Dynamic Hardware Resource Policies for Mobile Malware Defense
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile electronic devices are vulnerable to malicious software (malware) that secretly accesses hardware resources, making detection difficult and compromising user privacy.
Innovation Solution
Implementing policies that govern hardware resource access based on operational modes and user input, using a daemon program to manage and update access permissions dynamically.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If hardware resources are made accessible to applications, then application functionality is improved, but security vulnerability to malware increases
Solution Approach 1:
The patent implements dynamic access control where hardware resource permissions are not static but change based on operational modes. The system transitions between different operational modes (e.g., locked/unlocked states) and adjusts hardware access permissions accordingly, allowing applications to access hardware resources only when appropriate security conditions are met. This resolves the contradiction by making the system adaptable to different security contexts while maintaining functionality.
Solution Approach 2:
The patent introduces an intermediary component (the operational mode manager or policy enforcement mechanism) that sits between applications and hardware resources. This intermediary evaluates security policies and operational modes before granting hardware access, acting as a mediator that balances application functionality needs with security requirements. The intermediary prevents direct unauthorized access while allowing legitimate access when policies permit.
2Reliability
If malware detection capabilities are enhanced, then security is improved, but detection difficulty remains due to secretive malware operations
Solution Approach 1:
The patent implements preliminary action by establishing security policies and operational mode frameworks before malware can execute harmful operations. The system pre-defines acceptable hardware access patterns and operational modes, so when malware attempts unauthorized access, it violates pre-established rules. This proactive approach makes malware detection easier by having baseline security expectations in place before attacks occur.
Solution Approach 2:
The patent implements feedback mechanisms where the system continuously monitors hardware access requests against defined policies and operational modes. When anomalies are detected (such as malware attempting access in inappropriate operational modes), the system provides feedback by logging, alerting, or blocking the suspicious activity. This continuous feedback loop enhances detection capability by comparing actual behavior against expected secure behavior patterns.
3Reliability
If user control over hardware access is increased, then security is improved, but system complexity increases
Solution Approach 1:
The patent applies segmentation by dividing hardware access control into distinct operational modes and policy categories. Instead of a monolithic access control system, the patent segments permissions into mode-specific rules (e.g., locked mode policies, unlocked mode policies). This segmentation simplifies the user interface and policy management by organizing complex access control into manageable, context-specific segments that are easier to understand and configure.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Embodiments provide methods and apparatuses to manage hardware resource access on a mobile device comprising detecting an attempt by the first application to access the first hardware resource when the application is executing in the background and determining that there is not a policy for the first application to access the first hardware, providing a notification requesting user input thereof, and adding a new policy accordingly.