Virtual File System Access Path Redirection for Encrypted Files
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Information handling systems require user input for file encryption and decryption, which can be cumbersome and lead to user abandonment of security measures, causing information to be less secure, and also result in confusing file access path inconsistencies.
Innovation Solution
Implementing a virtual file system that automatically encrypts and decrypts files with minimal user input, using OS-level services and application plug-ins to manage file access and save operations, and updating file access indicators to reflect user-intended paths.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If user input is required for file encryption and decryption, then security control is improved, but ease of operation deteriorates
Solution Approach 1:
The system automatically performs encryption and decryption operations without requiring user intervention. The virtual file system service monitors file access requests and applies cryptographic transformations autonomously, allowing the system to serve itself regarding security operations while maintaining transparency for the user.
Solution Approach 2:
A virtual file system service acts as an intermediary layer between the user and the actual file storage. This mediator automatically handles encryption and decryption of files based on access requests, eliminating the need for direct user interaction with cryptographic operations while maintaining security controls.
2Ease of operation
If automatic encryption is implemented, then ease of operation is improved, but device complexity increases
Solution Approach 1:
The virtual file system service provides multiple functions within a single system component: it manages file access requests, determines encryption requirements, performs cryptographic operations, and updates access indicators. This multi-functionality consolidates complexity into a unified service rather than requiring separate mechanisms for each function.
Solution Approach 2:
The virtual file system service serves as an intermediary that transparently handles cryptographic operations without requiring changes to existing applications or user workflows. By inserting this layer between the user and file storage, the system manages complexity internally while maintaining simplicity at the user interface.
3Reliability
If files are redirected through encryption systems, then security is improved, but loss of information increases
Solution Approach 1:
The system creates and maintains a copy of the original access path indicator separately from the encrypted file storage path. When files are redirected through the encryption system, the virtual file service updates this copied indicator to reflect the user-intended access path, preserving the information needed for user-friendly access without compromising security.
Solution Approach 2:
The virtual file system service acts as an intermediary that manages the mapping between encrypted storage paths and user-friendly access paths. It maintains access indicators that translate cryptic encryption system paths into recognizable user-intended paths, preventing information loss while maintaining security redirection.
Data Source
AI summary
Many users of information handling systems use applications to create, manage, and/or save files containing information. Encryption of the files secures the data against access by unintended recipients. Information handling systems may be designed to perform encryption in the background with minimal user input. For example, applications, application plug-ins, or operating system (OS) level system services may facilitate encryption and decryption of application files with minimal user input. Such applications, plugins, and services may allow applications to interact with encryption systems, such as virtual file systems, and may direct file save and access operations through the encryption systems, automatically encrypting and decrypting files selected by the user without exposing the user to cumbersome or confusing encryption options.