Secure File Sharing via Alias Extensions in OS Frameworks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing operating systems prevent certain types of files from being transferred between applications, or allow transfer to any application without enterprise-specific control, leading to security and functionality issues that can hinder device usage.
Innovation Solution
A management service and operating system framework utilize an extension map to convert file extensions to alias extensions, allowing secure file sharing between specific applications by registering only permitted applications to handle these alias extensions, while maintaining sandboxed environments for each application.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If operating systems allow file transfer between applications, then file sharing functionality is improved, but security control is worsened because any application can access the file
Solution Approach 1:
The patent introduces an intermediary layer (file extension conversion mechanism and application permission registry) between the file transfer function and the applications. When a file is shared, the system converts the file extension to an alias extension and checks the registry to determine which applications are authorized to receive that specific file type, thus mediating the transfer process to enforce security controls while maintaining functionality.
2Reliability
If operating systems prevent file transfer between applications, then security control is improved, but file sharing functionality is worsened
Solution Approach 1:
The patent changes the parameter of file extension from a static identifier to a dynamic, convertible attribute. By converting file extensions to alias extensions based on application permissions, the system enables file sharing functionality that was previously blocked, while maintaining security through controlled parameter transformation rather than outright prevention.
3Ease of operation
If operating systems allow unrestricted file transfer to any application, then ease of operation is improved, but security risks are worsened
Solution Approach 1:
The patent implements preliminary action by pre-registering which applications are authorized to handle specific file types in a permission registry before file transfer occurs. This preliminary configuration allows the system to automatically enforce security policies during file transfer operations without requiring real-time user intervention or complex security checks at the moment of transfer, thus maintaining ease of operation while mitigating security risks.
Data Source
AI summary
Disclosed are mechanisms that enable secure file sharing between applications using an operating system framework. In some examples, an extension map is received by a client device. The extension map relates a file extension to an alias file extension. A management software development kit (SDK) is used by an application. The management SDK identifies that the application originates a file having the file extension, stores the file as an extension-aliased file by changing its file extension to the alias file extension according to the extension map. The extension-aliased file is transferred to a recipient application using a file sharing utility of an operating system of the client device.