An intelligent AES-based data protection framework using Shamir Secret Sharing for secure organizational file management

Abstract

The swift expansion of digital data exchange has heightened the demand for effective and distributed data protection strategies within organizational settings. Many current encryption systems depend on storing keys in a single location, which makes them susceptible to key breaches, unauthorized access, and insider threats. This research introduces the design and implementation of an intelligent algorithm based on the Advanced Encryption Standard (A.E.S.A), combined with Shamir’s Secret Sharing method for secure data protection. The proposed system allows users to securely upload files, which are encrypted using AES in EAX mode with keys generated through a password-based key derivation function. To prevent single-point key exposure, the encryption key is divided using Shamir’s threshold scheme and distributed among authorized users. Furthermore, an RSA-based digital signature mechanism is included to facilitate document authentication and signer verification. The system was developed using Python, JavaScript, HTML/CSS, and SQLite, and implemented through the PyCharm development environment. Experimental implementation shows that the system improves confidentiality, key security, and access control compared to traditional single-key storage methods. This solution is particularly beneficial for organizations that require collaborative yet secure file management. The study offers an integrated web-based cryptographic framework that enhances organizational data protection through distributed key management and multi-layer security mechanisms.