Namespace-Based Data Encryption for Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a growing need for novel cyber security systems and methods to prevent unauthorized access and exfiltration of sensitive and private data, as hackers and malicious software increasingly compromise data integrity, leading to reputational damage, financial costs, and personal information theft.
Innovation Solution
A computer-implemented method that differentiates between authorized and unauthorized access requests by encrypting protected data in response to unauthorized requests and providing unencrypted data for authorized access, using a namespace to identify protected files and employing encryption engines to manage access and data transfer securely.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If data is stored in unencrypted state for easy access, then ease of operation is improved, but security and protection against unauthorized access deteriorates
Solution Approach 1:
The patent applies dynamics by making the data encryption state changeable based on access requests. The system dynamically transitions data between encrypted and unencrypted states depending on whether the access request is authorized or unauthorized, allowing the data to adapt its security state rather than remaining static
Solution Approach 2:
The patent changes the encryption parameter of the data based on access request characteristics. By analyzing the access request and determining authorization status, the system modifies the data's encryption state accordingly - encrypting for unauthorized requests and decrypting for authorized requests, thus changing the data's security parameter dynamically
2Object-affected harmful factors
If data is encrypted by default to prevent unauthorized access, then security is improved, but ease of operation and data accessibility deteriorates
Solution Approach 1:
The system dynamically adjusts data accessibility by transitioning between encrypted and unencrypted states based on access request analysis. Authorized requests trigger decryption for easy access, while unauthorized requests result in encrypted data being returned, thus maintaining both security and ease of operation for legitimate users
Solution Approach 2:
The system implements feedback by analyzing access requests to determine authorization status and adjusting data encryption state accordingly. The system receives access requests, analyzes them to determine if they are authorized or unauthorized, and then provides appropriate responses (unencrypted data for authorized requests, encrypted data for unauthorized requests), creating a closed-loop security mechanism
Data Source
AI summary
A computer implemented method to provide encrypted protected data in response to an unauthorized access request and unencrypted protected data in response to an authorized access request may include the following steps: receiving a first access request for accessing protected data; determining if the first access request identifies the protected data through a specified namespace; and returning an encrypted version of the protected data in response to the first access request if the first access request did not identify the protected data through the specified namespace. Optionally, the method may include the steps of: receiving a second access request to access the protected data; determining if the second access request identifies the protected data through the specified namespace; and returning an unencrypted version of the protected data in response to the second access request only if the second access request identifies the protected data through the specified namespace.