Multiple Display Servers Secure Data Copying
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Typical computing systems with a single display server provide an unsecure environment, allowing easy copying and sharing of confidential or secret data between applications, making them unsuitable for storing sensitive information.
Innovation Solution
Implementing multiple display servers, where one server provides a secure environment and another an unsecure environment, with an authorization framework that prompts users for authentication when copying data from secure to unsecure environments, ensuring secure data transfer.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Device complexity
If a single display server is used, then device complexity is reduced, but security of confidential data deteriorates
Solution Approach 1:
The system divides the display server functionality into two separate display servers: a first display server for secure applications and a second display server for unsecure applications. This segmentation prevents unauthorized copying between applications by isolating them in different display server environments, thus improving data security while maintaining manageable system complexity through clear functional separation.
2Reliability
If multiple display servers are implemented, then data security is improved, but device complexity increases
Solution Approach 1:
The authorization framework serves multiple functions: it monitors copy operations between display servers, authenticates user permissions, and enforces security policies. This multi-functional component manages the complexity of having multiple display servers by providing a centralized control mechanism that handles security across both secure and unsecure environments without requiring separate complex security systems for each display server.
3Reliability
If authentication is required for data copying, then unauthorized copying is prevented, but ease of operation deteriorates
Solution Approach 1:
The authorization framework acts as an intermediary between the first and second display servers during copy operations. It automatically mediates the authentication process by intercepting copy requests, verifying user permissions, and either allowing or blocking the operation. This intermediary approach maintains ease of operation for authorized users while enforcing security requirements, as the authentication overhead is managed transparently by the framework rather than requiring complex user actions.
Data Source
AI summary
A first display server and a second display server execute on a processing device. The first display server provides a secure environment for data presented in first application windows of the first display server and the second display server provides an unsecure environment for data presented in second application windows of the second display server. The processing device receives at least one user command to copy data from one of the first application windows of the first display server to one of the second application windows of the second display server. The processing device prompts a user to perform an authentication upon receiving the at least one user command. In response to the user successfully performing the authentication, data is copied from said one of the first application windows to said one of the second application windows.