File Link Mechanism for Unified Access Control and Decryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing file systems face difficulties in managing access rights and decryption policies separately, making it challenging to determine the actual permissions for users or groups as the number of directories and files increases.
Innovation Solution
A method is implemented where multiple links to a file are created, each encrypted with a common key using respective users' public keys, and access rights are set within these links, allowing or denying access based on stored information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If access rights and decryption policies are managed separately in existing file systems, then security control is maintained, but system complexity increases and difficulty in determining actual permissions arises
Solution Approach 1:
The patent combines access rights management and decryption policy management into a unified link structure. Each link to an encrypted file contains both the encrypted common key (decryption policy) and access rights information (owner rights, group rights, management rights) in a single integrated data structure, eliminating the need for separate management systems and reducing overall system complexity while maintaining security control
Solution Approach 2:
The link structure serves multiple functions simultaneously: it acts as an access control mechanism, a decryption key repository, and a permission management system. By making the link multi-functional, the patent eliminates the need for separate systems for access rights and decryption policies, thereby reducing management complexity while maintaining comprehensive security control
2Adaptability or versatility
If multiple users are allowed to access an encrypted file with different rights, then file sharing capability is improved, but key management complexity increases
Solution Approach 1:
The patent creates separate link structures for each user accessing the encrypted file. Each link contains a user-specific encrypted common key (encrypted with that user's public key) and user-specific access rights information. This segmentation allows multiple users to access the file with different permissions without requiring complex centralized key management, as each user's key is independently encrypted and stored in their respective link
Solution Approach 2:
The link structure acts as an intermediary between the encrypted file and multiple users. Instead of managing keys directly for each user, the system uses the link as a mediator that contains the user-specific encrypted key and access rights. This intermediary approach simplifies key management by providing a standardized interface between the file and diverse users with different access levels
Data Source
AI summary
A method, a computing system and a computer program product are provided. A link for use by a user to access a file is created. Content of the file is encrypted using a common key. The common key is encrypted using a public key of the user and is registered in the link. Access rights regarding the file are set for the user and registered in the link. The link includes information for use by the user to access the file when the access rights indicate that the user is authorized to access the file.