Metadata Stripping via Trust Boundary Evaluation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users often inadvertently share personal or confidential metadata when transferring files, as existing methods require manual removal of unwanted metadata, which is not always obvious or considered during file sharing.
Innovation Solution
A method is provided to automatically strip metadata when files are copied or moved, using application programs that integrate with the operating system to invoke metadata stripping based on trust boundaries and file types, allowing users to configure which metadata to remove and registering metadata strippers for specific file types.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If manual removal of metadata is required during file transfer, then user control over metadata sharing is improved, but ease of operation deteriorates due to the complexity and obscurity of the process
Solution Approach 1:
The system performs automatic metadata stripping without requiring user intervention. The metadata stripper automatically identifies and removes metadata during file copy or move operations based on trust boundary evaluations, making the system self-sufficient in protecting user information without adding operational complexity
Solution Approach 2:
The system evaluates trust boundaries and strips metadata in advance before files are shared or transferred. By performing the metadata removal action beforehand, during the file copy/move operation itself, the system prevents unintended information loss rather than requiring users to manually review and remove metadata after sharing
2Reliability
If automatic metadata stripping is implemented, then protection against unintended information sharing is improved, but device complexity increases due to integration requirements
Solution Approach 1:
The metadata stripper is designed as a universal component that can be invoked by various application programs and operates across different file types. By creating a multi-functional system that integrates with existing file operations (copy, move) and works with diverse file formats, the solution achieves reliable metadata protection without requiring separate complex systems for each application or file type
Solution Approach 2:
The system introduces a metadata stripper as an intermediary component between the file system and applications. This mediator automatically evaluates trust boundaries and strips metadata during file operations, providing reliable protection while maintaining simplicity by handling complexity in the background rather than requiring complex user-facing interfaces or system-wide changes
3Productivity
If metadata stripping is automated, then productivity of file transfer operations is improved, but loss of useful information may occur due to over-removal of metadata
Solution Approach 1:
The system applies different metadata stripping actions based on local conditions - specifically the trust boundary evaluation between source and destination. By making the metadata removal selective and context-dependent rather than universal, the system maintains productivity through automation while preserving useful metadata when appropriate (when trust boundaries allow) and removing it only when necessary for protection
Data Source
AI summary
A method for removing some or all metadata from files during copying or moving. Metadata management software may register with an operating system and be called to remove metadata crossing a trust boundary, such as going from a local hard drive to a file share.


