Selective Inter-Process Communication Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for rendering multimedia content on user devices, such as mobile communication devices, fail to adequately protect inter-process communications from malicious applications, leading to vulnerabilities in data eavesdropping and unauthorized data access.
Innovation Solution
A system and method for securing inter-process communications (IPC) on user devices, which includes a software module with an application programming interface (API) that allows low-level processes to selectively encrypt messages between trusted processes, using a unique key generation and replay attack protection mechanisms, without altering existing IPC mechanisms.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If all messages between low-level processes are encrypted, then security against eavesdropping is improved, but resource usage and system complexity increase significantly
Solution Approach 1:
The patent applies selective encryption where only specific messages containing sensitive data are encrypted, rather than all messages. The encryption is applied locally to individual messages based on their sensitivity, allowing the system to maintain security for critical communications while avoiding the overhead of encrypting every message, thus reducing overall system complexity and resource consumption.
Solution Approach 2:
The patent segments the communication stream into encrypted and unencrypted portions based on message sensitivity. By dividing messages into sensitive and non-sensitive categories and applying encryption only to the necessary segments, the system achieves targeted security protection while minimizing the performance impact and complexity associated with full-message encryption.
2Reliability
If encryption is applied to all inter-process communications, then data protection is improved, but processing speed and performance deteriorate
Solution Approach 1:
The patent implements partial encryption by applying encryption only to messages that contain sensitive data rather than all messages. This partial action approach ensures that data protection is maintained for critical communications while avoiding the performance penalty of encrypting every message, thus preserving processing speed for non-sensitive communications.
Solution Approach 2:
The patent dynamically changes the encryption parameter (whether to encrypt) based on the sensitivity of each message. By adjusting this parameter according to message content and importance, the system optimizes the balance between data protection and processing speed, encrypting only when necessary and leaving other messages unencrypted to maintain high throughput.
3Reliability
If existing IPC mechanisms are modified to add security features, then security is improved, but compatibility and platform independence are reduced
Solution Approach 1:
The patent introduces an intermediary security module that sits between the application layer and the existing IPC mechanisms. This intermediary handles encryption and decryption operations without modifying the underlying IPC infrastructure, thereby maintaining platform independence and compatibility while adding security features. The existing IPC mechanisms remain unchanged, allowing the system to work across different platforms.
4Reliability
If comprehensive security measures are implemented, then protection against malicious applications is improved, but resource consumption increases
Solution Approach 1:
The patent applies security measures locally to only those messages that require protection, rather than implementing comprehensive security on all communications. This localized approach provides adequate protection against malicious applications for sensitive data while consuming fewer computational resources and energy compared to universal encryption of all inter-process communications.
Data Source
AI summary
A user device provides a mechanism for securing messages communicated between trusted processes along an established Inter-Process Communication (IPC) channel. The mechanism permits the trusted processes to determine which messages to protect, and executes independently of platform-dependent IPC mechanisms.