Dynamic Access Permission Control for Secure Mode Resources
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In data processing devices, the secure mode domain and non-secure mode domain separation poses challenges in allowing high-priority applications to access resources efficiently, particularly when urgent processes require access to secure resources, as the permission level is typically set to 'secure', making it difficult for non-secure mode domains to utilize secure mode resources.
Innovation Solution
A method and apparatus that determine the access permission level for resources and change it to allow high-priority applications to access secure mode resources from the non-secure mode domain if the priority requires processing within a certain threshold, enabling urgent tasks to be completed by processing the request in the non-secure mode domain.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the access permission level is set to 'secure' to protect resources from unauthorized access, then security is improved, but non-secure mode applications cannot access the resource even when urgent processing is needed
Solution Approach 1:
The access permission level is changed from a static setting to a dynamic one that can be adjusted based on application priority. When a high-priority application requests access to a secure resource, the system temporarily changes the permission level to allow access, then restores it afterward. This dynamic adjustment resolves the contradiction by maintaining security for normal operations while enabling efficient access when urgent processing is needed.
Solution Approach 2:
The system changes the parameter of access permission level based on the priority parameter of the application. By monitoring application priority and adjusting the permission level parameter accordingly, the system allows high-priority non-secure applications to access secure resources when necessary, while maintaining the secure permission level for regular operations. This parameter-based control resolves the contradiction between security and access efficiency.
2Reliability
If the processor separates secure mode domain and non-secure mode domain to reinforce security, then security is improved, but resources in secure mode cannot be efficiently utilized by non-secure mode applications
Solution Approach 1:
The system introduces dynamic control over domain access permissions based on application priority. While the secure and non-secure mode domains remain separated for security, the permission boundaries become flexible when high-priority applications require access. This dynamic boundary adjustment maintains the dual-mode architecture's security benefits while improving resource accessibility when needed.
Solution Approach 2:
The system introduces a mediation mechanism that monitors application priority and controls access requests between secure and non-secure domains. This intermediary function allows the processor to maintain strict domain separation for security while providing controlled access pathways for high-priority applications, thus improving resource accessibility without compromising the fundamental security architecture.
3Reliability
If the permission level to a resource is maintained as 'secure' to prevent unauthorized access, then security is improved, but urgent high-priority processes in non-secure mode cannot access the resource within required time thresholds
Solution Approach 1:
The system performs preliminary assessment of application priority before access requests are blocked. By evaluating the priority level and urgency requirements in advance, the system can proactively adjust permission levels to allow high-priority applications to access secure resources without delay, while maintaining security for lower-priority operations. This preliminary action prevents unnecessary access delays for urgent processes.
Solution Approach 2:
The permission level is made dynamic and responsive to real-time application priority and urgency requirements. When a high-priority application with time-critical processing needs requests access, the system dynamically adjusts the permission level to allow immediate access, then restores the secure setting afterward. This dynamic response eliminates processing delays for urgent tasks while maintaining security for normal operations.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method and an apparatus for executing applications in a highest-priority-first order in the processor divided into a secure mode area and a non-secure mode area are provided. The method includes receiving a request to be processed in the non-secure mode domain from the application, determining an access permission level configured to a resource used for processing the request, determining, when the access permission level allows for access from the secure mode domain, a priority of the application, changing the access permission level to allow for access by the non-secure mode domain according to the priority of the application, and processing the request of the application using the resource in the non-secure mode domain.