Channel Manager for Mandatory Access Control in Message-Based OS
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Message-based operating systems face security vulnerabilities due to inadequate enforcement of mandatory access control, particularly in the communication of messages between system resources over unprotected channels, leading to potential security breaches.
Innovation Solution
Implementing a channel manager within the message-based operating system to identify processes and communication channels, apply access rules based on a channel policy, and control access to ensure mandatory access control, thereby protecting communication channels and enforcing security policies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If mandatory access control is implemented in message-based operating systems, then security of communication channels is improved, but system complexity increases due to additional access control mechanisms
Solution Approach 1:
The patent introduces an access control manager as an intermediary component that mediates between processes and communication channels. This manager enforces mandatory access control policies by intercepting and validating access requests, thereby improving security without requiring complex modifications to the underlying message-passing infrastructure. The intermediary handles the complexity of access control enforcement centrally, keeping the rest of the system simple.
2Reliability
If access control rules are applied to all communication channels, then security enforcement is improved, but processing overhead increases due to continuous validation requirements
Solution Approach 1:
The patent implements preliminary action by pre-configuring access control policies and validating access rights before communication operations occur. The access control manager establishes security rules in advance and performs validation checks prior to message transmission, rather than continuously during communication. This approach ensures security enforcement while minimizing processing overhead during actual message passing operations.
3Adaptability or versatility
If label-based access control is implemented, then flexibility in security policy management is improved, but difficulty in detecting and measuring access violations increases due to label propagation complexity
Solution Approach 1:
The patent implements feedback mechanisms that monitor label propagation and access control decisions throughout the system. The access control manager tracks label assignments and propagations, providing feedback information about access control states and potential violations. This feedback system enables the detection of access violations despite the complexity of label propagation, maintaining both flexibility and detectability.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Systems and methods for enforcing label-based mandatory access control are provided. A first label may be assigned to a resource. An event associated with a resource may be detected. The resource may be relabeled, in response to detection of the event, from a first label to a second label in accordance with a transition rule. The transition rule may be included in a security policy. The transition rule may indicate that the resource is to be relabeled to the second label if the event is detected. Access to the resource may be controlled according to an access rule in the security policy. The access rule may be applicable to the resource based on the access rule identifying the second label assigned to the resource.