Formula-Driven Programming Environment for Secure Network Node Execution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Networked devices, such as smart utility meters, often have limited CPU, memory, or storage resources, which can be compromised by rogue or unbounded programs, preventing them from fully utilizing their computational abilities due to legal, fiscal, or security considerations.
Innovation Solution
A formula-driven programming environment is introduced that provides a secure 'sandbox' for executing applications, limiting program instructions to a defined set of instructions and memory region, supporting variable management, network communications, and data access, while preventing resource exhaustion and network flooding.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If networked nodes run applications on multi-tasking operating systems to utilize computational ability, then productivity increases, but reliability deteriorates due to security risks and potential compromise of legally or fiscally relevant functionality
Solution Approach 1:
The system segments the node's operational environment into distinct virtual machines, each isolated from others. Applications run in one virtual machine while legally or fiscally relevant functionality operates in another, preventing cross-contamination and security compromises while maintaining full computational utilization.
Solution Approach 2:
A virtualization layer acts as an intermediary between applications and the underlying hardware/resources. This intermediary enables secure isolation, allowing applications to access computational resources without direct access to sensitive functionality, thus maintaining both productivity and reliability.
2Reliability
If nodes are restricted to prevent security risks, then reliability improves, but productivity deteriorates due to limited computational utilization
Solution Approach 1:
By segmenting the system into isolated virtual machines, the invention allows nodes to run multiple applications simultaneously in controlled environments while maintaining strict separation from sensitive functionality. This enables full computational utilization without compromising security or reliability.
Data Source
Figure 1
Figure 2
Figure 3A~3B
AI summary
A formula-driven programming-environment is described, which may be used to provide an environment for applications to operate within a network node or other computing device. In one example, statements of a program may be interpreted to thereby execute formula-style commands within an address space defined and constrained in a memory device by the integrated development environment. The commands may obtain data, assign values to variables and access data from other node(s) by the interpretation of statements in the program and communicating over a network. The communicating may include queuing a message for transmission by the formula-driven programming-environment. The commands may provide named access or relative access to data in response to the interpretation of statements in the program. The commands may communicate with at least one application located on a remote computing device in response to the interpretation of statements in the program.