Dual OS Architecture for Secure Data Transmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The security of data transmission and reception between electronic devices and external devices is inadequate, with existing solutions failing to adequately protect against malicious codes and data breaches due to vulnerabilities in open operating systems.
Innovation Solution
Implementing a dual-operating system approach, where a first operating system handles communication and a second secure operating system processes data transmission and reception using a designated key for encryption, ensuring secure data exchange between electronic devices and external servers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If an open operating system is used to enable various services and applications, then the ease of operation and adaptability are improved, but the security of data transmission and reception deteriorates
Solution Approach 1:
The patent segments the operating system into two distinct parts: a first operating system for providing user services and applications, and a second secure operating system for handling data transmission and reception. This segmentation allows each part to have specialized functions, with the secure OS dedicated solely to security-critical operations, thereby resolving the contradiction between ease of operation and security.
Solution Approach 2:
The second secure operating system acts as an intermediary between the first operating system and external devices. It mediates all data transmission and reception operations, providing a security layer that protects against vulnerabilities in the open first operating system while maintaining its functionality.
2Device complexity
If a single operating system handles both communication and data processing, then the device complexity is reduced, but the security of data transmission deteriorates
Solution Approach 1:
The patent divides the operating system into two separate systems with distinct responsibilities. The first OS handles communication and user services, while the second secure OS handles data transmission and reception. This segmentation increases structural complexity but eliminates security vulnerabilities by isolating security-critical functions.
Solution Approach 2:
The patent applies different quality characteristics to different parts of the system. The first operating system is designed for ease of use and service provision, while the second operating system is designed specifically for security and reliability. Each part has optimized properties suitable for its specific function.
3Reliability
If encryption is implemented using a secure operating system, then the security of transmitted data is improved, but the device complexity increases
Solution Approach 1:
The patent extracts the encryption and security processing functions from the main operating system and places them in a separate second secure operating system. This extraction concentrates security functions in a dedicated environment, improving security while managing complexity through functional separation.
Solution Approach 2:
The second secure operating system serves as an intermediary that handles all encryption and decryption operations. It mediates between the first operating system's data processing needs and the security requirements, providing a centralized security layer that manages complexity.
Data Source
AI summary
Various embodiments relating to an electronic device are described, and according to an embodiment, the electronic device may comprise a communication module which performs wireless communication; at least one processor which is electrically connected to the communication module; and a memory which stores instructions which cause at least one processor to receive or transmit data via communication with an external electronic device using the communication module on the basis of a first operating system and to process the received data or data to be transmitted to the external electronic device using a designated key on the basis of a second operating system, at the time of execution thereof.