Stacked Encryption File Structure for Controlled Digital Asset Sharing

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Traditional encryption methods fail to control access and distribution of digital assets after decryption, allowing recipients to freely copy and redistribute files, and lack mechanisms to track the origin and ownership of proprietary information.

Innovation Solution

The implementation of stacked encryption, where an unencrypted file is combined with an encrypted file using commenting mechanisms, allowing only authorized devices with specific software and configurations to access the encrypted portion, while maintaining the unencrypted portion readable and presenting information such as contact details, and utilizing a cloud-based collaboration service for controlled access and rights management.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional encryption methods are used to protect files, then security and protection of proprietary information is improved, but control over access and distribution after decryption is lost, allowing recipients to freely copy and redistribute files

Engineering Contradiction:
ImprovesecurityVSAvoidcontrol over access and distribution
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent segments the file into two distinct parts: an unencrypted portion containing metadata and control information, and an encrypted portion containing the actual proprietary data. This segmentation allows the system to maintain security through encryption while preserving control mechanisms through the unencrypted metadata that includes access rights and distribution controls.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces a cloud-based collaboration service as an intermediary between the file creator and the recipient. This intermediary manages the encryption keys, authenticates users, enforces access rights, and monitors distribution, thereby maintaining control over the encrypted file without requiring the recipient to have direct access to decryption capabilities.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If traditional encryption methods are used to protect files, then protection against unwanted access and theft is improved, but tracking the origin and ownership of proprietary information is not enabled

Engineering Contradiction:
Improveprotection against unwanted accessVSAvoidtracking origin and ownership
Core Design Contradiction:
ReliabilityVSLoss of information

Solution Approach 1:

The unencrypted portion of the stacked file contains metadata that explicitly stores origin and ownership information. This segmentation ensures that while the encrypted portion protects the actual data, the unencrypted metadata portion preserves and enables tracking of the file's provenance and ownership chain.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The cloud-based collaboration service implements feedback mechanisms that track and monitor access to, distribution of, and usage of the encrypted files. The system records authentication events, access patterns, and distribution history, providing continuous feedback about the file's journey and enabling ownership tracking throughout its lifecycle.

Inventive Principle:
Principle #23Feedback

3Ease of operation

If an unencrypted file is combined with an encrypted file using commenting mechanisms, then user interactions for accessing encrypted data are reduced and normal operation is maintained, but device complexity increases due to required software and configurations

Engineering Contradiction:
Improveuser interactions for accessing encrypted dataVSAvoidsoftware and configurations required
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The patent creates a universal file format that can be opened by standard applications while maintaining encryption. The stacked file structure allows any application that can read the unencrypted portion to access metadata and control information, while the encrypted portion can be decrypted by authorized applications. This multi-functionality reduces the need for specialized software while maintaining security.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The system implements self-service mechanisms where the unencrypted portion of the file contains embedded instructions and control information that automatically guide the decryption process. When a user opens the file, the system automatically authenticates the user, retrieves decryption keys, and enables access without requiring manual configuration or complex user intervention.

Inventive Principle:
Principle #25Self-service

4Reliability

If stacked encryption is implemented with unencrypted and encrypted file portions combined, then secure and controlled sharing of sensitive files is enabled, but manufacturing complexity increases due to file creation and management processes

Engineering Contradiction:
Improvesecure and controlled sharingVSAvoidfile creation and management processes
Core Design Contradiction:
ReliabilityVSEase of manufacture

Solution Approach 1:

The patent merges the unencrypted metadata portion and encrypted data portion into a single integrated file structure. This combining approach simplifies file management by handling both portions as one unit, while the internal structure maintains the separation needed for secure sharing. The cloud-based service automatically handles the merging process during file creation and transmission.

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentUS10713388B2Stacked encryption
Publication Date: 2020.07.14 DOSA X LLC
  • US10713388B2 patent drawing
  • US10713388B2 patent drawing
  • US10713388B2 patent drawing

AI summary

Various embodiments of the present technology generally relate to file sharing, encryption, and protection of digital assets. More specifically, some embodiments of the present technology relate to computer files comprising an unencrypted file combined with an encrypted file, and methods for creation of such combined files. The unencrypted file can be read by target applications and can present a variety of information (e.g., contact information, registration information, etc.). The encrypted data may be accessed only when the proper management software, drivers, application programming interfaces, and other components of a runtime environment have been installed on a computing device.