File Sharing Restriction via Recipient Authorization Check
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing file hosting services cause confusion and undermine data protection policies by allowing unauthorized recipients to receive links to restricted files, even though they are blocked from accessing them, leading to unclear communication between senders and recipients.
Innovation Solution
Implement a system that scans stored files for restricted data, classifies them based on content, and restricts sharing requests by verifying the recipient's authorization before allowing or denying access, generating notifications to the sender when sharing is restricted.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the file hosting service blocks access to restricted files for unauthorized users, then data protection is improved, but recipient confusion increases and data protection policies are undermined
Solution Approach 1:
The system performs preliminary action by checking authorization status before sharing the file link, rather than only at access time. The electronic processor determines whether the recipient is authorized to access the stored file before allowing the sharing operation to complete. This prevents unauthorized recipients from receiving links in the first place, eliminating confusion about why they can't access the file.
Solution Approach 2:
The system provides feedback to the sender by generating a notification when sharing is restricted. This notification informs the sender that the recipient is not authorized to access the stored file, creating a feedback loop that maintains communication clarity between sender and recipient about the file's access status.
2Ease of operation
If the file hosting service allows sharing links to stored files, then ease of operation is improved, but unauthorized access risk increases
Solution Approach 1:
The system performs preliminary authorization checks before allowing sharing operations. The electronic processor determines whether the recipient is authorized to access the stored file before the sharing link is generated or sent. This maintains ease of operation for authorized users while preventing unauthorized access.
Solution Approach 2:
The system introduces an intermediary authorization check between the sharing action and the file access. The electronic processor acts as a mediator that verifies the recipient's authorization status before allowing the sharing operation to succeed, thus preventing unauthorized access while maintaining smooth sharing operations for authorized users.
3Reliability
If the file hosting service blocks access at the time of access attempt, then data protection is improved, but user confusion increases
Solution Approach 1:
The system performs the authorization check preliminarily at the time of sharing rather than at access time. This shifts the blocking action from the access phase to the sharing phase, so that unauthorized recipients never receive links. This resolves the contradiction by maintaining data protection while eliminating confusion about why authorized users can't access files.
Data Source
AI summary
Systems and methods for limiting sharing of a stored file. One system includes an electronic processor configured to receive a request to share the stored file with a recipient, wherein the request includes an identifier of the recipient, and determine whether sharing of the stored file with the recipient is restricted based on the identifier of the recipient and content of the stored file. The electronic processor is also configured to, when the sharing of the stored file with the recipient is restricted, generate, in response to the request, a notification that sharing of the stored file with the recipient is restricted.