Dynamic OS Boot Partition Switching for Unauthorized Access Control

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing operating systems lack dynamic booting strategies that prevent unauthorized access and efficiently manage updates and services, particularly in devices with varying functionalities like IoT devices and automotive systems, where unauthorized access can disrupt critical functions.

Innovation Solution

Implementing a dynamic booting strategy using a boot manager that manages operating system partitions, creating and maintaining a data file with partition metadata to select and boot appropriate partitions based on client needs, including base and overlay file systems, and detecting unauthorized access or update requests to ensure secure and efficient operation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If a single operating system is installed to support multiple functionalities, then device versatility is improved, but security control over specific services deteriorates

Engineering Contradiction:

Improvedevice functionalityVSAvoidsecurity control

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent divides the operating system into multiple separate partitions, each containing specific services or functionalities. This segmentation allows the system to support multiple functions while maintaining security control by isolating services in distinct partitions that can be individually managed and protected.

Inventive Principle:

Principle #1Segmentation

2Reliability

If multiple operating system partitions are created to enhance security, then security control is improved, but system complexity deteriorates

Engineering Contradiction:

Improvesecurity controlVSAvoidpartition management

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent combines multiple operating system partitions into a unified file system structure where partitions are organized hierarchically under a common root. This merging approach maintains security through partition isolation while reducing management complexity by providing a single, integrated view of all partitions through the unified file system interface.

Inventive Principle:

Principle #5Merging (Combining)

3Reliability

If encrypted files are stored in overlay file system to protect data, then data security is improved, but access efficiency deteriorates

Engineering Contradiction:

Improvedata securityVSAvoidfile access speed

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The patent implements encryption at the file creation stage within the overlay file system, so that files are encrypted before being stored. This preliminary encryption action ensures data security without impacting access efficiency, as the encryption/decryption process is transparently handled by the file system interface during normal read/write operations.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS12423435B2Dynamic booting of operating system by designating first base boot partition as active boot partition responsive to detecting unauthorized attempt to access first encrypted file

Publication Date: 2025.09.23 RED HAT LLC

AI summary

Systems and methods include storing, in a first base boot partition, an image of a first base operating system; storing, in a first overlay boot partition, a first overlay file system comprising a first encrypted file; configuring the first overlay boot partition to boot the image of the first base operating system from the first base boot partition and install the first overlay filesystem; and responsive to detecting an attempt to access the first encrypted file, designating the first base boot partition as an active boot partition.