Hash Table Data Tracking for Confidential File Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems fail to effectively track and manage the distribution, copying, and versions of confidential data files, as they can be easily copied and shared, bypassing permissions and leading to data leaks.
Innovation Solution
A system that uses a hash table in the leftover cluster space of memory clusters to track file changes and identify copies, with client devices configured to add hash tables and a server that requests and manages these tables to determine file versions and enforce permissions, including the ability to replace, edit, or delete files.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If digital files are stored and shared through traditional means (email, shared folders), then ease of access and sharing is improved, but data security and tracking capability deteriorate
Solution Approach 1:
The patent introduces a hash table as an intermediary mechanism between the file system and security controls. This hash table stores cryptographic hashes of files and their access histories, acting as a mediator that enables tracking and monitoring without interfering with the actual file sharing operations. The hash table allows the system to verify file integrity and track distribution while maintaining ease of access.
Solution Approach 2:
The system implements feedback mechanisms by continuously monitoring file access, copying, and distribution events, then updating the hash table with new hash values and access histories. This feedback loop enables the system to detect unauthorized sharing, track file propagation, and maintain security awareness without blocking legitimate access operations.
2Reliability
If hash tables are added to track file changes and copies, then data tracking and security monitoring are improved, but device complexity and storage requirements increase
Solution Approach 1:
The hash table serves multiple functions simultaneously: it stores cryptographic hashes for integrity verification, tracks file access histories, monitors copying events, and maintains distribution records. By making the hash table multi-functional, the patent avoids adding separate tracking mechanisms for each function, thereby reducing overall system complexity while improving data tracking capabilities.
Solution Approach 2:
The patent merges the file tracking mechanism with the existing file system structure by integrating hash tables into the standard file storage and retrieval processes. The hash tables are stored alongside file data and accessed through existing file system calls, combining tracking functionality with standard file operations rather than adding separate complex tracking infrastructure.
3Ease of manufacture
If traditional file permission systems are used, then implementation simplicity is maintained, but ability to track distribution and copies is insufficient
Solution Approach 1:
The system performs preliminary actions by pre-configuring hash tables to automatically capture file hashes and access histories at the moment of creation and modification. This preliminary recording ensures that distribution and copying events are tracked from the outset, maintaining information integrity without requiring complex real-time monitoring systems or changing existing simple permission structures.
Data Source
AI summary
A system for discovering and monitoring data movement across the file system on a specific device or across the network, which enables to detect data leakage and locate specific data across the organization. The system tracks files by having devices maintain a record of hash values associated with a file in a tables of hash values. The memory used to maintain the records of each file can be distributed to each device carrying the files. The system can analyze the data leak of a file by receiving a hash value of a file and requesting devices to search and respond with information about files that have the same hash value. Furthermore, based on the table of hash values for all the files, the system can recreate the origination of each file and the number of different versions that exist of the file.