File Security via Storage Segmentation and Redirection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current file protection methods rely on complex encryption, decryption, and certification procedures, which are costly, time-consuming, and vulnerable to ransomware attacks, and are difficult to implement in personal data processing systems, while also failing to secure applications and transmission channels effectively.
Innovation Solution
A data processing system with a divided storage device into unprotected and protected spaces, utilizing an operating system with modules for file and network access control, filtering, and redirection, allowing secure storage and transmission without the need for complex encryption procedures, and incorporating a security scanning program to duplicate and secure files based on security rules.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If complex encryption, decryption and certification procedures are used for file protection, then file security is improved, but system complexity and implementation cost increase
Solution Approach 1:
The storage device is divided into unprotected space and protected space, with files selectively moved to the protected space. This segmentation provides security without requiring complex encryption procedures, as the security is achieved through spatial isolation rather than cryptographic complexity.
Solution Approach 2:
A file management module is introduced as an intermediary between applications and the storage device. This module automatically manages file redirection to protected space, handling security operations transparently without requiring complex encryption/decryption procedures or user intervention.
2Reliability
If encryption technology is integrated with application interfaces, then file protection capability is improved, but implementation time and cost increase
Solution Approach 1:
The file management module automatically performs file protection operations without requiring application integration or user intervention. The system self-manages the security process by automatically identifying sensitive files and redirecting them to protected space, eliminating the time-consuming integration work with application interfaces.
3Reliability
If traditional file encryption methods are used, then data confidentiality is improved, but vulnerability to ransomware attacks increases
Solution Approach 1:
By segmenting the storage device into protected and unprotected spaces, the system creates an isolated environment for sensitive files. This physical isolation prevents ransomware from easily encrypting all files, as the protected space acts as a secure enclave that malicious software cannot access without proper authentication.
Solution Approach 2:
Files are preemptively moved to protected space before potential ransomware attacks occur. This preliminary protective action establishes security boundaries in advance, preventing ransomware from establishing control over the entire file system and thereby reducing vulnerability to such attacks.
4Reliability
If comprehensive security control is implemented, then system security is improved, but ease of operation decreases
Solution Approach 1:
The file management module operates autonomously to manage file protection, automatically determining which files require security and handling their redirection to protected space. This self-service approach maintains comprehensive security control while keeping operations simple for users, as they do not need to manually configure security settings or understand complex security procedures.
Data Source
AI summary
The invention provides a data processing system capable of securing files. The data processing system of the invention divides a data storage device into an unprotected space and a protected space. A protected application resided in an operating system is controlled by an application controlling module residing in the operating system. When the application controlling module receives a file access request information transmitted from the protected application, the application controlling module redirects the file access request information to access a plurality of protected files stored in the protected space in accordance with the file access request information, and then to return the access result of the protected files to the protected application.