Operating System Message Handling via Cryptographic Relativity Metrics
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Modern operating systems face challenges in securely handling messages between processes, particularly when proprietary and third-party applications are executed on the same system, as this opens attack vectors for nefarious applications to modify system state by sending unauthorized messages.
Innovation Solution
The system associates applications with relativity metrics based on cryptographic identifiers, which are verified to determine whether messages can be passed between processes, ensuring that messages are only forwarded between processes with equal or higher privilege levels, thereby enhancing security and controlling message flow.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If the operating system allows free message passing between all processes, then communication efficiency is improved, but system security deteriorates
Solution Approach 1:
The patent applies local quality by assigning different security clearance levels to different processes and implementing selective message filtering based on the specific security requirements of each message passing operation. The message handling function checks the security clearance levels of source and destination processes and only allows messages when the destination's clearance is equal to or higher than the source's clearance, thus maintaining security while allowing efficient communication within security constraints.
2Reliability
If the operating system implements strict security checks for message passing, then system security is improved, but message handling complexity increases
Solution Approach 1:
The patent implements preliminary action by pre-determining and storing the security clearance levels of all processes before message passing occurs. The message handling function is pre-configured with the security policy rules, so when a message needs to be passed, the system only needs to perform a simple comparison of pre-assigned clearance levels rather than conducting complex security evaluations at the moment of message passing.
3Reliability
If the operating system groups applications by security clearance levels, then security control is improved, but application management complexity increases
Solution Approach 1:
The patent applies parameter changes by using security clearance levels as a key parameter to automatically group applications. Instead of manual classification, the system assigns numerical security clearance parameters to each application, and the message handling function uses these parameters to determine whether message passing is permitted. This automated parameter-based grouping simplifies application management while maintaining strict security control.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
As each application is loaded for use by an operating system, a message handling application within the operating system associates the applications with relativity metrics for later use in handling interprocess messages. A cryptographic identifier associated with each application is verified and, based on the verifying, each application is associated with a relativity metric. The message handling application receives a message from an origin process. The message handling application then determines a destination process for the message, a relativity metric for the origin process, and a relativity metric for the destination process. Based on an analysis of the relativity metrics of the origin process and the destination process, the message handling application determines whether to pass the message to the destination process.