Temporary Access Links for Secure File Sharing

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional document sharing platforms face security risks and inefficiencies when internal users share documents with external users, as external users often retain access beyond intended periods, and there is a lack of tracking and control over document access and modifications.

Innovation Solution

A secure access application generates temporary access links with encryption that do not reveal the file name or storage platform, allowing external users to access files for a specified duration, with enhanced security measures including a key vault and key query database to manage access and revoke permissions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If conventional storage/sharing platforms are used to share documents with external users, then document sharing capability is provided, but security risks increase as external users retain access beyond intended periods

Engineering Contradiction:

Improvedocument sharing capabilityVSAvoidsecurity control

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent implements dynamic access control through time-limited access tokens that automatically expire after a specified duration. This allows the system to adapt access permissions over time, transitioning from permanent access to temporary access, thereby resolving the contradiction between providing sharing capability and maintaining security control.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The system changes the parameter of access duration from indefinite to fixed by incorporating expiration timestamps in access tokens. This parameter change enables the system to provide document sharing while automatically revoking access after the intended period, thus maintaining both versatility and security.

Inventive Principle:

Principle #35Parameter changes

2Adaptability or versatility

If external users are granted access to shared documents, then collaboration is enabled, but tracking and monitoring of document access becomes difficult

Engineering Contradiction:

Improvecollaboration capabilityVSAvoidaccess tracking

Core Design Contradiction:

Adaptability or versatilityVSDifficulty of detecting and measuring

Solution Approach 1:

The system implements feedback mechanisms by logging all access events, including user identification, timestamp, and document accessed. This feedback loop enables the system to track and monitor external user access while maintaining collaboration capabilities, resolving the contradiction between enabling collaboration and facilitating monitoring.

Inventive Principle:

Principle #23Feedback

3Reliability

If external users must login to the storage platform to access shared documents, then security is maintained, but user experience deteriorates due to unfamiliarity with the platform interface

Engineering Contradiction:

ImprovesecurityVSAvoiduser experience

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

The patent introduces access tokens as an intermediary mechanism that enables external users to access shared documents without creating full platform accounts. This intermediary approach maintains security through authenticated access while significantly improving user experience by eliminating the need for users to navigate unfamiliar platform interfaces.

Inventive Principle:

Principle #24Intermediary (Mediator)

4Ease of operation

If conventional access credentials are provided to external users, then document access is enabled, but the ability to revoke access promptly is lost

Engineering Contradiction:

Improveaccess provisioningVSAvoidaccess revocation efficiency

Core Design Contradiction:

Ease of operationVSProductivity

Solution Approach 1:

The system performs preliminary action by embedding expiration timestamps in access tokens before they are issued to external users. This preliminary configuration of time-limited access enables automatic revocation of access rights without requiring manual intervention, thus improving access revocation efficiency while maintaining ease of access provisioning.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS12174978B2Systems and methods to provide temporary document access for secure file sharing

Publication Date: 2024.12.24 MCKINSEY & CO INC

AI summary

Techniques for providing temporary document access for secure file sharing are disclosed. An example method includes receiving a request from a first user to share a file, and generating, by an encryption module, a secure access link corresponding to the file that does not indicate a storage platform or a file name. The example method also includes transmitting the secure access link to a second user, and receiving an input from the second user during the accessibility duration corresponding to the secure access link. Responsive to receiving the input, the example method includes validating the access key to determine whether or not the second user should be granted access to the file; and responsive to determining that the user should be granted access to the file, retrieving an updated version of the file from the storage platform, and transmitting the updated version of the file to the second user.