Secure Upload URL Workflow for Permission-Based File Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems lack security measures for sensitive files received from client devices, are vulnerable to malicious attacks, inefficient in file handling, and waste computational resources due to unformatted and incorrectly named files.
Innovation Solution
A secure document system generates a secure upload URL for client devices to upload files to a draft data store, processes files based on predetermined attributes, and transfers them to a final data store while providing access to agent devices based on permissions, thus enhancing security, efficiency, and accuracy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If files are received through email or text message, then communication convenience is improved, but security is compromised due to lack of access controls and file propagation
Solution Approach 1:
The patent introduces an intermediary file management system between the communication channel (email/text) and the institutional computing system. This intermediary system receives files through secure upload URLs, validates them against predetermined attributes, and controls distribution through permission-based access. This mediator prevents direct file propagation while maintaining communication convenience.
Solution Approach 2:
The system performs preliminary validation and processing of files before they are made accessible to agents. Files are uploaded to a secure location, validated against predetermined attributes (file type, size, content), and only then are they transferred to the appropriate data store with controlled access permissions. This preliminary action prevents malicious files from entering the system.
2Productivity
If agent devices can access and forward files freely, then file sharing efficiency is improved, but security is compromised through malicious propagation
Solution Approach 1:
The patent changes the access parameters from open/free access to permission-based access with predetermined attributes. Each file is associated with specific access permissions that control which agents can access and under what conditions. This parameter change maintains efficient file sharing while preventing unauthorized propagation.
Solution Approach 2:
The system implements feedback mechanisms where file access is logged and monitored. When an agent attempts to access a file, the system verifies permissions and logs the access. This feedback loop ensures accountability and prevents malicious propagation by tracking all file access events.
3Adaptability or versatility
If multiple graphical user interfaces are used for file upload, then communication flexibility is improved, but operational efficiency deteriorates
Solution Approach 1:
The patent creates a universal file upload interface that can be accessed through multiple communication channels (email, text message, direct upload). Instead of requiring separate interfaces for each channel, the system provides a single secure upload URL that handles all file submission types. This universal interface maintains communication flexibility while improving operational efficiency.
4Ease of operation
If files are stored across multiple agent devices, then accessibility is improved, but security control deteriorates
Solution Approach 1:
The patent segments the file storage system into multiple controlled data stores (draft data store, final data store, archived data store) with hierarchical access controls. Instead of allowing free distribution across agent devices, files are stored in segmented locations with predetermined access permissions. This segmentation maintains accessibility while enforcing security controls at each level.
Data Source
AI summary
The present disclosure relates to systems, non-transitory computer-readable media, and methods for generating a secure upload URL, receiving a file upload to a first draft data store, and transferring the file from the first draft data store to a first final data store. In particular, in one or more embodiments, the disclosed systems transfers the file from the first draft data store to a first final data store based on the file meeting predetermined file attributes associated with the first draft data store. Moreover, the disclosed system provides to an agent device access to the file based on access permissions corresponding to the first final data store.