Clipboard Protection System for DRM Data Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In a Digital Rights Management (DRM) environment, data stored in a clipboard can leak when accessed by unreliable objects, leading to security issues and unexpected program shutdowns, as existing encryption methods do not effectively block access to encrypted data.
Innovation Solution
A clipboard protection system that changes identification information and encrypts data stored in the clipboard for reliable objects, using a control unit to manage and decrypt data accessed by reliable objects, while blocking access by unreliable objects through a clipboard management system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If encrypted data is provided to unreliable objects that request clipboard data, then clipboard functionality is maintained, but data leakage occurs and unexpected program shutdowns occur
Solution Approach 1:
The patent introduces a clipboard protection system as an intermediary component between the clipboard management system and applications. This mediator intercepts clipboard operations, identifies whether accessing objects are reliable (DRM-protected) or unreliable, and selectively provides or blocks data accordingly. The protection system acts as a gatekeeper that maintains clipboard functionality for authorized applications while preventing data leakage to unauthorized ones, thereby resolving the contradiction between operational ease and data security.
Solution Approach 2:
The patent applies different access control policies to different objects based on their reliability characteristics. Reliable objects (those with DRM protection) receive encrypted clipboard data, while unreliable objects are blocked from accessing such data. This local differentiation of access rights based on object properties allows the system to maintain clipboard functionality where appropriate while enforcing security where needed, resolving the contradiction between universal accessibility and selective security.
2Reliability
If all clipboard data is encrypted to prevent leakage, then data security is improved, but clipboard functionality is disrupted
Solution Approach 1:
The patent segments clipboard data into different types: encrypted data for protected applications and unencrypted data for general use. The clipboard protection system selectively applies encryption based on the requesting application's reliability status. This segmentation allows encrypted data to be protected while unencrypted data maintains full clipboard functionality, resolving the contradiction between comprehensive security and operational ease.
Solution Approach 2:
The patent implements dynamic encryption where the encryption state of clipboard data changes based on the requesting object's properties. When a reliable object requests data, encrypted data is provided; when an unreliable object requests data, access is blocked or unencrypted data is provided. This dynamic adaptation of security measures based on real-time conditions allows the system to maintain both security and functionality as needed.
Data Source
AI summary
Disclosed are a clipboard protection system in a DRM environment and a recording medium in which a program for executing the method in a computer is recorded. An identification information management unit changes first identification information of data, which is to be stored in a clipboard, into second identification information when data stored in the clipboard is requested by a reliable object, and outputs the second identification information corresponding to identification information of the reading target data if the reliable object requests extraction of the data stored in the clipboard. A data protection unit encodes the data, which is to be stored in the clipboard, and decodes the encoded data which is read from the clipboard. If the extraction request for the data stored in the clipboard is inputted from the reliable object, a control unit delivers to a clipboard management system the second identification information corresponding to the identification information of the reading target data, and requests the encoded security data to be read and provided from the clipboard. According to the present invention, the access to the security data by a non-reliable object can be blocked.