Isolated Application Ransomware Mitigation via Trust-Based Token Intermediary
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing isolated computing arrangements face security vulnerabilities despite isolation barriers, as malicious code like ransomware can encrypt user data stored in host environments, forcing users to pay ransoms to regain access.
Innovation Solution
A system that enables access to resources in a secured manner by assigning a trust level to token requests from applications in isolated environments, generating authorization tokens with trust indications, and performing precautionary actions like creating backups before granting access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If isolation barriers are strengthened to prevent malicious code from accessing host resources, then security is improved, but integration between isolated applications and host environment deteriorates
Solution Approach 1:
The patent introduces an intermediary authentication and authorization system that mediates between isolated applications and host resources. This intermediary layer evaluates authentication tokens and authorization decisions before allowing access, enabling secure integration without direct access between isolated and host environments. The intermediary resolves the contradiction by providing controlled access channels that maintain security while enabling necessary integration.
2Adaptability or versatility
If access to host resources is allowed for applications in isolated environments, then integration is improved, but security vulnerabilities increase
Solution Approach 1:
The patent implements preliminary authentication and authorization actions before allowing access to host resources. Applications must first obtain authentication tokens and undergo authorization evaluation by the intermediary system before accessing any host resources. This preliminary action ensures that only verified and authorized applications can access resources, preventing security vulnerabilities while maintaining integration capabilities.
3Ease of operation
If authentication tokens are issued without trust level verification, then ease of operation is improved, but security is worsened
Solution Approach 1:
The patent implements a feedback mechanism where the intermediary system continuously monitors and evaluates authentication tokens and authorization requests. The system provides feedback by verifying trust levels and making authorization decisions based on the evaluated tokens. This feedback loop maintains security by detecting and preventing unauthorized access while keeping the authentication process simple for users through automated verification.
Data Source
AI summary
Methods, systems, apparatuses, and computer program products are provided for enabling access to a resource in a secured manner. A token request from an application executing in a first computing environment may be received in a second computing environment. The second computing environment may assign a trust level to the received token request that indicates that the first computing environment may not be trusted. The token request, along with the trust level, may be provided to an authorization server to generate an authorization token that includes a trust indication indicative of the trust level of the second computing environment. When the application executing in the second computing environment transmits the authorization token to a resource manager to access a resource, the resource manager may be configured to perform a precautionary action to protect the resource prior to providing access, such as creating a backup of the resource.