Methods and systems of encrypting file system directories

1. A method of encrypting directories of a file system on an electronic device, the method comprising:

by a processor:

receiving, from a process running on an electronic device, a request to access a directory entry of a file system;

identifying a user who is logged into the electronic device;

determining whether the user has access to a directory encryption key associated with the directory entry, and

in response to determining that the user does not have access to the directory encryption key:

identifying an encrypted file name stored in the directory entry, wherein the encrypted file name comprises an encrypted user-domain file name,

determining whether the encrypted file name complies with one or more naming rules,

in response to determining that the encrypted file name does not comply with one or more naming rules, applying one or more functions to a file name associated with the encrypted file name to generate an encoded encrypted file name that complies with the one or more naming rules and an access hash value for the directory entry,

storing the access hash value in a directory indexing structure such that it is associated with the directory entry, and

causing the encoded encrypted file name to be displayed via a user interface of the electronic device as a representation of the directory entry.

2. The method of claim 1 , wherein determining whether the encrypted file name complies with one or more naming rules comprises determining whether a length of the encrypted file name exceeds a threshold value.

3. The method of claim 1 , wherein the file system comprises an EXT4 file system.

4. The method of claim 1 , wherein identifying a user who is logged into the electronic device comprises accessing an electronic record of a user who is logged into the electronic device that is stored on the electronic device.

5. The method of claim 1 , wherein determining whether the user has access to a directory encryption key associated with the directory entry comprises accessing an electronic record to determine whether the directory entry was created by the user.

6. The method of claim 1 , wherein applying one or more functions to a file name associated with the encrypted file name to generate an encoded encrypted file name comprises:

applying a cryptographic hash to the file name to generate a first value; and

encoding the first value.

7. The method of claim 1 , wherein applying one or more functions to a file name associated with the encrypted file name to generate an encoded encrypted file name comprises:

applying a hash function to the file name to generate a first value;

concatenating the first value and at least a portion of the file name.

8. A system of encrypting directories of a file system on an electronic device, the system comprising:

an electronic device; and

a non-transitory computer-readable storage medium comprising one or more programming instructions that are configured to instruct the electronic device to:

receive, from a process running on an electronic device, a request to access a directory entry of a file system,

identify a user who is logged into the electronic device,

determine whether the user has access to a directory encryption key associated with the directory entry, and

in response to determining that the user does not have access to the directory encryption key:

identify an encrypted file name stored in the directory entry, wherein the encrypted file name comprises an encrypted user-domain file name,

determine whether the encrypted file name complies with one or more naming rules,

in response to determining that the encrypted file name does not comply with one or more naming rules, apply one or more functions to a file name associated with the encrypted file name to generate an encoded encrypted file name that complies with the one or more naming rules and an access hash value for the directory entry,

storing the access hash value in a directory indexing structure such that it is associated with the directory entry, and

cause the encoded encrypted file name to be displayed via a user interface of the electronic device as a representation of the directory entry.

9. The system of claim 8 , wherein the one or more programming instructions that are configured to instruct the electronic device to determine whether the encrypted file name complies with one or more naming rules comprise one or more programming instructions that are configured to instruct the electronic device to determine whether a length of the encrypted file name exceeds a threshold value.

10. The system of claim 8 , wherein the one or more programming instructions that are configured to instruct the electronic device to determine whether the user has access to a directory encryption key associated with the directory entry comprise one or more programming instructions that are configured to instruct the electronic device to access an electronic record to determine whether the directory entry was created by the user.

11. The system of claim 8 , wherein the one or more programming instructions that are configured to instruct the electronic device to apply one or more functions to a file name associated with the encrypted file name to generate an encoded encrypted file name comprise one or more programming instructions that are configured to instruct the electronic device to:

apply a cryptographic hash to the file name to generate a first value; and

encode the first value.

12. The system of claim 8 , wherein the one or more programming instructions that are configured to instruct the electronic device to apply one or more functions to a file name associated with the encrypted file name to generate an encoded encrypted file name comprise one or more programming instructions that are configured to instruct the electronic device to:

apply a hash function to the file name to generate a first value;

concatenate the first value and at least a portion of the file name.

13. The method of claim 1 , wherein:

receiving a request to access a directory entry of a file system comprises receiving an argument representing a file name,

applying one or more functions to a file name associated with the encrypted file name to generate an encoded encrypted file name that complies with the one or more naming rules and an access hash value for the directory entry comprises:

generating the access hash value using the argument,

using the access hash value to identify the file from the directory indexing structure, and

causing an operation to be performed on the identified file.

14. The system of claim 8 , wherein:

the one or more programming instructions that are configured to instruct the electronic device to receive a request to access a directory entry of a file system comprise one or more programming instructions that are configured to instruct the electronic device to receive an argument representing a file name of a file,

the one or more programming instructions that are configured to instruct the electronic device to apply one or more functions to a file name associated with the encrypted file name to generate an encoded encrypted file name that complies with the one or more naming rules and an access hash value for the directory entry comprise one or more programming instructions that are configured to instruct the electronic device to:

generate the access hash value using the argument,

use the access hash value to identify the file from the directory indexing structure, and

cause an operation to be performed on the identified file.