Partial Core Dump Generation for Secure Smartphone Debugging
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increased demand for secure digital communication in smartphones exposes them to risks of core dump attacks, which can reveal vulnerabilities and confidential information, as traditional methods for generating core dumps are not secure against reverse engineering and malware attacks.
Innovation Solution
A method and system for generating a partial core dump based on Read-Write (RW) data from the memory of a User Equipment (UE), with optional encryption of Read-Only (RO) data, allowing for secure reconstruction of a complete core dump using a decryption device, which includes a processor to detect triggers, classify memory data, and generate or reconstruct the core dump.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of repair
If a complete core dump is generated containing all memory data including RO and RW data, then debugging capability is improved, but security is worsened due to exposure of confidential information and vulnerabilities
Solution Approach 1:
The patent segments the core dump generation process into two distinct parts: RO data extraction and RW data extraction. RO data is extracted from encrypted core dump files while RW data is extracted from memory. This segmentation allows selective handling of sensitive data versus debugging data, enabling security-conscious debugging by combining only necessary components.
2Object-affected harmful factors
If core dump generation is disabled to improve security, then security is improved, but debugging capability is worsened
Solution Approach 1:
The patent extracts only the necessary RW data from memory and combines it with decrypted RO data from encrypted core dump files. This extraction approach allows debugging functionality to be maintained while minimizing the exposure of sensitive information, as only essential runtime data is captured rather than complete system state.
3Reliability
If all code is stored in memory at all times for embedded systems, then system operation is improved, but core dump attack vulnerability is worsened
Solution Approach 1:
The patent applies different quality treatments to different portions of memory data. RO data (code) is handled differently from RW data (runtime information). The RW data is extracted and combined with decrypted RO data, while sensitive portions can be excluded or protected. This local quality differentiation reduces overall vulnerability while maintaining system operation.
Data Source
AI summary
A method of generating a core dump in a User Equipment (UE) may include detecting, using at least one processor, a trigger, the trigger including an instruction to generate a core dump of the UE. The method may further include classifying, using the at least one processor, data stored in memory of the UE as Read-Write (RW) data or Read Only (RO) data. The method may further include generating, using the at least one processor, a partial core dump based on the RW data of the memory.