Parallel Processing Security Management via OS Segmentation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing security management systems for parallel processing in multiprocessor systems face challenges in ensuring security for each processor without degrading performance, especially in small devices like mobile terminals, where modifying applications for multiprocessors is labor-intensive and costly, and existing solutions fail to provide individual security functions for each processor.

Innovation Solution

A security management system that logically divides a multiprocessor into two groups, allowing each processor to operate an OS and application for single processors, with a security management system that controls units of work to ensure security functions are provided without modifying existing OS or applications, using OS service units, security expansion units, and application control units to manage security and parallel processing.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If an OS for multiprocessors is used to enable parallel processing, then parallel processing capability is improved, but processor performance is degraded due to overheads from services provided even when not needed

Engineering Contradiction:
Improveparallel processing capabilityVSAvoidprocessor performance
Core Design Contradiction:
Adaptability or versatilityVSProductivity

Solution Approach 1:

The system is segmented into multiple OS instances, each dedicated to a specific processor. This allows each processor to run its own OS and application without interference, eliminating the overhead of a single OS managing multiple processors when only one is actively used. The segmentation enables independent operation of each processor while maintaining parallel processing capability.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The invention creates a universal platform where a single OS design can be deployed across multiple processors without modification. Each processor runs the same OS and application code, providing multi-functionality across different processor instances while maintaining compatibility and reducing development costs.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Reliability

If an OS for multiprocessors is used to provide security functions, then security coverage is improved, but processor performance is uniformly degraded across all processors

Engineering Contradiction:
Improvesecurity function coverageVSAvoidprocessor performance
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

Security functions are segmented and distributed to individual OS instances running on each processor. Each processor gets its own security management capabilities through its dedicated OS instance, providing comprehensive security coverage without the performance penalty of a centralized security system affecting all processors uniformly.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

Security functions are implemented locally on each processor through its own OS instance, allowing each processor to have tailored security measures appropriate to its specific workload and requirements. This local quality approach ensures security without forcing uniform performance degradation across all processors.

Inventive Principle:
Principle #3Local quality

3Adaptability or versatility

If existing applications are modified to run on multiprocessors, then parallel processing capability is improved, but development cost and labor are increased enormously

Engineering Contradiction:
Improveparallel processing capabilityVSAvoiddevelopment cost and labor
Core Design Contradiction:
Adaptability or versatilityVSEase of manufacture

Solution Approach 1:

The system creates copies of the single-processor OS and application environment across multiple processors. Existing applications can be copied and executed on each processor instance without modification, as each OS instance provides a familiar single-processor execution context. This copying approach enables parallel processing while avoiding the enormous cost of modifying existing applications.

Inventive Principle:
Principle #26Copying

4Device complexity

If a single OS is used in a multiprocessor system, then system simplicity is improved, but security function separation between processors is difficult to achieve

Engineering Contradiction:
Improvesystem structureVSAvoidsecurity function separation
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The single OS is segmented into multiple independent OS instances, each running on a specific processor. This segmentation maintains relative system simplicity by using identical OS code across instances while enabling security function separation, as each instance operates independently with its own security context and cannot interfere with other processors.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS7516323B2Security management system in parallel processing system by OS for single processors
Publication Date: 2009.04.07 NEC CORP
  • US7516323B2 patent drawing
  • US7516323B2 patent drawing
  • US7516323B2 patent drawing

AI summary

On a parallel processing system which operates an OS and an existing application for single processors on a multiprocessor to realize parallel processing by the multiprocessor with respect to the application, an OS service unit which provides services of the OS for single processors to a unit of work which can be parallelized within the application controls security function with respect to a processing request from the unit of work in response to the processing request.