Automatic File Encryption Using Metadata-Based Access Rules
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data protection methods fail to prevent unauthorized access to sensitive data on primary storage devices, especially when data is encrypted on secondary storage devices, and lack efficient mechanisms for managing and leveraging data across various computing environments.
Innovation Solution
Implementing a unified information management system that automatically encrypts files based on metadata rules, displays encrypted files with mimicked extensions, decrypts files for authorized users without prompting, and efficiently backs up and restores encrypted data while maintaining data integrity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is encrypted on secondary storage devices, then data security is improved, but data accessibility and usability are worsened
Solution Approach 1:
The system performs preliminary encryption on secondary storage devices before data is accessed, so that data is already secured when stored. This allows data to be automatically decrypted when needed, maintaining both security and accessibility without requiring user intervention.
Solution Approach 2:
The patent introduces an intermediary decryption mechanism that automatically translates encrypted data from secondary storage into usable format for primary storage devices. This intermediary process occurs transparently in the background, so users experience no disruption while security is maintained.
2Reliability
If manual encryption methods are used, then data security is improved, but system complexity and user burden are worsened
Solution Approach 1:
The system implements self-service encryption where the storage system automatically encrypts data on secondary storage devices without requiring user configuration or intervention. The encryption and decryption processes are handled autonomously by the system, eliminating user burden while maintaining security.
Solution Approach 2:
Encryption is performed as a preliminary automatic action when data is written to secondary storage, rather than requiring manual setup. The system pre-configures encryption rules and automatically applies them, reducing system complexity from the user perspective.
3Reliability
If data is stored in encrypted form on secondary storage, then data security is improved, but data processing and analysis capabilities are worsened
Solution Approach 1:
The system maintains continuous data availability by automatically decrypting data on-demand when access is required for processing or analysis. This continuous automatic decryption ensures that data processing capabilities remain uninterrupted while data remains encrypted at rest on secondary storage devices.
Data Source
AI summary
A method for automatically encrypting files is disclosed. In some cases, the method may be performed by computer hardware comprising one or more processors. The method can include detecting access to a first file, which may be stored in a primary storage system. Further, the method can include determining whether the access comprises a write access. In response to determining that the access comprises a write access, the method can include accessing file metadata associated with the first file and accessing a set of encryption rules. In addition, the method can include determining whether the file metadata satisfies the set of encryption rules. In response to determining that the file metadata satisfies the set of encryption rules, the method can include encrypting the first file to obtain a first encrypted file and modifying an extension of the first encrypted file to include an encryption extension.