Superfile Access Control for Media Files on Untrusted Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computer file systems lack the ability for content creators to maintain control over their media files on untrusted systems, as users can freely access, edit, and distribute files without the creator's permission, and existing cloud platforms only provide centralized control over shared files.
Innovation Solution
The implementation of a superfile system that includes a header portion and encrypted content payload, requiring communication with a remote server for access and usage tracking, allowing creators to manage permissions and updates in real-time across multiple copies of the file.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If files are distributed to untrusted systems, then file accessibility and user freedom are improved, but file security and creator control deteriorate
Solution Approach 1:
The file is segmented into two parts: an unencrypted header containing access instructions and a encrypted payload containing the actual content. This allows the file to be freely distributed while the encrypted portion maintains security through server-mediated access control.
Solution Approach 2:
A remote server acts as an intermediary between the distributed file and the user's computing device. The server mediates access by providing decryption keys and managing permissions, enabling creator control even after file distribution to untrusted systems.
2Reliability
If cloud platforms provide centralized control, then creator permission management is improved, but system complexity and centralized dependency worsen
Solution Approach 1:
Access control instructions and encryption parameters are embedded in the file header during file creation. This preliminary configuration enables decentralized permission management without requiring continuous centralized control infrastructure.
Solution Approach 2:
The distributed file contains self-contained access control instructions that enable computing devices to autonomously manage permission verification and decryption key retrieval, reducing dependency on centralized cloud platforms while maintaining creator control.
Data Source
AI summary
One example method includes receiving, by a client computing device, a request to open a superfile stored in a memory device at the client computing device, the superfile comprising encrypted content, the request comprising user credential information; in response to receiving the request to open the superfile, communicating, by the client computing device, a request to a remote server to access the superfile, the request including a credential associated with the user account; receiving, from the remote server, cryptographic information; decrypting, using the cryptographic information, the encrypted content; accessing and presenting the decrypted content; and maintaining communications with the remote server while the decrypted content is accessed.