File System Block Mapping for Unauthorized Data Access Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data security methods for storage devices are inadequate in preventing unauthorized copying of files, as encryption-decryption processes are time-consuming and confusing for users, and online licensing checks require network access, while also being vulnerable to file reconstruction without proper authorization.
Innovation Solution
Implementing a block distribution engine and mapping algorithm within the file system that varies the distribution of data blocks on a storage device, making it difficult for unauthorized users to access files by mapping data block numbers using a function that changes their locations, thereby enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption-decryption software is used to secure data on storage devices, then data security is improved, but user operation complexity and time consumption increase
Solution Approach 1:
The patent introduces an intermediary encryption layer at the file system level that automatically handles security operations. This intermediary component mediates between the user and the storage device, performing encryption and decryption transparently without requiring direct user interaction with complex cryptographic operations, thus maintaining security while simplifying user operation
Solution Approach 2:
The encryption system is designed to be self-service oriented, automatically managing key generation, data encryption, and decryption processes without requiring user intervention. The system handles its own security operations autonomously, reducing the burden on users while maintaining robust security protection
2Reliability
If online licensing checks are implemented to prevent unauthorized copying, then data security is improved, but system complexity and network dependency increase
Solution Approach 1:
The patent extracts the licensing verification functionality from the application layer and integrates it directly into the file system layer. This extraction eliminates the need for separate online licensing check mechanisms and network dependencies, simplifying the overall system while maintaining security through integrated authorization checks at the file access level
3Ease of operation
If traditional file system structures are used, then ease of file access is maintained, but vulnerability to unauthorized file reconstruction increases
Solution Approach 1:
The patent segments files into multiple encrypted blocks distributed across the storage device, with each block being individually encrypted and stored at different locations. This segmentation prevents unauthorized reconstruction because even if some blocks are accessed, the complete file cannot be reconstructed without all blocks and their corresponding decryption keys, while the file system maintains simple access semantics for authorized users
Solution Approach 2:
The patent implements asymmetric encryption mechanisms where the encryption process and decryption process operate differently. Authorized users have both the encrypted file blocks and the decryption capability, while unauthorized users only have access to the encrypted blocks without the means to decrypt them, creating an asymmetric security model that protects against unauthorized reconstruction
Data Source
AI summary
An embodiment of the invention provides an apparatus and method for providing data security for use with a file system. The apparatus and method performs acts including: applying a mapping function to data block numbers that are associated with a file; and obtaining mapped data block numbers after applying the mapping function, wherein the mapped data block numbers are addresses of data of the file in a storage device.