Virtual Machine Manager Location-Based File Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current data processing systems face challenges in securely managing file access, particularly in preventing unauthorized access to sensitive files when they are transported outside authorized locations, as existing solutions often restrict system functionalities.
Innovation Solution
A virtual machine manager is implemented to selectively encrypt files using public keys based on the computer system's location, ensuring that files can only be accessed and written in authorized locations by decrypting them with the corresponding private key.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If file access is restricted to authorized locations only, then data security is improved, but system functionality and ease of operation deteriorate
Solution Approach 1:
The patent changes the encryption parameter dynamically based on location. Files are encrypted with different keys depending on whether the system is in an authorized location or not. This allows the system to maintain security (encrypted state) while enabling functionality (decrypted state) when in authorized locations, thus resolving the contradiction between security and ease of operation
Solution Approach 2:
The encryption state of files is made dynamic rather than static. The virtual machine manager continuously monitors location and adjusts the encryption/decryption state accordingly. When in authorized locations, files are decrypted for normal operation; when moved outside authorized locations, files are re-encrypted. This dynamic approach maintains both security and functionality
2Reliability
If files are encrypted to prevent unauthorized access, then data security is improved, but system complexity increases
Solution Approach 1:
The virtual machine manager automatically handles the encryption and decryption operations without requiring user intervention. The system monitors its own location status and autonomously applies the appropriate encryption key or decryption operation. This self-service approach masks the underlying complexity from users while maintaining robust security
Solution Approach 2:
The virtual machine manager acts as an intermediary layer between the user and the encrypted files. It transparently handles all encryption/decryption operations based on location, shielding users from the complexity of cryptographic operations while ensuring data security is maintained
Data Source
AI summary
A method for controlling file access on computer systems is disclosed. Initially, a virtual machine manager (VMM) is provided in a computer system. In response to a write request, the VMM determines whether or not a location field is valid. If the location field is not valid, then the VMM writes the write request information to a storage device; but if the location field is valid, then the VMM encrypts the write request information before writing the write request information to the storage device. In response to a read request, the VMM again determines whether or not a location field is valid. If the location field is not valid, then the VMM sends the read request information to a read requester; but, if the location field is valid, then the VMM decrypts the read request information before sending the read request information to the read requester.