File Encryption via Local Service Layer Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing file encryption methods in application programs lack high security, making them prone to attacks and data theft.
Innovation Solution
A method for file encryption that involves determining a secret key for encrypting a file name, encrypting the file name, and then using the encrypted file name information to encrypt the file content, primarily performed in a local service layer.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If file data is stored in plaintext form in application programs, then ease of operation is improved, but security is worsened
Solution Approach 1:
The patent segments the file encryption process into two distinct parts: file name encryption and file content encryption. The file name is encrypted using a first secret key, and the file content is encrypted using a second secret key. This segmentation allows the system to maintain security while enabling efficient access to encrypted files through the encrypted file name index.
Solution Approach 2:
The patent introduces encrypted file name information as an intermediary between the user and the encrypted file content. The encrypted file name serves as a secure index that allows the system to locate and access encrypted files without exposing the actual file names or content, thus maintaining both security and operational efficiency.
2Ease of manufacture
If file encryption is implemented in the application layer, then ease of manufacture is improved, but security is worsened
Solution Approach 1:
The patent introduces a local service layer as an intermediary between the application layer and the file system. This local service layer handles the actual encryption and decryption operations, while the application layer only needs to interact with the encrypted file names. This architecture maintains the ease of development in the application layer while securing the encryption process in the local service layer.
3Device complexity
If encryption operations are performed in the application layer, then device complexity is reduced, but security is worsened
Solution Approach 1:
The patent introduces a local service layer as an intermediary that handles the complex encryption and decryption operations. The application layer only needs to perform simple operations of encrypting file names and interacting with encrypted file indices, while the computationally intensive and security-critical encryption operations are delegated to the local service layer.
4Ease of operation
If file names are not encrypted, then ease of operation is improved, but security is worsened
Solution Approach 1:
The patent segments the file identification system into encrypted file names and encrypted file content. By encrypting file names, the system maintains security while still enabling efficient access and management of encrypted files. The encrypted file names serve as secure indices that allow the system to locate files without exposing sensitive information.
Data Source
AI summary
A method for file encryption includes: determining, in response to obtaining a file to be encrypted, a first secret key for encrypting a file name according to the file name of the file to be encrypted; encrypting the file name according to the first secret key to obtain file name encryption information; and sending the file to be encrypted and the file name encryption information to a local service layer, in order that the local service layer encrypts a file content of the file to be encrypted based on the file to be encrypted and the file name encryption information. The encryption operation of the file content is mainly performed in the local service layer, so that the security protection of the encrypted file may be guaranteed.