Secure File Sharing via Local Encryption and Auto-Deletion
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing file sharing methods, such as cloud storages and end-to-end encryption, are insecure due to custodial storage vulnerabilities and memory overhead, while traditional email sharing lacks security.
Innovation Solution
Implementing a file sharer that performs independent encryption and decryption of files, using a single sign-on service for user verification, and enabling automatic deletion of shared files to enhance security and reduce memory overhead.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If cloud storage is used for file sharing, then ease of operation is improved, but security deteriorates due to custodial storage vulnerabilities
Solution Approach 1:
The system separates encryption management from cloud storage by dividing functionality into independent components: the user device performs encryption locally before upload, while cloud storage only handles encrypted data. This segmentation prevents the cloud provider from accessing plaintext, resolving the security concern while maintaining ease of use.
Solution Approach 2:
The patent introduces an intermediary encryption layer between the user and cloud storage. The encryption module acts as a mediator that transforms files into unreadable ciphertext before cloud storage access, ensuring that even if cloud storage is compromised, the actual file content remains protected.
2Reliability
If end-to-end encryption is implemented, then security is improved, but device complexity increases due to memory overhead
Solution Approach 1:
The patent extracts the encryption and decryption operations from continuous memory storage requirements. Instead of maintaining encrypted data in memory throughout the process, the system encrypts files locally, uploads ciphertext to cloud storage, and only decrypts temporarily when needed for sharing, significantly reducing memory overhead.
Solution Approach 2:
The encrypted file copies are created temporarily in memory only when needed for transmission to additional users, then immediately discarded. This disposable approach to encrypted data in memory reduces the time and space complexity compared to maintaining persistent encrypted copies.
3Ease of operation
If files are shared via traditional email, then ease of operation is improved, but security deteriorates due to lack of encryption
Solution Approach 1:
The system performs preliminary encryption of files before they are shared, similar to how email attaches files. This preliminary action ensures that files are encrypted before leaving the user's control, maintaining simplicity while adding security that traditional email lacks.
4Ease of operation
If cloud storage retains encrypted files indefinitely, then ease of operation is improved, but harmful factors increase due to potential malicious access
Solution Approach 1:
The patent implements dynamic access control where the cloud storage system can actively revoke access to encrypted files at any time. This dynamic capability allows the system to respond to security threats by immediately preventing further access, transforming static storage into a controllable security mechanism.
Solution Approach 2:
The system incorporates feedback mechanisms where access requests are verified against authentication credentials, and access decisions are communicated back to users. This feedback loop enables real-time security monitoring and control, allowing the system to prevent malicious access while maintaining legitimate file sharing.
Data Source
AI summary
In some implementations, a file sharer may receive, from a first user device, a file and an indication of a set of additional users and may perform encryption on the file to generate an encrypted file. The file sharer may transmit the encrypted file to a cloud storage. The file sharer may receive, from a second user device, a request for the file and may contact a single sign on service to authenticate a user of the second user device. The file sharer may verify that the user of the second user device is included in the set of additional users. The file sharer may receive the encrypted file from the cloud storage and may perform decryption on the encrypted file to generate a copy of the file. The file sharer may transmit, to the second user device, the copy of the file.