Memory Access Control for Multi-Security Network Data
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Information processing apparatuses struggle to manage data access from terminals on networks with varying security levels, as existing systems do not adequately differentiate and secure data based on the security level of the network path through which it was obtained.
Innovation Solution
The apparatus employs a dual-network interface system with a hardware processor that distinguishes between terminals from networks of different security levels, encrypting data from higher-security networks and restricting access to ensure secure data handling and transmission according to the network's security settings.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data from networks with different security levels is stored in the same memory area and accessed uniformly, then device complexity is reduced, but security is compromised
Solution Approach 1:
The memory is divided into multiple distinct storage areas, with each area designated for storing data from networks of specific security levels. This segmentation ensures that data from high-security networks is physically separated from data from low-security networks, preventing unauthorized access and mixing of data from different security zones while maintaining manageable complexity through structured organization.
Solution Approach 2:
Different security policies and access controls are applied to different memory areas based on the security level of the network from which the data originated. Each memory area has customized access permissions, encryption settings, and retrieval rules tailored to its specific security requirements, allowing the system to maintain high security for sensitive data while enabling easier access for less sensitive data.
2Reliability
If access control rules are implemented for each network security level, then data security is improved, but processing complexity increases
Solution Approach 1:
Access control rules, encryption settings, and security policies are pre-configured for each memory area corresponding to different network security levels. When data is stored in a memory area, the appropriate security measures are automatically applied in advance. This preliminary configuration eliminates the need for complex real-time decision-making during data retrieval, as the security parameters are already established and stored with the data.
3Reliability
If data from high-security networks is encrypted when stored, then security is enhanced, but data retrieval and processing time increases
Solution Approach 1:
Data from high-security networks is encrypted at the time of storage in the corresponding memory area, and decryption keys or authorization information are pre-configured and stored alongside the encrypted data. When authorized retrieval occurs, the system automatically applies the pre-configured decryption process, significantly reducing the time required compared to performing encryption/decryption operations in real-time during each access operation.
Data Source
AI summary
An information processing apparatus includes a first network interface configured to accept access from a terminal on a first network, a second network interface configured to accept access from a terminal on a second network, a hardware processor configured to process access from a terminal on the first network and a terminal on the second network, and a memory. The memory includes a first area configured to store data received from the terminal on the second network. The second network is higher in security level than the first network. Access to data stored in the first area from the terminal on the second network is permitted and access to data stored in the first area from the terminal on the first network is restricted.