Selective Decryption for Secure File Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges in securely allowing non-secure application programs to access files in secure storage areas without compromising sensitive data, as they are designed to prevent access to secure storage areas.
Innovation Solution
A selective decryption process that monitors secure file storage areas, determines if an application program needs to access file content, and either allows access without decryption or decrypts the files when necessary, while re-encrypting content before writing to unsecure locations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the security subsystem prevents non-secure application programs from accessing secure storage areas, then data security is improved, but application program functionality deteriorates
Solution Approach 1:
The patent introduces a selective decryption process as an intermediary layer between application programs and secure storage areas. This mediator monitors file access requests, determines whether decryption is necessary, and selectively decrypts files only when needed. This resolves the contradiction by allowing application programs to access secure files without permanently compromising security, as the decryption is selective and controlled.
Solution Approach 2:
The patent changes the encryption parameter dynamically based on the accessing application program. Instead of a static encrypted state, the system modifies the decryption state selectively - files remain encrypted for most applications but are decrypted on-demand for authorized applications that need to access the content. This parameter change enables both security maintenance and application functionality.
2Ease of operation
If files are decrypted for application program access, then application functionality is improved, but data security deteriorates
Solution Approach 1:
The patent applies partial decryption rather than full decryption of files. The selective decryption process decrypts only the specific portions of files that application programs need to access, while leaving other portions encrypted. This partial action approach maintains security for file portions that don't need to be accessed, while still enabling application functionality for the necessary portions.
Solution Approach 2:
The decryption is performed periodically and temporarily only when an application program needs access, rather than maintaining a permanently decrypted state. The selective decryption process monitors access requests and decrypts files on-demand, returning them to encrypted state when not in use. This periodic decryption maintains security while enabling functionality when needed.
3Adaptability or versatility
If all files in secure storage are decrypted, then application program versatility is improved, but security risk increases
Solution Approach 1:
The patent segments the decryption process by application program and by file content. Instead of decrypting all files for all applications, the selective decryption process divides access control into specific segments - each application program receives decryption only for the specific files and portions it needs. This segmentation enables application versatility while containing security risks to minimal necessary exposure.
Data Source
AI summary
Systems, methods and media are provided for selective decryption of files. One method includes monitoring a secure file storage area including at least one file using a selective decryption process associated with the secure file storage area. Content of each of the at least one file is protected with an encryption. The method also includes detecting a request by an application program for one of the at least one file. The method further includes determining whether the application program needs to access the content of the requested file. The method also includes, when it is determined that the application program does not need to access the content of the requested file, allowing the application program to access the file content without decrypting the encryption.