File Security Intermediary Using Steganographic Signal Protocol
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data loss prevention techniques are inadequate in protecting encrypted electronic files from unauthorized access, particularly by authorized users through phishing attacks or unsecured access, posing risks to national security, intellectual property, and personal health data.
Innovation Solution
A method that intercepts file access requests for encrypted files, gathers system and user information, and sends this data to a remote server to determine whether to decrypt or inhibit decryption, using steganographic concealment and encryption protocols like the Signal Protocol to secure communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption techniques and user-profile linked access permissions are used to secure electronic files, then protection against unauthorized access requests is improved, but vulnerability to phishing attacks and user-initiated requests in unauthorized applications increases
Solution Approach 1:
The patent introduces an intermediary security system that sits between the user and the encrypted file. This intermediary intercepts file access requests, gathers system and process information, and communicates with a remote server to determine whether to allow decryption. This mediator prevents direct access even when users are tricked by phishing, as the intermediary can detect unauthorized contexts and block access accordingly.
Solution Approach 2:
The system implements feedback by continuously monitoring system state, process information, and user context, then using this information to dynamically decide whether to grant file access. The security system gathers information about the requesting process and system state, sends this to a remote server, and receives a decision back, creating a closed-loop feedback mechanism that adapts to potential threats in real-time.
2Reliability
If data loss prevention techniques are implemented, then protection of secure electronic files is improved, but efficacy against unauthorized release through authorized user access deteriorates
Solution Approach 1:
The system performs preliminary actions by pre-establishing security policies and pre-monitoring system state before file access occurs. The security system is already in place, gathering system information and process details before the actual file access request is fulfilled, allowing it to prevent unauthorized release proactively rather than reactively.
Solution Approach 2:
The system changes parameters by dynamically evaluating multiple parameters including process identity, system state, user context, and request characteristics to determine whether to allow file access. Rather than using fixed access permissions, the system adjusts its security decision based on the combination of these parameters, enabling it to distinguish between legitimate and malicious access attempts even by authorized users.
3Reliability
If file access requests are intercepted and system information is gathered and sent to a remote server, then security control over encrypted files is improved, but communication security and data privacy during transmission worsen
Solution Approach 1:
The system applies preliminary anti-action by pre-encrypting the communication between the local system and the remote server using the Signal Protocol. This encryption is established before any sensitive information is transmitted, protecting against interception or manipulation of the communication channel. The steganographic concealment of the message within image data also serves as a preliminary protective measure.
Solution Approach 2:
The use of steganographic concealment introduces another layer of intermediary protection. Instead of transmitting security-related data in plain or simply encrypted form, the system embeds the encrypted message within innocent-looking image data, using the image as a mediator to hide the true nature of the communication from potential eavesdroppers.
4Reliability
If steganographic concealment is used to hide messages within image data, then communication security is improved, but detection and analysis of the concealed data becomes more difficult
Solution Approach 1:
The system converts the potential harm of hidden data (which could be detected by sophisticated analysis) into a benefit by using steganographic concealment. The very act of hiding the message within image data, which makes detection difficult, becomes the security feature itself. The difficulty of detecting and measuring the concealed data is not a problem to be solved but rather the mechanism that provides security.
Data Source
AI summary
A method of securing electronic computer files includes having a client-based application running in the background with a kernel extension and a communication channel over a network to a server. The client app. can intercept an interprocess communication for opening a file and then collect a swath of fingerprint information about the requesting process and the state of the computer. The fingerprint information is sent to the server, optionally through a Signal Protocol message hidden by steganography in an image. Based on the fingerprint information, the server sends a key and/or a command back, optionally through steganography, to the client. The file is then accessed and decrypted—or accessed and not decrypted—based on the server key and command. The command can include instructions to gather more data from the user or about the computer before allowing access.