Dynamic Memory Sandbox Allocation for External Device Isolation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing electronic devices lack an efficient method to manage and secure the allocation of memory areas when connecting to external devices, leading to potential data sharing and security issues between applications.

Innovation Solution

The electronic device allocates a second memory area upon detecting a connection with an external device, using a communication module to isolate and manage data sharing between applications, employing sandbox areas with user identifiers and tags for secure data processing.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Quantity of substance

If a single memory area is used for all applications, then memory utilization is high, but data security and isolation between applications deteriorate

Engineering Contradiction:
Improvememory utilizationVSAvoiddata security
Core Design Contradiction:
Quantity of substanceVSReliability

Solution Approach 1:

The memory is divided into multiple sandbox areas, each associated with a specific application. When an external device connects, a second sandbox area is allocated for that external device, separating it from the first sandbox area used by the host application. This segmentation ensures that each application and external device has its own isolated memory space, preventing unauthorized data sharing while maintaining efficient memory utilization through dynamic allocation.

Inventive Principle:
Principle #1Segmentation

2Reliability

If memory is dynamically allocated for external devices, then data isolation and security are improved, but device complexity increases

Engineering Contradiction:
Improvedata isolationVSAvoidmemory management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The memory allocation system dynamically adjusts the number and size of sandbox areas based on connection status. When an external device connects, a second sandbox area is created; when disconnected, it is released. The processor monitors connection states and automatically manages memory allocation, transforming a static memory structure into a dynamic one that adapts to changing requirements without manual intervention.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The system continuously monitors the connection status between the host device and external devices, using this feedback to determine when to allocate or release sandbox areas. The processor detects connection establishment or termination and automatically adjusts memory allocation accordingly, creating a closed-loop control system that maintains data isolation while optimizing memory resources.

Inventive Principle:
Principle #23Feedback

3Object-affected harmful factors

If sandbox areas are created for each external device, then security against unauthorized data sharing is improved, but loss of time for memory allocation increases

Engineering Contradiction:
Improveunauthorized data sharingVSAvoidmemory allocation time
Core Design Contradiction:
Object-affected harmful factorsVSLoss of time

Solution Approach 1:

The system prepares sandbox area templates and memory allocation structures in advance, so that when an external device connects, the actual allocation can be performed quickly by simply instantiating pre-configured structures. The framework for sandbox creation is established beforehand, reducing the time penalty associated with dynamic memory allocation during connection events.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS10158967B2Electronic device and method for providing function in electronic device
Publication Date: 2018.12.18 SAMSUNG ELECTRONICS CO LTD
  • US10158967B2 patent drawing
  • US10158967B2 patent drawing
  • US10158967B2 patent drawing

AI summary

An electronic device comprising: a memory including a first memory area associated with a first application; and at least one processor operatively coupled to the memory, configured to: detect that a connection is established between the electronic device and an external electronic device; and allocate a second memory area in the memory in response to detecting that the connection is established.