Transparent File System Encryption via Attribute Inspection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data processing systems face challenges in efficiently encrypting and integrity-validating network files due to computational expenses and issues with serializing access, key management, and optimal performance configuration when stacking an encryption layer on top of existing network file systems.
Innovation Solution
A computer-implemented method and system that provides transparent data transformation at the file system level by examining cryptographic attributes to determine if files are encrypted or integrity-verified, omitting unnecessary encryption and integrity verification processes, and optimizing cryptographic policy based on underlying network file system attributes to minimize data transformation and ensure compatible storage formats.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encryption layer is stacked on top of existing network file systems, then security is improved, but computational overhead increases
Solution Approach 1:
The system performs preliminary actions by examining cryptographic attributes and determining encryption/verification needs before actual data transformation occurs. This prevents unnecessary computational work by identifying files that already have required security attributes, thus reducing overall computational overhead while maintaining security requirements.
2Reliability
If encryption layer is stacked on top of existing network file systems, then security is improved, but device complexity increases
Solution Approach 1:
The system introduces an intermediary component that sits between the network file system and the encryption layer. This intermediary examines cryptographic attributes and makes decisions about whether encryption or verification is needed, thereby simplifying the overall system architecture by centralizing the decision-making logic and avoiding complex interactions between multiple encryption layers.
3Reliability
If encryption is performed on already encrypted files, then security is maintained, but productivity decreases
Solution Approach 1:
The system extracts and examines cryptographic attributes from files to determine their encryption status. By taking out this information and using it to make decisions, the system avoids performing unnecessary encryption operations on already encrypted files, thus maintaining security while improving productivity by eliminating redundant computational work.
4Reliability
If integrity verification is performed on all files, then reliability is improved, but productivity decreases
Solution Approach 1:
The system applies partial action by performing integrity verification only when necessary, based on the examination of cryptographic attributes. Instead of verifying all files, the system selectively applies verification to files that require it, thereby maintaining reliability while improving productivity by avoiding excessive verification operations on files that already have verified integrity.
Data Source
Figure 1~2
Figure 3A~3B
Figure 4~5
AI summary
A mechanism for enabling efficient encryption and integrity validation of network files. When a request to read a file stored in a local network file system is received, the local network file system examines cryptographic attributes associated with the file to determine if the file is encrypted or integrity- verified. If the cryptographic attributes indicate the file is encrypted, the local network file system omits the encryption of the file by the local network file system prior to passing the file to the remote network file system. If the cryptographic attributes indicate the file is integrity- verified, the local network file system omits the integrity- verification of the file by the local network file system prior to passing the file to the remote network file system. The local network file system then transmits the file to the remote network file system.