Agent-Based Storage Protection Against Unauthorized Modifications

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current role-based access control (RBAC) techniques in information processing systems are vulnerable to attacks such as password theft and session hijacking, necessitating improved methods for protecting devices from unauthorized operations.

Innovation Solution

Implementing an agent-based system that monitors a protected storage region for changes by comparing its content with a backup, notifying users of detected changes, and allowing users to approve or reject these changes, with automatic restoration of the backup content to the protected region if unauthorized changes are detected.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If role-based access control (RBAC) techniques are used to restrict access to devices, then access security is improved, but the system becomes vulnerable to attacks such as password theft and session hijacking

Engineering Contradiction:

Improveaccess securityVSAvoidvulnerability to attacks

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent creates a backup storage region and stores backup content before any unauthorized changes can occur. This preliminary action establishes a safe state that can be restored if attacks such as password theft or session hijacking compromise the protected storage region, thereby resolving the vulnerability to attacks while maintaining access security.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent creates a copy of the protected storage region content and stores it in a separate backup storage region. This copying mechanism allows the system to restore the original content if unauthorized changes occur due to security breaches, effectively counteracting the harmful effects of attacks while preserving the access control security model.

Inventive Principle:

Principle #26Copying

2Reliability

If the content of the protected storage region is monitored for changes, then detection of unauthorized operations is improved, but system complexity increases

Engineering Contradiction:

Improvedetection of unauthorized operationsVSAvoidmonitoring system complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent replaces complex continuous monitoring mechanisms with a simpler comparison approach: hashing the content of the protected storage region and comparing it with the hash of the backup storage region. This substitution reduces system complexity while maintaining reliable detection of unauthorized operations.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The patent transforms the monitoring problem from comparing entire content sets to comparing hash values of the content. This parameter change simplifies the monitoring process significantly, as hashing converts complex content data into fixed-size values that are efficient to compute and compare, thereby reducing system complexity while preserving detection capability.

Inventive Principle:

Principle #35Parameter changes

3Reliability

If automated actions are initiated responsive to detected changes, then protection from malicious operations is improved, but false positives from erroneous operations may increase

Engineering Contradiction:

Improveprotection from malicious operationsVSAvoidfalse positives from erroneous operations

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent implements a feedback mechanism where users are notified of detected changes and can approve or reject them. This feedback loop allows legitimate erroneous operations to be approved while blocking malicious operations, thereby reducing false positives while maintaining strong protection. The system learns from user decisions to improve its operation.

Inventive Principle:

Principle #23Feedback

Data Source

PatentUS20240273191A1Agent-based device protection using detection and mitigation of modifications to a protected storage region

Publication Date: 2024.08.15 DELL PROD LP

AI summary

Techniques are provided for device protection using agent-based detection and mitigation of modifications to a protected storage region. One method comprises obtaining an indication of a protected storage region of a storage device; storing content of the protected storage region in a backup storage region of the storage device; monitoring, by a software entity associated with an operating system of a processing device, the protected storage region to detect changes in the protected storage region; and initiating an action responsive to the detected changes in the content of the protected storage region. The action may comprise (i) notifying a user of the detected changes; (ii) restoring the content of the backup storage region to the protected storage region when the detected changes were not approved; and (iii) storing the content of the protected storage region in the backup storage region when the detected changes were approved.