Mobile Data Flow Policy Enforcement via Access Interceptor
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile devices are vulnerable to malicious software applications that can exfiltrate sensitive information, and users may unintentionally reveal private data due to lack of technical savvy or carelessness, with existing security measures failing to effectively enforce data flow policies and prevent conflicts of interest between data objects.
Innovation Solution
A data flow policy evaluation system for mobile computing devices that includes a system call monitor and a data flow policy engine to associate security labels with data objects and processes, preventing system calls that violate data flow policies by intercepting and analyzing system calls, and enforcing policies to prevent conflicts of interest.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security-wrapped software applications are used to protect data, then data confidentiality is improved, but device complexity increases due to system call monitoring and policy enforcement mechanisms
Solution Approach 1:
The patent introduces an access interceptor as an intermediary component that sits between applications and the operating system kernel. This interceptor monitors and controls data access requests, implementing security policies without requiring complex modifications to the core OS or application code. The interceptor acts as a mediator that enforces data flow policies by intercepting system calls and preventing unauthorized access to sensitive data.
Solution Approach 2:
The security system is segmented into distinct functional components: security-wrapped applications, access interceptors, and data flow policy engines. Each component has a specific responsibility - applications generate data access requests, interceptors monitor and filter these requests, and policy engines enforce security rules. This segmentation allows the system to maintain data confidentiality while managing complexity through modular architecture.
2Reliability
If data flow policy enforcement is implemented to prevent malicious data exfiltration, then security against malicious applications is improved, but ease of operation deteriorates due to restricted application functionality
Solution Approach 1:
The data flow policy system is designed to be dynamic rather than static. Security policies are enforced in real-time based on the actual data access patterns and context of each application. The system adapts its enforcement actions depending on whether an application is legitimate or malicious, allowing legitimate applications to function normally while blocking malicious data exfiltration attempts. This dynamic approach maintains ease of operation for authorized applications while providing strong security enforcement.
3Measurement precision
If system calls are monitored to detect policy violations, then detection precision is improved, but processing time increases due to continuous monitoring overhead
Solution Approach 1:
The system performs preliminary actions by pre-configuring data flow policies and security labels before data access operations occur. Security-sensitive data objects are pre-labeled with appropriate security classifications, and data flow policies are pre-defined based on organizational security requirements. This preliminary setup allows the access interceptor to make rapid policy compliance decisions during runtime without extensive analysis, reducing processing time while maintaining high detection precision.
Data Source
AI summary
A method and system for evaluating and enforcing a data flow policy at a mobile computing device includes a data flow policy engine to evaluate data access requests made by security-wrapped software applications running on the mobile device and prevent the security-wrapped software applications from violating the data flow policy. The data flow policy defines a number of security labels that are associated with data objects. A software application process may be associated with a security label if the process accesses data having the security label or the process is in communication with another process that has accessed data having the security label.