Multidimensional Permission Model for Secure Process Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing operating systems face challenges in securely authenticating executable files and managing resource permissions, as they often rely on trustful channels and computationally intensive methods, which can lead to vulnerabilities and inefficiencies in determining access rights.
Innovation Solution
The implementation of a secure processing model that authenticates processes using digital signatures and specifies permissions through a multidimensional and extraconcentric permission system, where processes are tagged with metadata indicating allowed permissions based on digital signatures, allowing for flexible and efficient access control without inheriting all permissions from lower levels.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If a concentric permission model is used, then permission determination speed is improved, but permission flexibility deteriorates
Solution Approach 1:
The patent transitions from a single-dimensional concentric permission model to a multi-dimensional permission model by introducing additional dimensions (such as process type, operation type, and resource type) alongside the traditional permission levels. This dimensional expansion allows the system to maintain fast permission determination through structured comparisons while achieving greater permission flexibility and customization capabilities.
2Adaptability or versatility
If a tailored permission system is used, then permission individualization is improved, but computational complexity increases
Solution Approach 1:
The patent segments the permission verification process into multiple independent dimensional comparisons. Instead of evaluating a single complex permission matrix, the system divides permission checks into separate dimension evaluations (process type dimension, operation type dimension, resource type dimension), each with its own permission levels. This segmentation reduces computational complexity by allowing parallel or sequential evaluation of simpler dimensional criteria rather than a monolithic complex matrix.
3Reliability
If digital signature authentication is implemented, then executable file security is improved, but authentication time increases
Solution Approach 1:
The patent implements preliminary authentication actions by verifying digital signatures and embedding permission metadata into executable files before they are executed. The authentication process occurs in advance during the file loading phase, and the resulting permission assignments are pre-established in the process metadata. This preliminary action ensures security while minimizing the time impact during actual process execution, as the authentication and permission determination are completed beforehand.
Data Source
AI summary
The techniques and systems described herein present various implementations of a model for authenticating processes for execution and specifying and enforcing permission restrictions on system resources for processes and users. In some implementations, a binary file for an application, program, or process may be augmented to include a digital signature encrypted with a key such that an operating system may subsequently authenticate the digital signature. Once the binary file has been authenticated, the operating system may create a process and tag the process with metadata indicating the type of permissions that are allowed for the process. The metadata may correspond to a particular access level for specifying resource permissions.