Self destructing portable encrypted data containers

A system for secure file system elements, the system comprising:

• a processor;
• a memory, the memory communicatively coupled to the processor and comprising instructions, which when executed by the processor, cause the system to perform operations comprising:
• receiving through a Graphical User Interface (GUI) a selection of a set of one or more file system elements available for downloading from a network based file storage system;
• sending the selection of the set of one or more file system elements to the network based file storage system;
• receiving an encrypted file system element container and a cryptographic key, the encrypted file system element container comprising the set of one or more file system elements and encrypted such that the cryptographic key decrypts the encrypted file system element container;
• storing the encrypted file system element container and the cryptographic key, the cryptographic key having a key validity time period that specifies when the cryptographic key is to be deleted;
• determining a time-to-live (TTL) of the encrypted file system element container from information received from the network based file storage system, the TTL specifying when the encrypted file system element container is to be deleted, the TTL larger than the key validity time period;
• providing access to a file system element in the encrypted file system element container through a viewer application by decrypting a copy of the encrypted file system element container stored in volatile storage with the cryptographic key, responsive to a user selection;
• identifying, after providing access, that the validity time period of the cryptographic key has expired, and in response:
• deleting the cryptographic key, but retaining the file system element container;
• requesting a new cryptographic key from the network based file storage system;
• and
• receiving the new cryptographic key;
• providing a second access to the file system element in the encrypted file system element container through the viewer application by decrypting a copy of the encrypted file system element container stored in volatile storage with the new cryptographic key, responsive to a second user selection;
• identifying after the second access to the file system element that the TTL has expired;
• and
• responsive to expiry of the TTL, deleting the encrypted file system element container.

A non-transitory computer readable storage medium comprising instructions, which when executed by a computing device, cause the computing device to perform operations comprising:

• receiving through a Graphical User Interface (GUI) a selection of a set of one or more file system elements available for downloading from a network based file storage system;
• sending the selection of the set of one or more file system elements to the network based file storage system;
• receiving an encrypted file system element container and a cryptographic key, the encrypted file system element container comprising the set of one or more file system elements and encrypted such that the cryptographic key decrypts the encrypted file system element container;
• storing the encrypted file system element container and the cryptographic key, the cryptographic key having a key validity time period that specifies when the cryptographic key is to be deleted;
• determining a time-to-live (TTL) of the encrypted file system element container from information received from the network based file storage system, the TTL specifying when the encrypted file system element container is to be deleted, the TTL larger than the key validity time period;
• providing access to a file system element in the encrypted file system element container through a viewer application by decrypting a copy of the encrypted file system element container stored in volatile storage with the cryptographic key, responsive to a user selection;
• identifying, after providing access, that the validity time period of the cryptographic key has expired, and in response:
• deleting the cryptographic key, but retaining the file system element container;
• requesting a new cryptographic key from the network based file storage system;
• and
• receiving the new cryptographic key;
• providing a second access to the file system element in the encrypted file system element container through the viewer application by decrypting a copy of the encrypted file system element container stored in volatile storage with the new cryptographic key, responsive to a second user selection;
• identifying after the second access to the file system element that the TTL has expired;
• and
• responsive to expiry of the TTL, deleting the encrypted file system element container.