Secure File Sharing in Modern Browsers: Implementing End-to-End Encryption and User-Centric Access Control Mechanisms

Abstract

In the age of using technology to work together remotely, the inability to share files in a secure manner is a problem often faced since many online sharing options available do not have good protection on their sharing options and do not safeguard against unauthorized use of the files. This paper presents a secure file sharing portal that has end to end encryption and user-based access controls and that works inside a web browser. The system uses the Web Crypto API interface to provide local encryption on the user’s devices using the AES-GCM encryption algorithm, so that the user’s plaintext documents do not leave the device. A separate layer of protection exists in the system. It is not enough for a user to just receive the encrypted file. The user has to receive a decryption key that the sender has to share through a separate channel. Access is for members only which requires sender approval and we have features like secure QR code share, session monitoring, digital certificates for identity proof and policy enforcement for compliance. Also, we have a "Secure Space" module which is for ephemeral work groups that has in space chat, multi user invites, controlled key exchange and one click revocation which in turn puts power back in the users’ hands. We combined zero knowledge structure with audit able workflows to present a privacy first, scalable and easy to use solution. Also, we show how we used modern web tech to create a trusted setting for sensitive file share which at the same time does not sacrifice ease of use or performance.