Secure Drag and Drop via Encrypted Intermediary Container
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing drag and drop functionality in mobile devices faces challenges due to limited screen size and OS UI limitations, and it poses security risks in enterprise contexts by allowing unauthorized access to sensitive data.
Innovation Solution
The implementation of a secure container that uses encryption and secure peer-to-peer communication to securely share data between trusted applications, ensuring that only authorized applications can access the shared content.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If traditional drag and drop is implemented to enable data sharing between applications, then ease of operation is improved, but security is worsened due to unauthorized access to file systems
Solution Approach 1:
The patent introduces a secure container as an intermediary component between applications. The secure container receives dragged content from source applications, stores it securely with restricted access, and makes it available to target applications through controlled mechanisms. This mediator prevents direct access to file systems while enabling data sharing functionality.
Solution Approach 2:
The patent segments the data sharing process into distinct components: the secure container that holds the content, the source application that initiates the drag, and the target application that receives the content. Each component has specific permissions and responsibilities, with the secure container acting as a isolated storage zone that neither source nor target applications can directly access.
2Ease of operation
If file system access is granted to enable drag and drop operations, then ease of operation is improved, but reliability is worsened due to potential data breaches
Solution Approach 1:
The secure container serves as a mediator that decouples the file system access requirements from the data sharing operation. Applications interact with the secure container through defined interfaces rather than accessing file systems directly, ensuring that content accessibility is maintained while data protection is enforced through the container's security mechanisms.
3Object-affected harmful factors
If drag and drop is disabled to maintain security, then security is improved, but ease of operation is worsened due to inability to share data
Solution Approach 1:
By introducing the secure container as an intermediary, the system enables data sharing functionality to be restored while maintaining security protection. The container provides a secure endpoint for drag operations that doesn't require disabling the feature entirely, thus resolving the contradiction between security and usability.
4Adaptability or versatility
If full file system access is provided to target applications, then adaptability is improved, but object-generated harmful factors worsen due to exposure of sensitive data
Solution Approach 1:
The secure container implements local quality by providing targeted access to specific content rather than broad file system access. The container can be configured with specific permissions for different target applications, allowing each application to access only the content it needs while preventing exposure of other sensitive data in the file system.
Data Source
AI summary
Described herein are systems and methods for securely sharing content between applications. In an example, trusted application can include a plug-in for a secure container that securely stores content. When a user drags content from an application to the plug-in, the secure container stores the content in a secure location that is inaccessible to other applications or services. A user can view and share content stored in the secure container at other trusted applications via the plug-in. In another example, a user can drag and drop content directly from a first application to a second application. The second application can provide the first application with a public encryption key that the first application can use to encrypt the content. After the content is dropped at the second application, the first application can send the content to the second application and the second application can decrypt the content.