Secure Data Containers with Fingerprint Compliance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data loss prevention systems adopt an 'all or nothing' approach, lacking selective access control, which prevents users from having control over files once they are shared or made public, and fail to prevent unauthorized sharing in real-time.
Innovation Solution
A system that determines file access permissions proactively by creating a fingerprint of the file, allowing only permitted users to perform defined actions, and monitors compliance with these permissions to prevent unauthorized access and sharing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If full access control is implemented to prevent unauthorized sharing, then data security is improved, but user convenience and ease of operation deteriorate
Solution Approach 1:
The patent segments access control into granular permission levels (read, write, execute, share) that can be individually assigned to different users and groups. This allows fine-tuned security control without completely restricting legitimate access, resolving the contradiction between security and usability by providing both protection and convenience through differentiated permissions.
Solution Approach 2:
The system performs preliminary actions by pre-defining permission sets and access policies before users need to share files. Permission templates and default security settings are established in advance, allowing users to quickly share data with appropriate controls already in place, thus maintaining both security and ease of operation.
2Adaptability or versatility
If selective permission control is implemented after file sharing, then data control capability is improved, but system complexity increases
Solution Approach 1:
The patent implements a universal permission management system that handles multiple file types, users, groups, and permission levels through a single integrated framework. The same permission structure and control mechanisms apply across all data assets, providing versatile control capability without proportionally increasing system complexity through reuse of core components.
Solution Approach 2:
The system introduces an intermediary permission management layer that sits between the file system and users. This intermediary handles all access control logic, permission verification, and security policies centrally, allowing complex selective control capabilities while keeping the underlying file system simple and the user interface straightforward.
3Reliability
If proactive security control is implemented to define access in advance, then unauthorized sharing prevention is improved, but processing time increases
Solution Approach 1:
The patent applies preliminary action by pre-defining permission sets, access policies, and security rules before files are shared or accessed. Permission templates are created in advance with standard access controls already configured, allowing the system to quickly enforce security without real-time complex evaluations, thus preventing unauthorized sharing while minimizing processing time overhead.
Solution Approach 2:
The system changes parameters by using predefined permission levels and access codes that simplify the verification process. Instead of evaluating complex user intentions in real-time, the system checks against predetermined parameter sets (permission levels, access codes, time windows), providing strong prevention with minimal processing time through parameter-based control.
Data Source
AI summary
Embodiments for providing secure data containers and allowing selective access to files stored in the containers include systems and methods that receive a request to create a container, wherein the container is a file system comprising access parameters that define one or more permitted actions and one or more permitted users for the container; determine duration parameters for the container, wherein the duration parameter comprise a time duration during which the container may be accessed; determine a fingerprint of the container, the fingerprint being a record of the container for comparison to the container at a later time; generate the container with the access parameters, duration parameters, and fingerprint; monitor the container for compliance with the access parameters, duration parameters, and fingerprint; and apply a consequence when the container is not in compliance with the access parameters, duration parameters, or fingerprint.