Authenticator device facilitating file security

1. A method for controlling access to an encrypted file, comprising:

establishing a trusted relationship between an authenticator device and a file storage application hosting the encrypted file;

receiving a request to access the encrypted file from an access device;

authenticating the request by determining that the access device has authority to access the encrypted file;

providing a decryption key to the authenticator device when the access device has authority;

providing the encrypted file to the access device;

transmitting the decryption key from the authenticator device to the access device; and

decrypting the encrypted file, by the access device, using the decryption key received from the authenticator device.

2. The method of claim 1 , wherein establishing the trusted relationship comprises:

receiving authentication credentials from the authenticator device; and

verifying authenticity of the authentication credentials.

3. The method of claim 1 , wherein determining that the access device has authority to access the encrypted file comprises:

obtaining a hardware identifier of the access device; and

determining that the hardware identifier corresponds to a device with authorization to access the encrypted file.

4. The method of claim 1 , wherein the access device automatically deletes the decryption key after decrypting the encrypted file.

5. The method of claim 1 , further comprising:

receiving, by the authenticator device, a password;

using the password to generate a time-varying password; and

double-encrypting the decryption key using the time-varying password prior to providing the decryption key to the access device.

6. The method of claim 5 , further comprising:

executing a pairing process to establish a trusted relationship between the authenticator device and the access device; and

exchanging a shared secret used to create the time-varying password between the authenticator device and the access device during the pairing process.

7. The method of claim 1 , wherein transmitting the decryption key from the authenticator device to the access device comprises:

displaying the decryption key on the authenticator device in the form of a QR code; and

taking a picture of the QR code using the access device.

8. One or more non-transitory computer readable media comprising instructions which, when executed by one or more processors, execute a method for controlling access to an encrypted file, the instructions being configured to:

establish a trusted relationship between an authenticator device and a file storage application hosting the encrypted file;

receive a request to access the encrypted file from an access device;

authenticate the request by determining that the access device has authority to access the encrypted file;

provide a decryption key to the authenticator device when the access device has authority;

provide the encrypted file to the access device;

transmit the decryption key from the authenticator device to the access device; and

decrypt the encrypted file, by the access device, using the decryption key received from the authenticator device.

9. The one or more non-transitory computer readable media of claim 8 , further comprising instructions which, when executed:

receive authentication credentials from the authenticator device; and

verify authenticity of the authentication credentials.

10. The one or more non-transitory computer readable media of claim 8 , wherein determining that the access device has authority to access the encrypted file comprises:

obtaining a hardware identifier of the access device; and

determining that the hardware identifier corresponds to a device with authorization to access the encrypted file.

11. The one or more non-transitory computer readable media of claim 8 , further comprising instructions which, when execute, delete the decryption key after decrypting the encrypted file.

12. The one or more non-transitory computer readable media of claim 8 , further comprising instructions which, when executed:

receive, by the authenticator device, a password;

use the password to generate a time-varying password; and

double-encrypt the decryption key using the time-varying password prior to providing the decryption key to the access device.

13. The one or more non-transitory computer readable media claim 12 , further comprising instructions which, when executed:

execute a pairing process to establish a trusted relationship between the authenticator device and the access device; and

exchange a shared secret used to create the time-varying password between the authenticator device and the access device during the pairing process.

14. The one or more non-transitory computer readable media of claim 8 , wherein transmitting the decryption key from the authenticator device to the access device comprises:

displaying the decryption key on the authenticator device in the form of a QR code; and

taking a picture of the QR code using the access device.

15. A system for controlling access to an encrypted file, comprising:

an authenticator device;

an access device; and

a file storage system hosting the encrypted file, wherein:

the file storage system establishes a trusted relationship with the authenticator device;

the file storage system receives a request to access the encrypted file from an access device;

the file storage system authenticates the request by determining that the access device has authority to access the encrypted file;

the file storage system provides a decryption key to the authenticator device when the access device has authority;

the file storage system provides the encrypted file to the access device;

the authenticator device transmits the decryption key to the access device; and

the access device decrypts the encrypted file using the decryption key received from the authenticator device.

16. The system of claim 15 , wherein establishing the trusted relationship comprises:

receiving authentication credentials from the authenticator device; and

verifying authenticity of the authentication credentials.

17. The system of claim 15 , wherein determining that the access device has authority to access the encrypted file comprises:

obtaining a hardware identifier of the access device; and

determining that the hardware identifier corresponds to a device with authorization to access the encrypted file.

18. The system of claim 15 , wherein the access device automatically deletes the decryption key after decrypting the encrypted file.

19. The system of claim 15 , wherein:

the authenticator device receives a password and uses the password to generate a time-varying password; and

the authenticator device double-encrypts the decryption key using the time-varying password prior to providing the decryption key to the access device.

20. The system of claim 15 , wherein transmitting the decryption key from the authenticator device to the access device comprises:

displaying the decryption key on the authenticator device in the form of a QR code; and

taking a picture of the QR code using the access device.