Hybrid Communication Stack for Open-to-Secure Data Transmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data processing devices with open and secure modules face challenges in ensuring secure data transmission while maintaining the open module's functionality and security, as standard protocols are vulnerable to fraudulent data or commands from malicious applications.
Innovation Solution
Implementing a hybrid communication stack with specialized data transmission components connecting layers 3 and 4 of the OSI model, including a session management component and a specialized data transmission component, to check and authorize data transmission between the open and secure modules, using a hybrid communication stack with additional filtering and deletion components.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If standard communication protocols (TCP/IP, OSI architecture) are used for data transmission between open and secure modules, then communication compatibility and ease of operation are improved, but security is worsened due to vulnerability to fraudulent data from malicious applications
Solution Approach 1:
The patent introduces a specialized data transmission component as an intermediary layer between the open module and secure module. This component sits between the standard TCP/IP stack and the secure module interface, acting as a mediator that filters and validates data packets. It allows standard protocols to continue operating while blocking fraudulent data before it reaches the secure module, thus resolving the contradiction between communication compatibility and security.
Solution Approach 2:
The patent segments the data transmission path into distinct layers: the standard OSI/TCP/IP protocol stack for general communication, and a specialized secure transmission component for protected data exchange. This segmentation allows the system to maintain standard protocol compatibility while creating a separate secure channel that prevents fraudulent data from compromising the secure module.
2Adaptability or versatility
If the open module is designed with high openness and modularity to allow numerous applications, then adaptability and ease of operation are improved, but security is worsened due to potential malicious applications affecting secure data
Solution Approach 1:
The specialized data transmission component serves as a protective intermediary between the open application layer and the secure module. It monitors and filters data packets originating from applications in the open module, blocking those that exhibit fraudulent patterns or attempt to access protected functions. This allows the open module to maintain its full application ecosystem while preventing malicious applications from compromising security.
Solution Approach 2:
The system implements preliminary security validation in the specialized transmission component before data reaches the secure module. By pre-screening data packets for fraudulent characteristics and blocking potentially harmful transmissions in advance, the system prevents malicious applications from executing their harmful intent, thus resolving the contradiction between application openness and security protection.
3Reliability
If certification of standard libraries is implemented to ensure security, then security is improved, but cost and device complexity are worsened due to expensive and uncertain certification processes
Solution Approach 1:
Instead of relying on expensive certification of standard libraries, the patent introduces a specialized data transmission component as an intermediary that provides security through active monitoring and filtering. This component validates data packets in real-time based on security criteria, achieving reliable security protection without requiring costly certification processes or adding significant complexity to the existing standard protocol stack.
Data Source
AI summary
A method for transmitting data between a first electronic module including a general-purpose processor and a second electronic module including a secure processor, the two modules being combined in an electronic device, the first module executing a first operating system and the second module executing a second operating system, the modules each including a hybrid communication stack including, alongside components of layers 3 and 4 of the OSI model, a specialised data transmission component (ITP), connecting layers 3 and 4 of the OSI model.