Graphical Code Document Validation for Secure Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network environments face challenges in detecting and preventing data leakage, unauthorized access, and malicious activities, such as data exfiltration and malware attacks, due to delayed response times and vulnerability of data storage devices.
Innovation Solution
The system employs encoded graphical codes to validate digital documents using public encryption keys, ensuring that only digitally signed documents with valid signatures are stored, thereby preventing malicious files from being stored and reducing network resource consumption during attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If digital documents are stored directly in memory without validation, then storage speed is improved, but security vulnerability increases allowing malicious files to be stored
Solution Approach 1:
The system performs preliminary validation of digital documents by extracting and verifying digital signatures using public encryption keys before storing the documents in memory. This preliminary action ensures that only authenticated and valid documents are stored, preventing malicious files from entering the memory while maintaining efficient storage operations.
2Reliability
If digital document validation is performed before storage, then security is improved by preventing malicious documents, but processing time increases
Solution Approach 1:
The system extracts only the essential validation information (digital signatures and public encryption keys) from the documents and performs validation on these extracted elements rather than processing the entire document content. This extraction approach reduces processing time while maintaining security validation effectiveness.
3Reliability
If graphical codes are used to encode and validate documents, then access control and security are improved, but device complexity increases
Solution Approach 1:
The system introduces graphical codes as an intermediary layer between the document storage system and the validation process. These graphical codes encapsulate the public encryption keys and validation information, simplifying the interface for document validation while enhancing security control. The intermediary format makes the complex validation process more manageable and implementable.
Data Source
AI summary
A device configured to obtain a first graphical code that represents a public encryption key for an organization and to extract the public encryption key for the organization from the first graphical code. The device is further configured to obtain a second graphical code that represents a digital document comprising data and a digital signature that was signed using a private encryption key for the organization. The device is further configured to extract the digital document from the second graphical code and to validate the second graphical code using the public encryption key for the organization. The device is further configured to determine the second graphical code passes validation using the public encryption key for the organization and to store the digital document in a digital document repository.