Position-Authenticated File Delivery Without Password Transmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing file transmission methods over communication networks are insecure due to the risk of eavesdropping and leakage of encryption keys, and there is a need for secure file delivery and decryption without direct transmission of passwords.
Innovation Solution
A file management system utilizing position authentication, where a file is encrypted with a shared key and decrypted by a receiving user only when located at a specified receipt location, using ephemeral key pairs and geographical position verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a file is encrypted with a password and transmitted over a communication network, then file delivery is enabled, but the encryption key may be leaked or eavesdropped on
Solution Approach 1:
The patent extracts the encryption key from the transmission process by using public-key cryptography. The sender's private key remains securely stored in the sender's terminal device and never leaves the device, while only the encrypted file and decryption instructions are transmitted over the network. This separation prevents key leakage during transmission.
Solution Approach 2:
The patent introduces the file management server as an intermediary that facilitates secure file delivery without having access to either the sender's or receiver's private keys. The server stores encrypted files and coordinates the decryption process by having the receiver's terminal device obtain the sender's public key and perform decryption locally, preventing key exposure through the intermediary.
2Ease of operation
If the password is transmitted in the body text of an e-mail, then file delivery is simplified, but security is compromised
Solution Approach 1:
The patent replaces the mechanical approach of transmitting passwords through e-mail text with a cryptographic system based on public-key infrastructure. Instead of sending decryption credentials through communication channels, the system uses mathematical properties of public-key cryptography to enable secure decryption without transmitting sensitive information, maintaining simplicity while eliminating security vulnerabilities.
3Reliability
If private key management is strengthened to prevent external access, then security is improved, but key management becomes more complex
Solution Approach 1:
The patent segments the key management system into distinct components: the sender's terminal device securely stores and uses the sender's private key, the file management server stores encrypted files and coordinates processes, and the receiver's terminal device obtains the public key and performs decryption. This segmentation isolates private keys to specific devices with controlled access, enhancing security while distributing complexity across multiple system components rather than concentrating it in key management procedures.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present invention is a file management system that allows for transmission of a file between a first information communication terminal device of a first user and a second information communication terminal device of a second user. In the first information communication terminal device, the file, the receiving user, and the receipt location of the file are specified, the file are encrypted to generate an encrypted file, and the receipt location is transmitted to a file management server. In the second information communication terminal device, the encrypted file are acquired, and position information acquired by the key terminal device of the second user is transmitted to the file management server. The file management server performs determination of position authentication based on the receipt location. If the position authentication has been successful as a result of the determination, the encrypted file are decrypted to obtain the original file in the second information communication terminal device.