Kernel Relational Database for Secure Data Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional kernel programs lack robust security measures for protecting data stored in storage devices, particularly in the context of increasing network connectivity and the vulnerability of file systems to unauthorized access, especially for personal information.
Innovation Solution
A kernel program that operates without a file system, utilizing a relational database and a device driver to manage data, along with an access controller and authenticator to encrypt and authenticate commands, ensuring secure data storage and access control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a conventional file system is used in the kernel program, then data can be stored and accessed efficiently, but security vulnerabilities arise allowing unauthorized access to all files under the root directory
Solution Approach 1:
The patent extracts the file system component from the kernel program, eliminating it entirely. Instead of using a traditional file system structure, the invention uses a database management system at the application level to handle data storage and retrieval, thereby removing the security vulnerabilities inherent in conventional file systems while maintaining data access functionality
Solution Approach 2:
The patent introduces a database management system as an intermediary between the application program and the storage device. This intermediary layer provides structured data management with built-in security mechanisms, replacing the direct file system access and enabling controlled data access without exposing the underlying storage structure
2Reliability
If application-level security is implemented to protect files, then data confidentiality can be maintained, but the operation quantity and processing overhead increase extremely
Solution Approach 1:
The patent implements self-service security mechanisms within the database management system itself. The DBMS inherently provides authentication, authorization, and data protection features without requiring additional application-level security code. This eliminates the need for complex application-level security implementations while maintaining data confidentiality and reducing processing overhead
3Productivity
If the kernel program is simplified to execute processes at higher speed, then processing efficiency improves, but security authentication capabilities become insufficient
Solution Approach 1:
The patent segments the security functionality from the kernel program and places it within the database management system at the application level. This segmentation allows the kernel to remain simple and fast for core operations, while the DBMS handles authentication and security checks independently, ensuring both processing efficiency and robust security validation
Data Source
AI summary
Provided is a kernel program and so on capable of enhancing the confidentiality of data memorized in a storage device without using a file system on an OS kernel level. The kernel program is mounted on a computer operable to input and output data between an application program and a storage device, and causes the computer to function as: a socket establisher establishing a socket for connecting with the application program; a relational database operable to input and output data from/to the storage device through a device driver; and an access controller inputting a command from the application program through a message structure of the socket then to output the command to the relational database and inputting an execution result from the relational database then to output the execution result through a message structure of the socket to the application program.