Applet Security Manager Selective Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current processor systems cannot selectively apply security measures to individual elements or areas of applets, making it difficult to differentiate between security-critical and non-critical code parts, thus failing to provide adequate protection against side-channel and fault attacks.
Innovation Solution
A processor system with a security manager and registry that allows for the targeted application of security measures to specific applet elements through applet element references, enabling differentiated security treatments for critical and non-critical elements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security measures are applied to entire applets, then protection against attacks is provided, but unnecessary security measures are applied to non-critical components increasing overhead
Solution Approach 1:
The patent segments the applet into individual elements (classes, methods, fields) and applies security measures selectively to specific elements rather than to the entire applet. This is achieved through element-specific security settings that reference particular applet elements, allowing critical elements to receive security measures while non-critical elements do not, thereby reducing unnecessary security overhead.
Solution Approach 2:
The patent implements local quality by allowing different security measures to be applied to different elements within the same applet. Each applet element can have its own security settings that reference specific security measures, enabling critical elements to have enhanced protection while non-critical elements have minimal or no security overhead.
2Reliability
If security measures are applied to all applet code, then comprehensive protection is achieved, but performance is reduced due to unnecessary security processing
Solution Approach 1:
The patent divides the applet into executable elements and identifies which elements are security-critical. Security measures are applied only to these identified critical elements during execution, while non-critical elements execute without security overhead, thereby maintaining high performance for the majority of code while providing comprehensive protection where needed.
Solution Approach 2:
The patent applies security measures partially rather than excessively to all code. By identifying and applying security measures only to the specific critical elements that require protection, the system achieves adequate security coverage without the performance penalty of applying security measures to all applet code.
3Ease of operation
If the operating system applies security measures to entire applets, then security management is simplified, but selective protection of critical elements is not possible
Solution Approach 1:
The patent introduces a security manager as an intermediary between the operating system and applet elements. The security manager processes element-specific security settings, resolves references to security measures, and applies the appropriate security measures to specific elements. This intermediary enables fine-grained control while maintaining ease of operation through automated management.
Solution Approach 2:
The patent enables self-service by allowing the security manager to automatically manage the application of security measures based on element-specific security settings. The system automatically identifies which elements require security measures and applies them without requiring manual intervention, combining automated ease of operation with selective adaptability.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The invention provides a processor system, a method for loading an applet, and a method for executing an applet in a processor system, wherein selective security settings are applied to elements of an applet.