Transparent File Encryption via User-Space Recipes

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Unix-like operating systems lack support for transparent file processing, which involves seamless encryption, decryption, compression, and attribute changes during file operations, unlike other operating systems.

Innovation Solution

Emulating transparent file processing through recipes that detect file operation paths and apply appropriate processing methods for local folders, physical devices, and synchronized folders, ensuring operations are transparent to the user.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Extent of automation

If transparent file processing is implemented on Unix-like operating systems, then file encryption and compression operations can be performed seamlessly during file moves, but the system complexity increases significantly since Unix-like systems lack native support for in-kernel stacking or filter file systems

Engineering Contradiction:
Improvetransparent file processingVSAvoidsystem complexity
Core Design Contradiction:
Extent of automationVSDevice complexity

Solution Approach 1:

The patent introduces a user-space file system (such as FUSE - Filesystem in Userspace) as an intermediary layer between the application and the underlying Unix-like file system. This mediator implements the transparent file processing functionality through virtual file system operations, allowing encryption, compression, and other transformations to occur without modifying the kernel. The user-space file system intercepts file operations and applies the desired processing transparently, thus achieving the goal without increasing kernel complexity.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent segments the file processing functionality into separate user-space modules or services that can be independently managed. Instead of implementing transparent file processing throughout the entire kernel, the functionality is divided into discrete components (such as encryption modules, compression modules) that operate in user space. This segmentation reduces overall system complexity by isolating the complex processing logic from the core operating system.

Inventive Principle:
Principle #1Segmentation

2Adaptability or versatility

If multiple processing recipes are implemented to accommodate different contexts (local folders, physical devices, cloud sync), then adaptability to various file operation scenarios improves, but the complexity of detecting path types and selecting appropriate recipes increases

Engineering Contradiction:
Improvecontext-aware processingVSAvoidpath detection and recipe selection complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent implements preliminary classification of file paths into different categories (local folders, physical devices, cloud synchronization folders) before processing operations. By pre-defining path types and their associated characteristics, the system can quickly determine which processing recipe to apply without complex real-time analysis. The path type detection logic is established in advance, allowing the system to select the appropriate encryption or compression recipe based on pre-categorized path information.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS10599616B2Emulating transparent file encryption
Publication Date: 2020.03.24 SOPHOS LTD
  • US10599616B2 patent drawing
  • US10599616B2 patent drawing
  • US10599616B2 patent drawing

AI summary

Transparent file processing is supported in Unix-like operating systems by emulating the desired file processing through a number of recipes that accommodate different contexts. Recipes are provided, for example, for local folders in user space, for whole devices (e.g., flash drives or network drives), and for folders synchronized to cloud data. By detecting the path type for a file operation and selecting and applying the appropriate recipe, file processing can be performed in a manner transparent to the user.