Object Registry for Secure Inter-Xlet Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mechanisms for inter-Xlet communication in JAVA™ environments, such as RMI and IXC, are complex and inefficient for small devices, and struggle to provide secure communication between Xlets in different isolates while preventing denial of service attacks and ensuring reliable garbage collection.
Innovation Solution
A method and media for object-oriented inter-Xlet communication that manages a registry of bound objects, allowing Xlets to communicate securely by binding exported objects with remote references, limiting the number of bindings to prevent overload, and implementing efficient garbage collection through a central or distributed registry.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If RMI is used for communication between virtual machines, then communication capability is improved, but device complexity increases and it becomes unwieldy for small devices
Solution Approach 1:
The patent extracts only the essential communication functionality needed for Xlets from the full RMI framework. By creating a simplified IXC mechanism that operates within the JVM rather than requiring complete RMI infrastructure, it removes unnecessary complexity while preserving core remote communication capabilities.
Solution Approach 2:
The patent segments the communication system into isolated contexts (LVMs) with controlled interaction points. By dividing the system into separate logical virtual machines with defined communication boundaries, it reduces overall complexity while enabling targeted communication where needed.
2Reliability
If multiple Xlets are separated into different LVMs for security, then security is improved, but communication capability deteriorates
Solution Approach 1:
The patent introduces an intermediary registration mechanism that mediates communication between isolated LVMs. Xlets register their service objects with a central registry, allowing other Xlets to discover and communicate with them without breaking isolation boundaries. This intermediary enables secure cross-LVM communication while maintaining security constraints.
3Adaptability or versatility
If unlimited object bindings are allowed in the registry, then communication flexibility is improved, but denial of service attacks become possible
Solution Approach 1:
The patent applies preliminary anti-action by establishing binding limits in advance to prevent malicious exploitation. By setting maximum binding counts for service objects before attacks can occur, the system proactively prevents denial of service scenarios where attackers could otherwise create excessive bindings to exhaust system resources.
4Device complexity
If a simplified communication mechanism is used for small devices, then device complexity is reduced, but security measures may be insufficient
Solution Approach 1:
The patent applies local quality by implementing security measures specifically at the communication boundaries between LVMs rather than throughout the entire system. Security context information is attached locally to remote references and enforced at registration and invocation points, providing targeted security where needed without adding global complexity.
Data Source
AI summary
A computer implemented method and machine readable media for managing a registry of bound objects for inter-Xlet communication (IXC) is described. A request from a first Xlet to bind an exported object name with a remote reference is received. A number of objects exported by the first Xlet is compared with a maximum number. If the number of objects exported is less than the maximum number then a binding is added for the exported object name and the remote reference. If the number of objects exported is greater than the maximum number, then the request is denied.