Multi-mode Computer Context Selector for Security Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users often confuse the Secure and Non-Secure Contexts in dual security context architectures, leading to potential attacks where a compromised Non-Secure Context is mistaken for the Secure Context, compromising security isolation.
Innovation Solution
A method and apparatus that allows users to selectively connect different security contexts to input/output channels using a switch function and physical indicator, ensuring that the Secure Context is clearly distinguished from the Non-Secure Context, preventing external threats from interfering with the switch function.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a dual security context architecture is implemented, then security isolation between Secure and Non-Secure contexts is improved, but user confusion between contexts increases leading to potential security breaches
Solution Approach 1:
The patent applies visual indicators (analogous to color changes) to display the current security context state. Different visual states indicate whether the device is in Secure or Non-Secure context, allowing users to easily distinguish between modes and avoiding confusion while maintaining security isolation.
Solution Approach 2:
The patent introduces an intermediary layer (context selector or indicator mechanism) between the user and the security contexts. This intermediary provides clear feedback about which context is active, mediating the interaction and preventing user confusion without compromising the underlying security isolation.
2Reliability
If multiple security contexts are provided, then security robustness is improved through cross-checking, but device complexity increases
Solution Approach 1:
The patent segments the computing platform into distinct security contexts (Secure and Non-Secure) with separate processing paths. This segmentation enables independent operation and cross-checking of each context while maintaining overall system manageability through clear structural separation.
Solution Approach 2:
The patent implements a universal context selection mechanism that can switch between different security contexts. This multi-functional approach allows a single device to provide multiple security levels without requiring separate dedicated devices, balancing robustness with complexity.
3Ease of operation
If a physical selector is added to indicate active context, then user awareness of security mode is improved, but device complexity increases
Solution Approach 1:
The patent uses visual indicators (similar to color changes) to provide immediate feedback on the active security context. These indicators are integrated into the existing user interface, providing user awareness without requiring separate physical selectors or additional complex components.
Data Source
AI summary
There is disclosed a computing apparatus including a first context within which first processing activity may be performed and a second context within which second processing activity may be performed independent of the first processing activity, the apparatus further may include input and/or output channels with which the first and second contexts may communicate and a switch function operated by a selector; whereby operation of the selector by a user selectively allows communication between the first context and/or the second context (of the first part) and the input and/or output channels (of the second part). An indicator is provided to indicate which context is in communication with the input/output channels.