Format Friendly Encryption for Cloud Data Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing encryption methods often render encrypted files unusable by applications that created or maintain them, causing friction in data sharing and access issues, especially when files are shared outside enterprise boundaries without decryption tools or keys.
Innovation Solution
A format-friendly encryption method where encrypted files are stored in the same format as the original file, embedding instructions for access within the file, allowing applications to present decryption information to users, even if they lack decryption software or keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional encryption methods are used to encrypt files, then data security is improved, but file usability by applications is worsened
Solution Approach 1:
The patent creates a copy of the original file in encrypted form that maintains the same format and structure. The encrypted file is a replica that applications can read and process normally, while the actual data remains encrypted. This allows applications to operate on the encrypted copy without requiring decryption, thus maintaining both security and usability.
Solution Approach 2:
The patent introduces an intermediary layer between the application and the encrypted data. The system provides decryption capabilities through intermediaries such as proxy servers, plug-ins, or software agents that translate between the encrypted format and the application's expected format, allowing applications to work with encrypted files without direct decryption knowledge.
2Reliability
If files are encrypted with proprietary formats, then encryption security is improved, but adaptability across different applications is worsened
Solution Approach 1:
The patent makes the encrypted file format universal by maintaining compatibility with standard file formats. The encrypted files can be read by multiple applications and operating systems without requiring proprietary software, achieving multi-functionality where a single encrypted format works across diverse platforms while maintaining strong encryption.
3Ease of operation
If encryption is implemented transparently by proxies or plug-ins, then user convenience is improved, but user awareness and control are worsened
Solution Approach 1:
The patent implements feedback mechanisms that inform users when files are encrypted and provide information about decryption capabilities. Users receive notifications and guidance about the encryption status of their files and how to access them, maintaining awareness while preserving the convenience of transparent encryption through proxies or plug-ins.
Data Source
AI summary
Techniques are disclosed for encrypting application data files using a format-friendly encryption process. A software agent may create an encrypted version of an application file using the same data file format of the unencrypted file. For example, when a user encrypts a word processing document, the software agent outputs a word processing document which includes an encrypted copy of the first word processing document. Application data files for other file formats may be encrypted in a similar manner. Further, format-friendly encrypted documents may include instructions for accessing the encrypted content, allowing the standard applications for accessing a given file format to present the instructions to a user. Creating encrypted document using the format-friendly encryption formats allows users who access an encrypted file hosted by a cloud storage provider to receive the information needed to access that application file.