Hypervisor-Based Client Authentication for Secure Mobile Data Recovery
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems fail to provide effective protection and recovery of sensitive data on computing devices, especially when they are lost, stolen, or outside secure environments, and lack centralized management and disaster readiness.
Innovation Solution
A centrally-managed data protection system using a thin layer of virtual machine and hypervisor technology for authentication, encryption, and real-time backup, enabling secure access control, disaster recovery, and communication between computing devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If data is stored on mobile computing devices outside secure environments, then accessibility and mobility are improved, but security and protection from unauthorized access deteriorate
Solution Approach 1:
The system segments data into protected and unprotected portions, with only authorized users able to access the protected segment. This allows mobile devices to maintain full data locally while securing sensitive portions through cryptographic segmentation and access controls.
Solution Approach 2:
The patent introduces an intermediary authentication server and encryption layer between the mobile device and unauthorized access points. This intermediary layer verifies user credentials and manages cryptographic keys, preventing direct unauthorized access to data on mobile devices.
2Reliability
If manual backup procedures are required for computing devices, then data recovery capability is improved, but user burden and time consumption increase
Solution Approach 1:
The system implements self-service automated backup where the computing device automatically synchronizes data with remote servers without user intervention. The device autonomously manages backup schedules, data selection, and transmission, eliminating the need for manual user actions while ensuring data recovery capability.
Solution Approach 2:
The system performs preliminary automated backups before data loss occurs, continuously synchronizing data to remote storage. This preliminary action ensures data is already protected and recoverable before any disaster or device failure happens.
3Object-affected harmful factors
If centralized management systems are implemented for computing devices, then security control and compliance are improved, but system complexity and resource requirements increase
Solution Approach 1:
The patent introduces an intermediary authentication server and encryption layer between the mobile device and unauthorized access points. This intermediary layer verifies user credentials and manages cryptographic keys, preventing direct unauthorized access to data on mobile devices.
Solution Approach 2:
The system implements a universal authentication server that handles multiple functions including user verification, cryptographic key management, and policy enforcement across diverse computing devices. This multi-functional approach consolidates complexity into a single centralized component rather than requiring separate systems for each function.
Data Source
AI summary
Methods and systems for performing an authenticated boot; performing a continuous data protection; performing automatic protection and optionally a consolidation; and performing other defenses and protection of a protected computing device (such as a computer system) are provided. The aspects include integrating security mechanisms (which may include a “call home” function, role and rule-based policies, validating technologies, encryption and decryption technologies, data compression technologies, protected and segmented boot technologies, and virtualization technologies. Booting and operating (either fully or in a restricted manner) are permitted only under a control of a specified role-set, rule-set, and/or a controlling supervisory process or server system(s). The methods and systems make advantageous use of hypervisors and other virtual machine monitors or managers.