Secure Data File Access via Separated Passkey Image Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data storage systems lack secure methods for transferring and accessing data between devices, particularly in ensuring that only authorized users can access encrypted data files stored on secondary storage devices.
Innovation Solution
A method and system where a computer encrypts data from a first storage device, generates a passkey associated with the encrypted data file, and creates a passkey image file, transmitting the passkey image file to the first storage device for storage, requiring the passkey and optionally a device ID hash for access to the encrypted data on the second storage device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data is encrypted and stored on a second storage device, then data security is improved, but access complexity increases due to passkey management requirements
Solution Approach 1:
The passkey is extracted from the encrypted data storage system and placed on a separate first storage device. This separation allows the main storage device to maintain strong encryption without requiring users to manage complex key storage, as the key is externally stored on a different device that the user already possesses.
Solution Approach 2:
The passkey image file acts as an intermediary between the user and the encrypted data. Instead of directly managing cryptographic keys, users interact with a visual representation (image file) of the passkey, which simplifies key management while maintaining security. The image file serves as a mediator that bridges human usability and cryptographic security.
2Reliability
If a passkey is required for accessing encrypted data, then data protection is improved, but ease of operation deteriorates due to additional authentication steps
Solution Approach 1:
Instead of requiring users to memorize or physically safeguard a complex passkey, the system creates a visual copy (image file) of the passkey that can be easily stored and retrieved from the first storage device. This copying approach maintains security while dramatically improving ease of operation, as users can simply view the image file to access their passkey without needing to recall it from memory.
3Reliability
If device ID hashing is implemented for access verification, then security against unauthorized access is improved, but processing time increases during authentication
Solution Approach 1:
The device ID is hashed in advance during the data storage process, and this pre-computed hash is stored alongside the encrypted data. When authentication is required, the system compares the pre-stored hash with a newly computed hash from the provided passkey, rather than performing complex verification calculations in real-time. This preliminary action significantly reduces authentication time while maintaining strong security.
Data Source
AI summary
A method and system for secure access to data files copied onto a second storage device from a first storage device. A computer receives data from a first storage device that is in communication with the computer. A data file is stored to a second storage device. A passkey is generated and associated with the data file. A passkey image file corresponding to the passkey is generated. The passkey image file is transmitted to the first storage device for storage. Subsequent access to the data file on the second storage device requires entry of the passkey. The passkey is only accessible to a user that has access to read the passkey image file on the first storage device.