Ransomware Defense via Public Key File Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Ransomware poses a significant threat by encrypting files, making it difficult for users to regain access without paying a ransom, and existing solutions fail to proactively prevent file encryption.
Innovation Solution
A method that identifies protected files by appending a public key, requires an authentication token for modification, and generates an unlock key to authorize changes, ensuring that only authorized modifications occur by matching the unlock key with a validation key.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If ransomware is allowed to modify files freely, then file accessibility is maintained, but files become vulnerable to encryption and data loss
Solution Approach 1:
The system performs preliminary actions by generating cryptographic key pairs and appending public keys to files before any ransomware attack occurs. This proactive setup creates a security mechanism that will automatically prevent unauthorized encryption while allowing legitimate modifications, thus resolving the contradiction between security and ease of operation.
Solution Approach 2:
The patent introduces cryptographic keys and authentication tokens as intermediary elements between the file and the modification process. These intermediaries verify the legitimacy of modification requests, allowing the system to maintain both file security and ease of operation by mediating between security requirements and user accessibility.
2Reliability
If authentication mechanisms are implemented for file modification, then unauthorized encryption is prevented, but system complexity increases
Solution Approach 1:
The patent extracts the authentication complexity from the core file modification process by separating key generation, key storage, and authentication verification into distinct components. The public key is appended to the file, while the private key remains secure, and authentication tokens are generated only when needed, thus reducing overall system complexity while maintaining security.
Solution Approach 2:
The system implements self-service authentication mechanisms where the appended public key automatically verifies modification requests without requiring external authentication servers or complex manual verification processes. This self-verifying approach reduces system complexity while maintaining reliable unauthorized access prevention.
3Reliability
If public keys are appended to all files, then ransomware protection is enhanced, but storage space is consumed
Solution Approach 1:
The patent applies partial action by appending public keys only to specific files that require ransomware protection rather than all files in the system. This selective approach enhances ransomware protection for critical files while minimizing the total storage space consumed by cryptographic metadata.
Data Source
AI summary
A method for defending a computing system against ransomware attacks is disclosed. In one embodiment, such a method includes identifying, on a computing system, files to be protected against ransomware attacks. The method appends a public key to each of the files. Upon receiving a request to modify a specific file, the method reads the public key appended to the file, requests an authentication token from a user, and computes a private key associated with the files. The method combines the public key, authentication token, and private key to generate an unlock key. This unlock key is compared to a validation key. The method authorizes modification of the file in the event the unlock key matches the validation key. A corresponding system and computer program product are also disclosed.