OS Security Agent for Peripheral Device Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current mechanisms for protecting computer devices from malicious access to peripheral devices, such as webcams and microphones, are insecure and resource-intensive, allowing malware to access these devices without user interaction and posing a risk to personal information.
Innovation Solution
Implementing a security agent within the operating system that applies security attributes to device objects to permit access from a primary user account while preventing direct access by a secondary user account, intercepting and examining requests to the device object, and selectively allowing or denying access to prevent unauthorized use.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If device drivers are made universally accessible to all user processes, then ease of operation is improved, but security against malicious access deteriorates
Solution Approach 1:
The patent segments user accounts into primary and secondary categories, with primary accounts having full access to device objects and secondary accounts having restricted access. This segmentation allows the system to maintain ease of operation for legitimate users while preventing malicious access from untrusted processes running under secondary accounts.
Solution Approach 2:
The patent introduces an intermediary security mechanism that intercepts requests from secondary user accounts to device objects. This intermediary layer examines the requests and selectively allows or denies access, thereby maintaining ease of operation for authorized requests while blocking malicious ones without affecting the underlying device driver architecture.
2Reliability
If security checks are performed on all device access requests, then security is improved, but device complexity increases
Solution Approach 1:
The patent applies security attributes locally to device objects based on the requesting user account type. Rather than implementing a complex global security system, the solution applies simple access rules locally: primary accounts get full access, secondary accounts get restricted access. This local quality approach maintains security while avoiding excessive system complexity.
Solution Approach 2:
The security mechanism uses the existing user account structure and device object framework to provide security services. The system leverages already-present primary and secondary user account distinctions and existing device object interfaces, rather than introducing entirely new complex security infrastructure. This self-service approach reduces overall system complexity.
3Reliability
If sandbox isolation is implemented for untrusted processes, then security is improved, but loss of information increases due to restricted access
Solution Approach 1:
The patent implements dynamic access control where the level of access granted to sandboxed secondary user accounts can vary based on the specific device object and request type. Rather than complete isolation, the system dynamically evaluates requests and grants appropriate access levels, maintaining security while preventing information loss through overly restrictive isolation.
Solution Approach 2:
The security attribute mechanism applied to device objects provides multiple functions: it enables sandbox isolation for secondary accounts, maintains security against malware, and still allows legitimate peripheral device access when needed. This universal mechanism handles multiple security and access control requirements through a single unified approach.
Data Source
AI summary
A computer device includes hardware with a connected peripheral device such as a camera or a microphone. An operating system is configured to operate the peripheral device using a device driver and a representative device object. An agent is configured to apply security attributes to the device object which permit access from a primary user account while preventing direct access to the device object by a secondary user account in a sandbox. The agent may intercept requests made toward the device object, examine each request, and then satisfy the request, when the request is allowed, by selectively arranging access to the device object from the sandboxed secondary user account.