Mini Filter Driver for Secure Removable Storage Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing file system encryption schemes do not effectively support secure access to encrypted information on removable storage devices, as they often require modification or replacement of file system drivers and are user-specific, making them unsuitable for multiple-user terminals.
Innovation Solution
A method using a mini filter driver to decrypt encrypted information on removable storage devices, which registers with a file system filter manager, authenticates authorized clients, and decrypts information using stored decryption technology, ensuring secure access while maintaining compatibility with industry-standard file systems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If file system encryption schemes are implemented on removable storage devices, then secure access to encrypted information is improved, but device complexity and difficulty of implementation increase due to requiring modification or replacement of file system drivers
Solution Approach 1:
The patent introduces a mini-filter driver as an intermediary component that sits between the file system and the storage device. This mini-filter driver intercepts I/O requests and performs encryption/decryption operations without requiring modification of the underlying file system drivers. The filter driver acts as a mediator that adds security functionality while maintaining compatibility with existing file systems, thereby resolving the contradiction between security and implementation complexity
Solution Approach 2:
The encryption functionality is segmented into a separate mini-filter driver module that operates independently from the main file system driver. This segmentation allows the encryption logic to be added as a distinct layer, avoiding the need to modify or replace existing file system drivers. The separated architecture reduces implementation complexity while maintaining security functionality
2Reliability
If user-specific encryption schemes are used, then security control is improved, but ease of operation deteriorates because users must login to access decrypted information
Solution Approach 1:
The mini-filter driver implements automatic authentication and decryption functionality that operates without requiring user login or manual intervention. The driver automatically identifies authorized users based on their presence or profile and transparently decrypts files in the background. This self-service approach maintains security control while eliminating the operational burden of manual login, thereby resolving the contradiction between security and ease of operation
3Reliability
If decryption logic is held on the terminal, then decryption capability is improved, but adaptability deteriorates because all files require the same encryption technology as the reading terminal
Solution Approach 1:
The mini-filter driver implements dynamic encryption/decryption logic that can adapt to different encryption algorithms and keys based on the specific file or user. Rather than using a fixed encryption scheme, the driver dynamically selects and applies appropriate decryption methods, enabling the system to support multiple encryption technologies and improving adaptability while maintaining decryption capability
Data Source
AI summary
A method of using a mini filter driver to secure access to encrypted information stored on a removable storage device. The method comprises receiving a request to read information from the removable storage device. The mini filter driver ascertains if the request originated from an authorized client. The mini filter driver receives encrypted information read from the removable storage device, and decrypts the encrypted information in the event that the request originated from an authorized client. The decrypted information can then be conveyed to the authorized client. If the client is not authorized, then the mini filter driver does not decrypt the information.