Dynamic Access Control for Information Processing Apparatus
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing access control technologies for control systems lack flexibility in determining whether to perform access checks, often relying on whether a program is executed within a sandbox or not, which limits the ability to enforce access control policies effectively.
Innovation Solution
An information processing apparatus that includes an access detector and a determiner to assess the necessity of access checks based on position information and data ranges, using methods such as environment activation detection, process relationship determination, and path conversion to dynamically decide on access control policies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If whitelist type execution control technology is used to take security measures, then security reliability is improved, but software update capability deteriorates
Solution Approach 1:
The patent implements dynamic access control by determining whether to execute access control based on real-time analysis of process relationships and environment activation states. The system dynamically adjusts access control policies without requiring software updates, resolving the contradiction between security reliability and adaptability.
2Reliability
If sandbox technology is used to isolate unreliable programs, then security reliability is improved, but access control flexibility deteriorates
Solution Approach 1:
The system dynamically determines access control execution based on environment activation detection and process relationship analysis. Instead of static sandbox isolation, the system adaptively applies access control only when necessary, achieving both security reliability and access control flexibility.
Solution Approach 2:
The patent changes the parameter of access control execution from a fixed binary state (sandboxed/not sandboxed) to a dynamic state determined by environment activation and process relationships. This allows flexible access control while maintaining security.
3Ease of operation
If access control is determined based on sandbox execution status, then implementation simplicity is improved, but access control flexibility deteriorates
Solution Approach 1:
The system performs preliminary detection of environment activation and process relationships before determining access control execution. This preliminary analysis enables flexible access control decisions while maintaining implementation simplicity through automated detection mechanisms.
Data Source
AI summary
According to one embodiment, an information processing apparatus includes: an access detector configured to detect an access request for target data; and a determiner configured to determine necessity of checking information indicating whether access to the target data is permitted, based on position information on the target data, and on a data range to be checked.