Cross-Subsystem Shared Memory Channels With Security-Level Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data communication systems in complex software environments like aviation, autonomous driving, and robotics face challenges in implementing high-security and high-performance data transmission between subsystems with different information security levels.
Innovation Solution
A data transmission method involving authentication processes and shared memory channels is employed to ensure secure and efficient communication between subsystems, using channel allocation and authentication mechanisms to establish shared memory channels between applications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authentication mechanisms are implemented between subsystems with different information security levels, then security is improved, but communication complexity increases
Solution Approach 1:
The system segments authentication processes by creating separate authentication processes for different security levels (first authentication process for first security level, second authentication process for second security level). Each authentication process handles authentication requests appropriate to its security level, preventing unauthorized cross-level access while maintaining organized authentication management.
Solution Approach 2:
The shared memory channel acts as an intermediary mechanism between authentication processes and applications. It provides a controlled interface for passing authentication requests and responses between different security levels without requiring direct application-to-application communication, thereby simplifying the overall communication architecture.
2Productivity
If shared memory channels are established for data communication between subsystems, then communication performance is improved, but security risks increase
Solution Approach 1:
Authentication is performed in advance before establishing shared memory channels for data communication. The authentication process validates the identity and authorization of applications before they gain access to shared memory channels, ensuring that only authenticated applications can establish high-performance communication paths.
Solution Approach 2:
Different security measures are applied to different shared memory channels based on the security levels of the communicating subsystems. First shared memory channels (for first security level) and second shared memory channels (for second security level) are created with appropriate security characteristics, allowing high performance where security requirements are met while maintaining appropriate security restrictions.
3Reliability
If multiple authentication processes are used for different security levels, then security control is improved, but system complexity increases
Solution Approach 1:
Multiple authentication processes are designed to perform similar authentication functions but adapted to different security levels. The first authentication process and second authentication process both handle authentication requests, validate identities, and manage shared memory channel creation, but with different security level requirements. This modular approach allows security control to be improved while keeping the system manageable through functional consistency.
Data Source
Figure 1
Figure 2~3
Figure 4~5
AI summary
A data transmission method and apparatus, a vehicle, and a device are provided, relating to the field of communication technologies, to implement data transmission between different subsystems. For example, a first subsystem includes a first authentication process and a first application, and a second subsystem includes a second authentication process and a second application. The method includes: The first application sends request information to the second authentication process, where the request information is for requesting to communicate with the second application; the second authentication process performs authentication on the first application based on the received request information, and allocates channel information for communication between the first application and the second application after authentication succeeds, where the channel information indicates a shared memory channel for communication between the first application and the second application; the second authentication process sends the channel information to the first application and the second application; and the first application and the second application establish the shared memory channel based on the channel information, and communicate with each other through the shared memory channel.