Emulating transparent file encryption
Transparent file processing is supported in Unix-like operating systems by emulating the desired file processing through a number of recipes that accommodate different contexts. Recipes are provided, for example, for local folders in user space, for whole devices (e.g., flash drives or network drives), and for folders synchronized to cloud data. By detecting the path type for a file operation and selecting and applying the appropriate recipe, file processing can be performed in a manner transparent to the user.
1. A method for emulating transparent file encryption, the method comprising:
receiving a file operation for a file, the file operation being a user-space file operation specifying a label for a volume and a path specifying a unique location in a synchronized folder of encrypted files on a cloud-based file synchronization service;
creating a secure directory using a secure mount point process at a new location adjacent to the unique location;
marking the unique location as hidden using a file system folder attribute;
using a new label for the new location and renaming the new location to the unique location;
redirecting access to the unique location to the new location, thereby providing a new label for accessing the unique location; and
executing the file operation on the file using the new label to transparently apply a recipe that encrypts the file when the file is moved to the synchronized folder by the file operation and decrypts the file when the file is moved from the synchronized folder by the file operation.
2. The method of claim 1 wherein the recipe compresses the file when the file is moved to the path by the file operation and decompresses the file when the file is moved from the path by the file operation.
3. The method of claim 1 wherein redirecting includes applying a redirection through an application programming interface of a file browser.
4. The method of claim 1 wherein redirecting includes applying a redirection with a scripting interface of a file browser.
5. The method of claim 1 wherein the file operation includes one of a move, copy, or paste operation.
6. The method of claim 1 wherein the unique location comprises a special property.
7. The method of claim 6 wherein the special property comprises at least one of an encrypted folder, a compressed folder and a privileged folder.
8. A computer program product comprising computer executable code embodied in a nontransitory computer readable medium that, when executing on one or more computing devices, performs the steps of:
receiving a file operation for a file, the file operation being a user-space file operation specifying a label for a volume and a path specifying a unique location in a synchronized folder of encrypted files on a cloud-based file synchronization service;
creating a secure directory using a secure mount point process at a new location adjacent to the unique location;
marking the unique location as hidden using a file system folder attribute;
using a new label for the new location and renaming the new location to the unique location;
redirecting access to the unique location to the new location, thereby providing a new label for accessing the unique location; and
executing the file operation on the file using the new label to transparently apply a recipe that encrypts the file when the file is moved to the synchronized folder by the file operation and decrypts the file when the file is moved from the synchronized folder by the file operation.
9. The computer program product of claim 8 wherein the recipe compresses the file when the file is moved to the path by the file operation and decompresses the file when the file is moved from the path by the file operation.
10. The computer program product of claim 8 wherein redirecting includes applying a redirection through an application programming interface of a file browser.
11. The computer program product of claim 8 wherein redirecting includes applying a redirection with a scripting interface of a file browser.
12. The computer program product of claim 8 wherein the file operation includes one of a move, copy, or paste operation.
13. The computer program product of claim 8 wherein the unique location comprises a special property.
14. The computer program product of claim 13 wherein the special property comprises at least one of an encrypted folder, compressed folder and a privileged folder.
15. A system comprising:
a memory storing a data set comprising market data, the market data describing transaction volumes of a plurality of products, each product being characterized by a plurality of attributes having corresponding values;
a processor configured to:
receive a file operation for a file, the file operation being a user-space file operation specifying a label for a volume and a path specifying a unique location in a synchronized folder of encrypted files on a cloud-based file synchronization service;
create a secure directory using a secure mount point process at a new location adjacent to the unique location;
mark the unique location as hidden using a file system folder attribute;
use a new label for the new location and renaming the new location to the unique location;
redirect access to the unique location to the new location, thereby providing a new label for accessing the unique location; and
execute the file operation on the file using the new label to transparently apply a recipe that encrypts the file when the file is moved to the synchronized folder by the file operation and decrypts the file when the file is moved from the synchronized folder by the file operation.
16. The system of claim 15 wherein the recipe compresses the file when the file is moved to the path by the file operation and decompresses the file when the file is moved from the path by the file operation.
17. The system of claim 15 wherein the processor is configured to redirect access by applying a redirection through an application programming interface of a file browser.
18. The system of claim 15 wherein the processor is configured to redirect access by applying a redirection with a scripting interface of a file browser.
19. The system of claim 15 wherein the unique location comprises a special property.
20. The system of claim 19 wherein the special property comprises at least one of an encrypted folder, a compressed folder and a privileged folder.