Access path redirection for encrypted files
Many users of information handling systems use applications to create, manage, and/or save files containing information. Encryption of the files secures the data against access by unintended recipients. Information handling systems may be designed to perform encryption in the background with minimal user input. For example, applications, application plug-ins, or operating system (OS) level system services may facilitate encryption and decryption of application files with minimal user input. Such applications, plugins, and services may allow applications to interact with encryption systems, such as virtual file systems, and may direct file save and access operations through the encryption systems, automatically encrypting and decrypting files selected by the user without exposing the user to cumbersome or confusing encryption options.
1. A method for accessing files on an information handling system, the method comprising:
requesting to access, by an application, a file through a first access path;
determining, in the application, that at least part of the file is encrypted;
determining, in the application, a second access path;
accessing, by the application, the file through the second access path, the second access path being through a decryption algorithm of a virtual file system;
detecting a file access indicator indicating the second access path; and
deleting the file access indicator.
2. The method of claim 1 , wherein the step of detecting a file access indicator comprises:
searching a system registry for the file access indicator; and
detecting the file access indicator in the system registry.
3. The method of claim 1 , wherein the step of detecting a file access indicator comprises:
searching an application list by the application for the file access indicator; and
detecting the file access indicator in the application list.
4. The method of claim 1 , further comprising:
replacing the file access indicator with a new file access indicator indicating the first access path.
5. The method of claim 1 , further comprising:
detecting a save request for saving the file to a first file save path;
detecting an encryption request in the save request; and
saving, by the application, the file to a second file save path, the second file save path being through an encryption algorithm of the virtual file system.
6. The method of claim 1 , wherein the step of determining that at least part of the file is encrypted comprises:
detecting an encryption indicator in a cover page of the file by the application.
7. A computer program product for implementation on an information handling system, comprising:
a non-transitory computer readable medium comprising code to perform steps comprising:
requesting to access, by an application, a file through a first access path;
determining, in the application, that at least part of the file is encrypted;
determining, in the application, a second access path;
accessing, by the application, the file through the second access path, the second access path being through a decryption algorithm of a virtual file system;
detecting a file access indicator indicating the second access path; and
deleting the file access indicator.
8. The computer program product of claim 7 , wherein the step of detecting a file access indicator comprises:
searching a system registry for the file access indicator; and
detecting the file access indicator in the system registry.
9. The computer program product of claim 7 , wherein the step of detecting a file access indicator comprises:
searching an application list by the application for the file access indicator; and
detecting the file access indicator in the application list.
10. The computer program product of claim 7 , wherein the non-transitory computer readable medium comprises code to perform steps further comprising:
replacing the file access indicator with a new file access indicator indicating the first access path.
11. The computer program product of claim 7 , wherein the non-transitory computer readable medium comprises code to perform steps further comprising:
detecting a save request for saving the file to a first file save path;
detecting an encryption request in the save request; and
saving the file to a second file save path, the second file save path being through an encryption algorithm of the virtual file system.
12. The method of claim 7 , wherein the step of determining that at least part of the file is encrypted comprises:
detecting an encryption indicator in a cover page of the file by the application.
13. A method for accessing files on an information handling system, the method comprising:
detecting, by an OS-level service, a file access request, from an application, for accessing a file through a first access path;
determining that at least part of the file is encrypted;
transmitting, to the application, a second access path, the second access path being an access path for the file through a decryption algorithm of a virtual file system;
decrypting the file for the application when the file is accessed through the second access path;
detecting a file access indicator indicating the second access path; and
deleting the file access indicator.
14. The method of claim 13 , wherein the step of detecting a file access indicator comprises:
searching a system registry for the file access indicator; and
detecting the file access indicator in the system registry.
15. The method of claim 13 , further comprising:
replacing the file access indicator with a new file access indicator indicating the first access path.
16. The method of claim 13 , further comprising:
detecting a save request, from the application, for saving the file to a first file save path;
detecting an encryption request in the save request;
transmitting, to the application, a second save path, the second save path being a save path for the file through an encryption algorithm of the virtual file system; and
encrypting the file for the application when the file is saved to the second save path.
17. The method of claim 13 , wherein the step of determining that at least part of the file is encrypted comprises:
searching a list of encrypted files; and
detecting a parameter indicating the file in the list of encrypted files.