Card Rendering Process Isolation by Security Level
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional card rendering processes in mobile devices lack isolation between different security levels, leading to potential security vulnerabilities and data leakage due to shared rendering processes, which are susceptible to malicious attacks.
Innovation Solution
Implementing separate standalone rendering service processes for cards of different security levels to isolate data resource spaces, ensuring that cards with varying security levels are rendered independently, thereby enhancing application security and user experience.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a same rendering process is used for all cards, then device complexity is reduced and resource management is simplified, but security is compromised as cards of different security levels share the same process space
Solution Approach 1:
The patent segments the rendering process by creating multiple standalone rendering service processes, each dedicated to a specific security level. This segmentation isolates cards of different security levels into separate process spaces, preventing security breaches from propagating across all cards while maintaining manageable complexity through clear process boundaries and standardized inter-process communication protocols.
2Reliability
If separate standalone rendering service processes are used for cards of different security levels, then security is improved through process isolation, but device complexity increases due to multiple rendering processes
Solution Approach 1:
The patent applies universality by designing rendering service processes that, while separated by security levels, follow a unified architecture and interface standard. Each standalone rendering service process performs the same core rendering functions but operates within its own security context, allowing the system to maintain multiple processes without proportionally increasing complexity through standardized protocols and shared rendering engines.
3Productivity
If cards of different applications share the same rendering process, then resource utilization is improved, but security is weakened as malicious code in one application can affect other applications
Solution Approach 1:
The patent segments data resource spaces by assigning each security level its own isolated process memory space. This segmentation ensures that applications rendering cards at different security levels cannot access each other's data resources, preventing malicious code from compromising other applications while maintaining efficient resource utilization within each isolated process through dedicated rendering contexts and controlled inter-process communication.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
This application provides a card rendering method and an apparatus, and relates to the field of terminal technologies. In this application, security levels of all cards to be drawn can be classified according to a specific rule, and a same standalone card rendering service process is used to complete rendering and drawing of cards of a same security level, to completely isolate data resource spaces between cards of different security levels, and further improve application security. The method includes: An electronic device receives a first operation of creating a first card, where a security level of the first card is a first security level; drawing the first card by using a first rendering process; receiving a second operation of creating a second card, where a security level of the second card is a second security level; and drawing the second card by using a second rendering process, where the first rendering process and the second rendering process are independent of each other, and finally displaying the first card and the second card in an interface.