key and using a second public encryption key of an intended recipient, transmission of the file to a third device associated with the intended recipient, detection of the future event, and, in response to the detection of the future event, transmission of the first private encryption key to the third device.