The safety of your documents is very important to us. In order to improve the protection of your data, fileee is introducing a new encryption method. This article will provide an overview of how fileee encrypts your documents.
1. Why does fileee have a new encryption?
We want to provide a comprehensive service and the best possible product. At the same time, fileee must be as safe as possible, because your sensitive data belongs only to you. The nature of the internet and cloud based services makes it extremely difficult to protect data 100% of the time. Everyone should have encryption on their smart devices.
Our new encryption methods offer the best level of safety without restricting you in accessing and managing your information. fileee does need access to some of your data in order to analyze it and to provide our full service, but only on a temporary basis. In part three of this article, you will learn about how the upload and analysis work.
Your documents and the data they contain are pretty extensive. Our encryption must be efficient to ensure quick access and easy handling. In this process, we take measures to be certain only you have access to your uploaded documents. Once documents are uploaded and analyzed, fileee’s developers do not have access to your scans and recognized texts. We want to fulfill your high safety expectations and are constantly working to improve safety standards and methods.
2. Encryption – How does this work?
What is a hybrid encryption?
fileee has developed an innovative encryption based on standardized procedures, a so-called hybrid encryption. This method enables us to protect your documents beyond customary encryption methods. A hybrid encryption means a combination of an asymmetrical and a symmetrical encryption. In the following, we will explain all of these three versions to simplify the technical terms.
What is symmetrical encryption?
With symmetrical encryption, the same secret keys will be used to encrypt or decrypt information.
Advantages & Disadvantages:
Symmetrical encryption promises quick processing when dealing with huge amounts of data. However, the danger exists that outsiders gain access to the secret key, and as a result of this, to your documents.
What is asymmetrical encryption?
Asymmetrical encryption includes two keys: a private one, which is only accessible to you, and a public one, which you provide for the receiver. The receiver himself owns a pair of keys, comprising a private key and a public one, which is accessible to you. If you send some data to the receiver, you use his public key to encrypt your data, and he uses his private key to decrypt it. If he sends you some data, it will be protected from external access. To decrypt the data, you use your private key.
Advantages & Disadvantages:
Asymmetrical encryption is more secure than symmetrical encryption, since outsiders have more difficulties to intercept your private data. On the other hand, the asymmetrical encryption needs more computing capacity and is thus slower than the symmetrical encryption.
How does a hybrid encryption work?
As already mentioned, a hybrid encryption is a combination out of both symmetrical and asymmetrical encryption. Hybrid encryption works in two steps. At first, your data has to be encrypted. This is going to happen by means of symmetrical encryption. To protect the symmetrical key from unauthorized access, the system then starts with the asymmetrical encryption. Only the owner of the private key (you) is able to access the symmetrical key. In the following, we will explain to you how this works with fileee and how you can profit from that.
3. How hybrid encryption works with fileee
When you create your fileee account, you automatically get your secret pair of keys (a private and a public one). You are the only one who can use the private key, since it is protected by your personal password. The public one is used by fileee.
Every uploaded document gets a user-specific, symmetrical key. With the help of this key, your documents, the recognized texts and the miniature picture of your scans will be encrypted. The symmetrical key will then be asymmetrically encrypted by the public key.
Your private key is used to encrypt the symmetrical key. Afterwards, it is possible for the symmetrical key to encrypt your documents. Only you can do this, either when you are logged in with your password or when your smartphone sends you a request.
Why is a hybrid encryption the better option?
Your documents and the information they contain are of significant size. That’s why we need a quick encryption, as we want to make an easy handling of your documents possible. Therefore, a symmetrical encryption of your data is a good choice. If the symmetrical key (that protects your data) is encrypted asymmetrically, the encryption will work as quickly as always.
Password protected – what does this mean for you?
Your private key is protected by your personal password. You are the only one who knows this password. If you lose it, all of your data and documents will be gone. For a short period of time after registration, fileee users can reset their password. Part of this process involves saving a copy of your private key. After a short period of initial usage, you select from two options for managing your password. The first is to keep the possibility of resetting your password. fileee retains a copy of your private key. The second option provides a very high degree of security. With this option, fileee does not maintain a copy of the private security key; if you misplace your password, it cannot be reset and no one can access your documents.
4. What does fileee do during the different processes?
fileee allows you to take different actions with your documents. You can upload, view, change or share them. How does fileee protect your documents during these processes?
Upload and analyze
When you upload a document, you first scan it. fileee analyzes your document and highlights the important information. But what happens in the background?
First, a symmetrical key is created, which is used to encrypt your documents. fileee needs a copy of your key to complete the document analysis. This key copy and fileee’s access to your documents are only temporary. As part of the analysis, your document is encrypted. Once completed, the copy of your private key is destroyed. fileee no longer has access to your documents. But what about the results of the analysis? Those are stored on our servers so that you can search for the information contained in your documents.
Have access to your own document
If you want to view your uploaded documents, your private key encrypts the symmetrical key. Then, your documents are encrypted with the symmetrical key. In general, you should avoid browser settings such as “save password” or “remember me”, because anyone who has the password to your fileee account will be able to access your documents.
Share a document with others
If you want to share your private documents with others, you have two options. You can share them publicly by releasing a link from fileee, or you can share your documents with another fileee user. In both scenarios, the symmetrical key is encrypted for a second time. If you share your documents publicly, fileee generates a link. In combination with this link, a second public key is created, which helps to encrypt the symmetrical key. If you share your document with another fileee user, fileee creates a copy of the symmetrical key and shares it with the other user. This copy is encrypted with the private key of this other user.
We are always working on new security measures for your documents’ safety! Do you have any questions or ideas? Don’t hesitate to contact us here: firstname.lastname@example.org.