Secure File Handle Mediator for Application Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face security risks when an application knows the location of a file, as this information can be used to access the file later, posing a risk of unauthorized access.
Innovation Solution
A system and method where an application requests file access through APIs within an environment, prompting the user for a filename and path via dialog boxes, and provides a handle to the file without revealing its name or path, ensuring the application does not know the file's location.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the application is given direct access to file location information, then the application can easily store and retrieve files, but the security risk increases as the application can use this information to access files unauthorized
Solution Approach 1:
The patent introduces an intermediary layer (the environment or runtime system) that sits between the application and the file system. This intermediary handles file operations on behalf of the application, receiving requests through APIs, prompting users for file selection, and managing file handles without exposing the actual file path information to the application. This mediator approach allows file access functionality while preventing the application from obtaining harmful location information.
Solution Approach 2:
The patent extracts the sensitive file location information from the file access process and withholds it from the application. The environment opens files and retrieves handles, but deliberately does not provide the name and path information to the application. This extraction of harmful information from the operational process maintains security while preserving file access capability.
2Reliability
If the environment provides file handles to applications, then file access is enabled, but the application may still infer or access location information creating security vulnerabilities
Solution Approach 1:
The environment acts as a mediator that provides file handles to applications through controlled interfaces. The intermediary manages the mapping between application requests and actual file system operations, ensuring that only necessary information (file handles for access) is provided while withholding location information. This mediator layer maintains reliability of file access while preventing information leakage.
Solution Approach 2:
The patent segments the file access process into distinct components: the application layer that requests access, the environment layer that manages handles, and the file system layer that stores files. Each layer operates with appropriate information access rights, with the environment layer acting as a buffer that provides handle-based access without exposing the file system layer's location information to the application layer.
Data Source
AI summary
A system and method which receives from an application a request to open a file for reading or writing, prompts the user for the file, and then provides a handle or alternate handle to the requesting application, but does not provide the name and path of the file and may not provide the actual handle to the file.