Anti-Trust Security Zone for Untrusted Code Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing prevalence of data network-capable electronic devices has led to sophisticated attacks and the rapid proliferation of malware, causing unintended consequences for users and network service providers, with security loopholes like JavaScript injection posing risks to device operation.
Innovation Solution
An electronic device with a trusted security zone manager that creates an anti-trusted-security-zone to isolate and manage non-trusted applications, restricting their access to device resources, alerting users to potential threats, and requiring permission for resource access, while moving non-malicious applications to a normal zone and deleting malicious ones.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If non-trusted applications are allowed to execute freely in the normal zone, then user experience and application functionality are maintained, but device security and resource protection are compromised
Solution Approach 1:
The system segments the execution environment into multiple zones: a trusted security zone for critical resources and an anti-trusted security zone for untrusted applications. This segmentation allows non-trusted applications to execute with restricted access to specific device resources, maintaining security while preserving functionality. The trusted security zone manager enforces zone boundaries and controls resource access permissions.
Solution Approach 2:
The anti-trusted security zone acts as an intermediary layer between untrusted applications and the trusted security zone. This intermediate execution environment provides necessary device resources to applications while preventing direct access to protected resources in the trusted zone, thus maintaining both application functionality and device security.
2Adaptability or versatility
If JavaScript execution is enabled in the web browser, then user experience richness is improved, but vulnerability to JavaScript injection attacks increases
Solution Approach 1:
Dynamically downloaded JavaScript code is executed within the anti-trusted security zone, which serves as an intermediary execution environment. This zone provides the JavaScript engine necessary for rich web browsing experience while enforcing strict access controls that prevent JavaScript from accessing protected device resources, thus mitigating injection attack risks.
Solution Approach 2:
The system applies different security qualities to different execution contexts: the anti-trusted security zone provides a permissive environment for JavaScript execution with local resource access, while maintaining strict isolation from global device resources. This local quality approach enables rich web functionality without exposing the entire device to JavaScript vulnerabilities.
Data Source
AI summary
An electronic device. The device comprises an anti-trusted-security-zone in the trusted security zone that, when installed and managed by the trusted security zone manager, places non-trusted applications into the anti-trusted-security-zone for execution, restricts access of the non-trusted applications to at least some resources of the electronic device outside the anti-trusted-security-zone, alerts the user when the non-trusted application inside the anti-trusted-security-zone desires access to any restricted resource of the electronic device outside the anti-trusted-security-zone, asks the user for permission to access the desired resource outside the anti-trusted-security-zone, grants access for the non-trusted application to requested resources outside the anti-trusted-security-zone upon the permission by the user, moves the applications from the anti-trusted-security-zone to the normal zone that are determined not to be malicious, keeps the applications within the anti-trusted-security-zone that do not need to execute outside the anti-trusted-security-zone, and deletes the applications that are determined to be malicious.