DAR System Kernel Segmentation for Root Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In computing environments, particularly those with root or administrative access, protecting sensitive material from unauthorized viewing or copying is challenging without imposing performance penalties or significant inconvenience, especially when unauthorized users have substantial control over the system.
Innovation Solution
The Defense Against Root (DAR) system modifies the operating system to limit access to sensitive material by intercepting and controlling system function calls, denying unauthorized access, and providing secure communication links through 'angel' processes, ensuring only authorized users can access the material while maintaining system performance and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional access control mechanisms are used to protect sensitive material, then unauthorized access can be prevented, but root level users can still access and compromise the protected material
Solution Approach 1:
The patent segments the operating system kernel into multiple modules with distinct security responsibilities. A security module is separated from the main kernel functionality, allowing independent verification and enforcement of access controls that cannot be bypassed by root users. This modular architecture enables the security module to operate as an independent authority that root privileges cannot override.
Solution Approach 2:
The patent introduces an intermediary security module that sits between user processes (including root) and the protected sensitive material. This intermediary intercepts and filters all access requests, applying security policies that cannot be circumvented by standard root privileges. The intermediary acts as a gatekeeper that mediates all interactions with protected resources.
2Reliability
If strict access controls are implemented to prevent unauthorized access, then security is improved, but system performance deteriorates due to additional verification overhead
Solution Approach 1:
The patent implements preliminary action by pre-establishing security policies and access rules in the security module before any access requests occur. The module pre-loads authentication credentials and security configurations, so that during runtime, access decisions can be made through efficient policy matching rather than complex real-time verification. This reduces the performance overhead of access control checks.
Solution Approach 2:
The patent changes parameters by implementing a security architecture where the security module operates with elevated privileges that are systematically granted once, rather than requiring repeated privilege escalation checks. The system transforms access control from a series of expensive individual verification operations into a single authoritative security context establishment, reducing ongoing performance overhead.
3Reliability
If root level access is restricted to protect sensitive material, then security is improved, but ease of operation deteriorates due to limited administrative control
Solution Approach 1:
The patent implements dynamics by making the security enforcement mechanism adaptable and configurable through approved administrative interfaces. The security module can dynamically adjust its behavior based on approved policies, allowing administrators to manage and update security configurations without compromising the fundamental protection against unauthorized root access. This dynamic capability maintains ease of operation while preserving security.
Solution Approach 2:
The patent incorporates feedback mechanisms that allow administrators to monitor and control the security module through approved interfaces. The system provides feedback about security events, access decisions, and system state to authorized administrators, enabling them to manage the system effectively. This feedback loop maintains administrative control and ease of operation while the security module continues to enforce protection against unauthorized root access.
Data Source
AI summary
A method is disclosed for securing sensitive material on a computer system comprising a network of computers from unauthorized access by a root level user of the computer system, the method including the steps of: limiting access to the sensitive material to one or more authorized users; controlling the operation of one or more system functions to prevent unauthorized access to the sensitive material.