Interface Module for Client Server Permission Inheritance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In mobile communication devices, the security context and permission rights of client and server application modules are not properly maintained, leading to potential security issues and compatibility challenges in client/server environments.
Innovation Solution
An interface module is introduced to facilitate proper permission checks by providing client and server process handles in the operating system's process base, allowing the operating system to verify permission settings for both client and server processes before processing requests, without modifying the existing client/server API protocol.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If an interface module is introduced to maintain permission settings for client/server processing, then security and compatibility are improved, but device complexity increases
Solution Approach 1:
An interface module is introduced as an intermediary component between the operating system and client/server application modules. This interface module maintains permission settings and process handles without requiring modifications to the existing client/server API protocol, thereby improving security while adding minimal complexity through a dedicated security management layer
2Reliability
If permission checks are implemented for client and server processes, then security is improved, but processing speed deteriorates
Solution Approach 1:
Permission settings and process handles are maintained and validated in advance by the interface module before client/server requests are processed. By performing permission checks preliminarily and maintaining the security context upfront, the actual request processing can proceed without repeated security validations, thus improving security while minimizing impact on processing speed
3Adaptability or versatility
If client/server modularity is maintained with permission inheritance, then adaptability is improved, but device complexity increases
Solution Approach 1:
The interface module implements a universal permission management mechanism that works across different client/server application modules through inheritance. This multi-functional approach allows the same interface module to handle permission settings for various applications, improving adaptability while managing complexity through code reusability and standardized interfaces
Data Source
AI summary
A communication device has memory for storing a client application module, a server application module, and an operating system module which are executable by one or more processors. The client application module submits a request and, in response, the server application module causes the request to be processed with use of the operating system module. One or more client process handles of a client stack of the client application module are provided in a current process base of the operating system module. For the request, one or more permission settings associated with the one or more client process handles as well as one or more permission settings associated with the one or more server process handles are checked.