Question

does anybody know of a secure ‘read-once’ local file access system? Or how one might create one? I realise that if data is to be used on a system, then it must be capable of being read, but I think it may be possible to severely limit how data is made available and reduce the possibility of it being copied and used elsewhere.

These are my requirements:

I want to store a ‘secure/encrypted’ data-file on a USB stick (could be read-only CD/DVD, but better if read/write USB or even a floppy) and have this file capable of being read once (and mainly only once), on a decoded block-by-block basis, once a password has been entered. The file content is probably basic text/xml (or text-encoded data) and is to be read mainly as a sequential stream. The data (ideally) can be read by normal windows file-access methods, ie: a std file, FSO objects (stream and text file), all BASIC PC (VB6/VB.NET) file handling methods, even Excel text (import). yes, I know this probably defeats the object (as such a file can then be opened/saved), but I would still want this possibility. Finally, once the ‘access’ criteria had been met, the device would prevent further access.

Access to the data would be on a local PC system only. No LAN, no device sharing supported. Data on the device should not be copyable by normal means. Data would be written to the device using normal methods if possible or a special application if necessary.

To keep things simple, just one password, one file, one use, and one user would be great, but other possible enhancements include: (as icing on the cake)…

• allowing ‘n’ opens
• having multiple passwords 2 or more users, acting individually
• silo-passwords, having 2 more users sign together to get access (or even
  having at least n from m more users sign together to get access)
• Password prompt should be given on first block-access, independent of
  application calling the first block
• Password could be embedded/automatic
• tie the access to a nominated machine/mac/ip/disk serial number (or
  other machine-code)
• tie the access to a nominated program /application
• if possible, delete and securely overwrite the data file

My first guess at doing this suggests that it would need a ‘psuedo-device’ driver that would appear as an extention to (or replacement of) the std removable-device driver. The driver would handle each file block, sector by sector, and refuse to server further decoded blocks if not authorised. The device should not give normal directory listings, but some some form of content summary may be given to a user (optional).

Unlike a DRM system, I don’t want any form of on-line acces/authentication (but would consider it), I would prefer a self-contained system.

I have looked long and hard for a such a device/system, and haven’t found one yet. Most devices and system tools (eg: Iomega/ironkey) appear to unlock access to files, but without limit, ie: read-many, once unlocked.

Performance is not an issue. Slow floppy read-rate would be okay. Encyption method is agnostic, anything reasonably strong 40bit+ (128bit) would be fine. I can’t tell you what the data is or whats its for, I just need a way to give data to somebody and limit its use as far as possible and what they can do with it. Its a real requirement to protect confidential data and not meant for DRM or MP3s/Videos or similar.

I am an ‘office’ developer and not really familiar with device-drivers or DRM – Now where would I start with such a project? Is there anything out-there available to joe-public already?

Thanks – Tim.

PS: Update

I should point out that I just wish to pass data between ourselves and a single specific nominated service-provider. I don’t want them to copy the data we provide. It will be used once to support a ‘singular’ one-off process and then be done-with. As the data is ‘streamed/read’ it should be ‘consumed’. if the process fails, we will re-issue the data to the service-provider. the data remains our property, it is not being sold/licensed.

I do realise that no solution will be foolproof, but the risk/reward ratio should dissuade casual attempts to break the system. The data has no explicit commercial value.

PPS: Its a real requirement… What would you do?

Judging by the upvotes on @eriksons thoughtful answer, you guys are saying ‘not possible / don’t bother’ – but apart from personally supervising that the data is used according to our wishes, what would you do?

Answer 1

There are several problems with your approach.

1. If you can read the data from any application, you can safe the data anywhere. I would think this would defeat the purpose of any ‘only-one-access’ policy.
2. To get a device driver to handle your scenario, you would need deep knowledge of file-system-programming, which at least under windows is no easy undertaking. Even then, it would be hard to enforce the one time access prerequisite.
3. Programs have different file-access strategies, which might break your assumptions. E.g. an application may open a file once to get its size, then close and reopen it, to load its data. How should this be enforced? Do you want to limit ‘OpenFile’ calls? do you want to limit ‘read byte’ calls? Do you want to limit … jumping around in the file?
4. When your medium gets copied, by whatever means, you have no way of knowing that. The games industry tries to bind the game to the original CD for years, but failed miserably for years.

I think, what would be feasible, would be a container format, with a encoder/decoder, or something like that. (See Bitlocker in Windows7) That would guarantee, that you can only decode the data once to a local disc and would then delete the container on your medium (beware, check first if the medium is writable, and bind the container to an serial-number or name of the medium so that the container cannot be copied).

Another possibility would be a separate USB device, which you can only use once to extract the data from it. Then you would only need to write a driver once in user mode with WinUSB. Encrypted USB-Sticks use this approach.

But I really think this is a bad idea, because you can very easily get around any counter measurement, when the receiving person can read all data from the medium and safe it anywhere else.