File Access Control via Fingerprint Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data loss prevention systems take an 'all or nothing' approach, lacking selective permission controls, which prevents creators or owners from managing file access after files are shared or made public, leading to unauthorized sharing.
Innovation Solution
A system that determines a fingerprint of a file upon creation or receipt, defines permitted users and actions, and compares the file to its fingerprint upon access to ensure authorized actions, thereby preventing unauthorized sharing by allowing only approved users to perform permitted actions on the file.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If users are given full access to read, copy, and modify targeted data, then ease of operation is improved, but data security deteriorates
Solution Approach 1:
The patent segments file access permissions into granular categories (read, copy, modify, share) and assigns them selectively to specific users rather than providing full or no access. This allows creators to grant specific permissions (e.g., read-only for some users, read-write for others) resolving the contradiction between ease of operation and data security.
Solution Approach 2:
The patent implements dynamic permission management where access rights can be modified at any time after file sharing. Creators can update permission settings, revoke access, or change user roles without redistributing the file, allowing flexible adjustment between accessibility and security needs.
2Reliability
If selective permission control is implemented, then data security is improved, but device complexity increases
Solution Approach 1:
The patent enables creators to autonomously manage file permissions through automated systems. The permission management infrastructure handles user authentication, permission verification, and access control automatically, reducing the perceived complexity for users while maintaining robust security.
Solution Approach 2:
The system implements logging and monitoring of file access operations, providing feedback on who accessed what and when. This automated tracking reduces the manual overhead of permission management while enhancing security through audit capabilities.
3Reliability
If creators maintain control over shared files, then reliability is improved, but ease of operation deteriorates
Solution Approach 1:
The patent establishes permission frameworks and access controls in advance of file sharing operations. By pre-configuring permission templates and user roles before files are shared, the system reduces the operational burden during actual sharing while maintaining creator control and reliability.
Data Source
AI summary
Embodiments for preventing data loss and allowing selective access data include systems and methods that determine that a file has been created or received; determine a fingerprint of the file, wherein the fingerprint is a record of the file for comparison to the file at a later time; determine at least one permitted use related to the file, wherein the permitted uses comprises a permitted user and a permitted action; determine that the file is being accessed by a user; determine whether the user is a permitted user of the file based on an identity of the user; compare the file to the associated fingerprint of the file when the user is a permitted user; determine the action being taken by the user when the file matches the associated fingerprint; and permit the action to occur when the action is a permitted action of the file.