Container-Based Image Encryption for Secure Display
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security measures for protecting sensitive information on intelligent terminals, such as disabling screen capture and recording functions, are not sufficient as malware can still intercept keyboard input or steal information from the framebuffer, and the use of TrustZone technology limits graphics support and dynamic layout capabilities.
Innovation Solution
A method involving two containers, where the first container renders and encrypts image data and sends encrypted data to a second container for secure display, ensuring that even if malware accesses the encrypted data, it cannot decrypt it, and the second container can display the encrypted data without needing to re-layout the page, thus enhancing security without restricting image display functions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If access permission is set to disable screen capture and recording functions, then security protection is improved, but the solution becomes vulnerable once malware breaks through permission restriction
Solution Approach 1:
The patent introduces an encryption layer as an intermediary between the display content and the screen capture function. The encryption manager encrypts the image data before it reaches the display buffer, and the decryption manager handles authorized decryption. This intermediary encryption mechanism ensures that even if malware accesses the buffer, it cannot obtain readable sensitive information without the decryption key.
Solution Approach 2:
The patent changes the state of image data from plaintext to encrypted form before display. By transforming the parameter state of the image data (from readable to encrypted), the system maintains security even when traditional permission controls are bypassed. The encryption/decryption process dynamically changes the parameter state based on authorization.
2Reliability
If TrustZone technology is used to divide processor into normal world and secure world, then security of sensitive information is improved, but graphics support capability is weakened
Solution Approach 1:
The patent segments the security functions into two independent managers: an encryption manager in the normal world (Android system) and a decryption manager in the secure world (TrustZone). This segmentation allows each manager to operate independently with specialized functions, enabling the system to maintain both high security and full graphics support capabilities without the limitations of TrustZone's simplified hardware.
Solution Approach 2:
The encryption manager in the normal world provides universal encryption services for all types of image data, supporting various graphics formats and dynamic layouts. The decryption manager in the secure world universally handles authorized decryption requests. This multi-functional design allows the system to support all graphics applications while maintaining security, overcoming the limited graphics support of traditional TrustZone implementations.
3Reliability
If security hardware is used to display sensitive information, then security is improved, but image display function is restricted
Solution Approach 1:
The encryption layer acts as an intermediary that preserves the normal image display pipeline while adding security. Instead of using specialized security hardware that restricts display functions, the patent uses software-based encryption/decryption managers that work with the existing graphics system, maintaining full image display functionality including dynamic layouts and various graphics formats.
Solution Approach 2:
The patent replaces the mechanical security hardware approach with a software-based encryption system. Instead of relying on specialized security hardware that limits graphics capabilities, the system uses encryption algorithms and software managers to provide security, thereby substituting a flexible software mechanism for a rigid hardware solution and preserving full image display functionality.
Data Source
Figure 1a
Figure 1b
Figure 2
AI summary
Embodiments of this application disclose a display method, an apparatus, and a storage medium. The method specifically includes: rendering, by a first container, a to-be-displayed page to generate to-be-displayed image data, and encrypting the image data; and writing, by the first container, encrypted image data into a buffer corresponding to the first container, and sending instruction information to a second container of a terminal, where the instruction information is used to instruct the second container to securely display the encrypted image data. Therefore, malware in the first container cannot decrypt the encrypted image data after obtaining the encrypted image data. Because the containers are isolated from each other, the malware in the first container cannot access the image data displayed in the second container, and the second container securely displays the encrypted image data, which is different from the prior art in which a simplified operating system in a TEE is required to re-lay out the to-be-displayed page before display. In this way, security of displaying the image data can be improved while ensuring that an image display function is not restricted.