Virtual Drive File Security via Distributed Key Retrieval
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing file encryption methods inconvenience users by requiring decryption keys for frequent access and pose security risks due to simple encryption keys, making encrypted files vulnerable to unauthorized decryption.
Innovation Solution
A file security method and apparatus that detects access to a file in a virtual drive, requests and receives a decryption key from a second communication device, and decrypts the file using this key, ensuring that files are encrypted and decrypted across multiple devices, thereby enhancing security and convenience.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a simple encryption key is used for frequent file access, then user convenience is improved, but file security deteriorates as encrypted files become vulnerable to unauthorized decryption
Solution Approach 1:
The encryption key is segmented into multiple parts and stored across different communication devices. No single device holds the complete key, so even if one device is compromised, the entire file cannot be decrypted. This resolves the contradiction by maintaining security through key distribution while enabling convenient access through automated key retrieval mechanisms.
Solution Approach 2:
A key management server acts as an intermediary between communication devices and encrypted files. The server facilitates automated key distribution and retrieval, allowing users to access files conveniently without manually managing complex key sequences, while maintaining security through centralized key control and distribution protocols.
2Reliability
If a decryption key is demanded from a user for every file access, then file security is improved, but user convenience deteriorates due to the inconvenience of frequent key input
Solution Approach 1:
Decryption keys are pre-distributed to multiple communication devices before file access is needed. When a user wants to access a file, the system automatically retrieves the appropriate key from the pre-configured devices without requiring the user to manually input the key each time. This maintains security through key verification while eliminating the inconvenience of frequent manual key entry.
Solution Approach 2:
The system performs automated key retrieval and decryption operations without requiring continuous user intervention. Once keys are initially distributed to devices, the system autonomously manages key selection and file decryption processes, allowing users to access files conveniently while security is maintained through automated key management protocols.
3Reliability
If encryption keys are distributed across multiple communication devices, then file security is improved against hacking, but device complexity increases due to the need for multi-device coordination
Solution Approach 1:
The key management server provides universal functionality for key distribution, storage, and retrieval across multiple communication devices. This centralized service handles the complexity of multi-device key coordination, allowing individual devices to remain relatively simple while the system as a whole achieves high security through distributed key management.
Solution Approach 2:
The key management server acts as an intermediary that abstracts the complexity of multi-device key coordination from individual communication devices. The server handles key segmentation, distribution, and retrieval logic, allowing devices to communicate simply with the server while the server manages the complex interactions required for secure multi-device key management.
Data Source
AI summary
Disclosed is a file security method for reinforcing file security. The method may include: by a first communication device, detecting an access to a file stored in a virtual drive; by the first communication device, requesting a decryption key of the file to a second communication device and receiving the decryption key; and by the first communication device, decrypting the access-detected file by using the decryption key.