File System Filter Driver for Secure File Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Information handling systems lack effective mechanisms for securely managing file access rights, leading to potential unauthorized access and misuse of files.
Innovation Solution
An information handling system that includes a storage device and a processor instantiating an operating system, a file system filter driver, and a storage device driver, which combines files with access information to create secure files, and manages access requests based on predefined permissions and security settings.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional file storage is used without access control mechanisms, then file storage is simple and fast, but unauthorized access and misuse of files occurs
Solution Approach 1:
The patent implements a nested structure where access control information is embedded within the file system architecture itself. The file system filter driver is integrated into the operating system at a low level, creating a nested configuration where security mechanisms are contained within the existing system structure rather than adding separate external layers.
Solution Approach 2:
The file system filter driver acts as an intermediary between the operating system and the storage device. It intercepts file access requests, evaluates access control information, and mediates whether files are made accessible or inaccessible based on user permissions, thereby controlling file access without requiring complex external security systems.
2Reliability
If access control information is stored with files, then file access security is improved, but file retrieval and access speed decreases due to additional processing
Solution Approach 1:
Access control information is attached to files at the time of file creation or storage, before any access requests occur. This preliminary action allows the file system filter driver to have the necessary security information readily available when access requests are made, enabling rapid evaluation without requiring additional data retrieval operations during access attempts.
Solution Approach 2:
The file system filter driver automatically evaluates access control information for every file access request without requiring manual intervention or additional processing steps from the operating system or applications. The driver self-manages the security evaluation process, making the access control mechanism transparent and efficient.
3Reliability
If a file system filter driver is implemented to control access, then unauthorized access is prevented, but system complexity and driver management difficulty increases
Solution Approach 1:
The file system filter driver is designed to handle multiple functions within a single integrated component: it intercepts access requests, retrieves access control information, evaluates user permissions, and controls file accessibility. This multi-functionality consolidates what would otherwise require separate mechanisms into one unified driver, reducing overall system complexity.
Solution Approach 2:
The file system filter driver automatically manages its own operation by intercepting and processing access requests without requiring external configuration or manual management. The driver self-evaluates access control information and autonomously makes decisions about file accessibility, eliminating the need for complex external management systems.
Data Source
AI summary
An information handling system for securely storing a file includes a storage device and a processor that instantiates an operating system, a file system filter driver, and a storage device driver. The file system filter driver receives the file and access information from the operating system, combines the file and the access information to provide a secure file, and stores the secure file via the storage device driver on the storage device. The file system filter driver further receives a request for the secure file from the operating system, directs the storage device driver to retrieve the access information from the secure file on the storage device, and determines if the request is authorized based upon the access information. In response to the request being authorized, the file system filter driver directs the storage device driver to retrieve the secure file from the storage device, and provides the secure file to the operating system.