Web Application File Fragmentation for Secure Cloud Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing file storage methods using single cloud storage services risk data loss and lack of user control over data access, require client applications, and are inefficient in data availability and security.
Innovation Solution
A method for cryptographically storing files using a web application that encrypts and fragments data across multiple independent storage services, utilizing error correction methods and authorization tokens to ensure security and availability, without requiring client applications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If data is stored using a single cloud storage service, then storage functionality is simplified, but data security and user control over data access deteriorate
Solution Approach 1:
The patent divides the file into multiple fragments and distributes them across different storage services. Each fragment is stored separately on different services, so that no single service has access to the complete file. This segmentation approach resolves the contradiction by maintaining simple integration while improving security through distribution.
Solution Approach 2:
Different storage services are selected based on their specific characteristics (security level, availability, cost) for different fragments. The system assigns fragments to storage services according to their local qualities, optimizing both security and functionality without requiring uniform treatment of all data.
2Reliability
If a client application is installed on the user's computer system to access stored data, then data access control is improved, but ease of operation deteriorates
Solution Approach 1:
The web application serves multiple functions: it provides the user interface for data storage, retrieval, and management, while also handling the complex operations of fragment distribution and reassembly. This universal approach eliminates the need for separate client applications while maintaining secure access control.
Solution Approach 2:
The web application acts as an intermediary between the user and the distributed storage system. It handles the complexity of communicating with multiple storage services, managing authentication, and coordinating data retrieval, thereby simplifying user operation while maintaining security.
3Reliability
If data is encrypted and fragmented before storage, then data security is improved, but device complexity increases
Solution Approach 1:
The system automatically performs encryption and fragmentation operations without requiring manual intervention. The web application self-manages the storage process by automatically selecting storage services, distributing fragments, and handling authentication tokens, thereby reducing operational complexity despite the increased security measures.
4Reliability
If multiple storage services are used to store file fragments, then data availability is improved, but ease of operation worsens
Solution Approach 1:
The web application automatically manages interactions with multiple storage services, selecting appropriate services based on availability and performance. Users simply upload files through the web interface without needing to manually configure or monitor multiple storage services, maintaining operational simplicity while achieving high availability.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention relates to a method for the cryptographically secured storage of a file (101) using a web application executed by a web browser (106) on a user computer system (104, 162, 168) of a user (102, 160). The method comprises: • the web application encrypting the file (101) on the user computer system (104, 162, 168), • the web application providing a distribution plan, • the web application fragmenting the encrypted file (101) on the user computer system (104, 162, 168) into a plurality of file fragments (F1-F4) in accordance with the distribution plan, • the web application sending the resulting file fragments (F1-F4) over the network (178) to the storage services (SD1-SD6) identified by the distribution plan.