Graphical Code Validation for Secure Document Storage

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing network environments face challenges in detecting and preventing data leakage, unauthorized access, and malicious activities, such as data exfiltration and malware attacks, due to delayed response times and vulnerability of data storage devices.

Innovation Solution

The system validates digital documents using encoded graphical codes by extracting a public encryption key from a graphical code and using it to verify a digital signature embedded within the document, preventing malicious documents from being stored and obfuscating data until decoded.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If digital documents are stored in memory without validation, then storage speed and system throughput are improved, but security against malicious documents and unauthorized access deteriorates

Engineering Contradiction:
Improvestorage speedVSAvoidsecurity
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The system performs preliminary validation of digital documents by verifying digital signatures using public keys extracted from graphical codes before storing documents in memory. This advance verification ensures that only authenticated documents are stored, preventing malicious content from being saved while maintaining storage throughput by rejecting invalid documents at the validation stage.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If digital documents are validated using graphical codes containing encryption keys, then security against unauthorized access and malicious activities is improved, but processing time and computational resources are increased

Engineering Contradiction:
ImprovesecurityVSAvoidprocessing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system extracts public encryption keys from graphical codes embedded in digital documents and uses these extracted keys for validation. By separating the key extraction and validation process from the main storage operation, the system can efficiently verify document authenticity without significantly impacting overall storage throughput, as invalid documents are quickly rejected after signature verification.

Inventive Principle:
Principle #2Taking out (Extraction)

3Reliability

If data within digital documents is obfuscated using encoded graphical codes, then protection against data leakage and unauthorized reading is improved, but accessibility and ease of reading the data deteriorates

Engineering Contradiction:
Improvedata protectionVSAvoiddata accessibility
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The system uses graphical codes as an intermediary representation of digital documents. The graphical codes encode document data in a visually encoded format that is protected during transmission and storage. Authorized users with the corresponding decryption capabilities can decode and access the original document data, while unauthorized users cannot read the obfuscated content. This intermediary encoding provides security while maintaining accessibility for legitimate users.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS11880479B2Access control for updating documents in a digital document repository
Publication Date: 2024.01.23 BANK OF AMERICA CORP
  • US11880479B2 patent drawing
  • US11880479B2 patent drawing
  • US11880479B2 patent drawing

AI summary

A device configured to identify a first digital document in a digital document repository, to identify a first graphical code that represents the first digital document, and to send the first graphical code to an approved user device. The device is further configured to obtain a second graphical code that represents a public encryption key for the organization and to extract the public encryption key for an organization from the second graphical code. The device is further configured to obtain a third graphical code from the approved user device. The third graphical code represents a second digital document comprising data and a digital signature that was signed using a private encryption key for the organization. The device is further configured to determine the third graphical code passes validation using the public encryption key for the organization and to store the second digital document in a digital document repository.