Secure File Conversion via PKI Memory Guard
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current file conversion systems fail to ensure both confidentiality and integrity of files during the conversion process, as they require the original file in its native format, leading to potential data compromise or duplication by the conversion service.
Innovation Solution
Implementing a module with a public key infrastructure (PKI) that allows access to the original file for conversion while preventing copying, using a copy-guard module to monitor memory access and abort conversion if unauthorized access occurs, ensuring the file is stored in a read-only memory location and deleted after conversion.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If the original file is transmitted to the conversion service in its native format, then the conversion service can perform format conversion, but the confidentiality and integrity of the file are compromised as the service may store copies or tamper with the data
Solution Approach 1:
The system performs preliminary encryption of the file using the converter's public key before transmission. This preliminary action ensures that the file remains confidential during transmission and processing, while still allowing the converter to decrypt and process it using its private key.
Solution Approach 2:
The patent introduces an intermediary encryption mechanism using public key infrastructure. The converter acts as an intermediary that receives encrypted files, decrypts them using its private key, performs conversion, and re-encrypts the output using the client's public key, thereby mediating between confidentiality requirements and conversion needs.
2Reliability
If encryption is used to protect file confidentiality during transmission, then the file contents are hidden, but the conversion service cannot access the original file format to perform conversion
Solution Approach 1:
The converter's private key acts as an intermediary that temporarily reveals the file contents for processing. The converter decrypts the file using its private key, performs the conversion operation on the decrypted content, and then re-encrypts the result, thus mediating between encrypted confidentiality and unencrypted convertibility.
Solution Approach 2:
The system changes the encryption state of the file dynamically. The file is encrypted during transmission, decrypted during processing (changing from encrypted to unencrypted state), and re-encrypted after conversion. This parameter change in encryption state allows the file to maintain confidentiality while enabling conversion when needed.
3Productivity
If the conversion service stores copies of files for processing, then conversion operations can be performed, but the service violates confidentiality agreements by permanently keeping file copies
Solution Approach 1:
The system implements automatic discarding of decrypted file copies after conversion is complete. The converter temporarily stores the decrypted file in memory during processing, but automatically deletes or discards these copies after the conversion operation finishes, thus complying with confidentiality agreements while enabling necessary processing.
Solution Approach 2:
The decrypted file copies in memory are treated as temporary, disposable objects that exist only for the duration of the conversion operation. These short-living memory copies are automatically discarded after use, eliminating the need for permanent storage and ensuring confidentiality compliance.
4Reliability
If non-disclosure agreements are used to establish trust between clients and conversion services, then confidentiality is assured in static environments, but new mechanisms are required in dynamic environments where services are added frequently and clients discover services dynamically
Solution Approach 1:
The patent replaces the mechanical/legal system of non-disclosure agreements with an automated cryptographic system. Instead of relying on legal contracts and human trust, the system uses public key infrastructure and automated encryption/decryption mechanisms that provide trust and confidentiality automatically in dynamic environments where services are discovered at runtime.
Data Source
AI summary
A method of secure file conversion is disclosed. The method includes storing a decrypted version of a previously encrypted file, the encryption and decryption occurring using public key infrastructure, in an allotted memory location of a memory for which read-only access to the stored decrypted file is provided. Next, the memory location is monitored for an attempt to access at least one memory location other than the allotted location. Finally, a file format of the stored decrypted file is converted, the conversion being aborted upon detecting attempt to access at least one memory location other than the allotted memory location. A converter is further disclosed.