Operating System Segmentation for Secure Device Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing device detection methods require restarting the operating system to enter a security mode, disrupting user operations and introducing security risks when directly opening detection permissions to normal operation modes.
Innovation Solution
A method and system where a first operating system sends a driving program operation instruction to a second operating system, allowing the second operating system to execute and feedback the result without restarting, ensuring user convenience and enhanced security by isolating the detection program from application programs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the operating system is restarted to enter security mode for device detection, then detection permission and security are improved, but user operation convenience deteriorates
Solution Approach 1:
The patent divides the operating system into two separate operating systems: a first operating system that runs application programs and a second operating system that runs detection programs. This segmentation allows the detection program to operate in an isolated environment with high detection permissions without requiring a system restart, thus maintaining user operation convenience while ensuring detection security.
2Ease of operation
If detection permission is directly opened to normal operation mode, then user operation convenience is improved, but security risks worsen
Solution Approach 1:
The patent segments the system into two independent operating systems with different permission levels. The second operating system is specifically designed to run detection programs with elevated permissions, while the first operating system maintains normal operation. This segmentation eliminates security risks by isolating high-privilege detection operations from the normal user environment.
Solution Approach 2:
The patent introduces a virtualization layer as an intermediary between the application programs and the hardware/detection programs. The first operating system communicates with the second operating system through defined interfaces, allowing secure permission delegation without direct access. This intermediary mechanism prevents security risks while maintaining operational convenience.
3Measurement precision
If the operating system is restarted for device detection, then detection accuracy is improved, but time consumption worsens
Solution Approach 1:
The patent performs preliminary action by pre-configuring the second operating system with the necessary detection permissions and environment before detection is needed. The virtualization layer and isolation mechanisms are established in advance, so when detection is required, the system can immediately switch to or activate the second operating system without time-consuming restarts, thus reducing time consumption while maintaining detection accuracy.
Data Source
AI summary
The present application provides a device detection method and system, an electronic device, a cloud robot system. The method includes: in a first operating system, when a device detection instruction sent by a device detection program is detected, determining a driving program operation instruction corresponding to the device detection instruction, and transmitting the driving program operation instruction to a second operating system; in the second operating system, operating a corresponding driving program according to the driving program operation instruction, and feeding back an operation result to the first operating system; and in the first operating system, returning the operation result to the device detection program.