File Access Authentication via Fixed Identity Matching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current file access control mechanisms in mobile devices, relying on sandbox isolation, are vulnerable to Trojan horse programs that can compromise user privacy by breaking through the sandbox isolation access mechanism and obtaining unauthorized access to files.
Innovation Solution
A file access right authentication method that uses fixed identity information associated with each application to authenticate file access requests, ensuring that only authorized applications can access their respective files by decrypting file-key ciphertext using the correct identity information, thereby preventing malicious applications from accessing sensitive data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If sandbox isolation access mechanism is used for file access control, then each application can access only its own files, but Trojan horse programs can break through the sandbox isolation and obtain unauthorized access to files of other applications
Solution Approach 1:
The patent segments the file access control mechanism into multiple independent authentication layers: process identifier verification, fixed identity information matching, and file key decryption. Each layer independently validates a specific aspect of the access request, so that compromise of one layer (e.g., sandbox bypass) does not lead to complete system compromise. This multi-layered segmentation prevents Trojan horses from gaining unauthorized access even if they penetrate the sandbox isolation.
Solution Approach 2:
The patent implements preliminary authentication actions before file access is granted. The system pre-establishes fixed identity information for each application and pre-encrypts file access keys using this identity information. When a file access request occurs, the system performs preliminary verification of the process identifier against the authorized fixed identity information before allowing access. This preliminary action ensures that even if Trojan horses penetrate the sandbox, they cannot access files without the correct pre-established identity credentials.
2Reliability
If fixed identity information authentication is implemented for file access, then unauthorized access is prevented, but the authentication process complexity increases
Solution Approach 1:
The patent creates a universal fixed identity information authentication mechanism that serves multiple functions simultaneously: it authenticates process identity, verifies file ownership, and enables key decryption. This single authentication framework handles all three security requirements without requiring separate complex systems for each function, thereby reducing overall system complexity while maintaining high security standards.
Solution Approach 2:
The system implements self-service authentication where the fixed identity information automatically verifies process legitimacy and file access rights without requiring user intervention. The authentication process is transparent to users, who do not need to manually verify credentials or understand the authentication mechanics. This self-service approach simplifies the user experience while maintaining rigorous security checks in the background.
3Ease of operation
If file access authentication is performed automatically without user participation, then user operations are simplified and user experience is improved, but security verification steps are reduced
Solution Approach 1:
The patent replaces manual user verification actions with automated electronic authentication mechanisms. Instead of requiring users to manually verify file access permissions or enter credentials, the system automatically performs process identifier matching against fixed identity information and handles key decryption transparently. This substitution maintains strong security verification through automated checks while completely simplifying user operations, as users neither need to understand nor interact with the authentication process.
Data Source
AI summary
A file access right authentication method and system allows right authentication to be performed on an access request for accessing a file in a system to thereby improve system security. The method includes: receiving, by an electronic device, a file access request, where the file access request is used to request to access a first file on the electronic device; obtaining a first process identifier in the file access request, and determining first fixed identity information corresponding to the first process identifier; and matching the first fixed identity information with authorized fixed identity information corresponding to the first file), and when the matching succeeds, determining that authentication of the file access request is successful.