Partitioned Access Control for Lawful Device Data Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computing device partitioning technologies fail to balance the need for law enforcement access with user data protection, as they either allow unauthorized access or lack secure logging and authorization mechanisms.
Innovation Solution
Implementing a computing device with separate partitions for user and access-protected applications, using cryptographic keys and modules to ensure only authorized entities can access sensitive data, with secure logging and approval mechanisms for law enforcement access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If law enforcement is granted access to applications and data on a computing device, then law enforcement can investigate crimes and secure evidence, but user privacy and security are compromised and sensitive data may be accessed without authorization
Solution Approach 1:
The computing device is divided into multiple partitions: a first partition for user applications and data, and a second partition for law enforcement access. The access control module verifies requests and directs them to the appropriate partition, ensuring law enforcement can only access the second partition while user data remains protected in the first partition.
Solution Approach 2:
The access control module acts as an intermediary between law enforcement requests and the computing device's data storage. It verifies requests using cryptographic keys and determines whether to grant access based on authorization, preventing direct unauthorized access to user data while allowing legitimate law enforcement access to approved applications.
2Reliability
If all applications are made accessible to external entities for security scanning, then malware detection improves, but user privacy is violated and sensitive data is exposed
Solution Approach 1:
The system segments applications into two categories: approved applications stored in the first partition that are protected from external access, and applications in the second partition that can be accessed by authorized external entities for security scanning. This segmentation allows malware detection on specific applications without exposing all user data.
Solution Approach 2:
Different access policies are applied to different partitions: the first partition maintains strict privacy protection with no external access, while the second partition allows controlled external access for security purposes. This local quality approach enables security scanning where needed while preserving user privacy where not required.
3Ease of operation
If cryptographic keys are made available for key escrow systems, then law enforcement can decrypt communications, but security against unauthorized access is weakened
Solution Approach 1:
Cryptographic keys are segmented and stored in different locations: user private keys remain protected in the user's computing device, while corresponding public keys or escrowed key portions are stored in secure locations accessible to authorized entities. This allows law enforcement to decrypt communications through key escrow while maintaining cryptographic security against unauthorized access.
Solution Approach 2:
The access control module and key escrow system act as intermediaries in the decryption process. Instead of law enforcement directly accessing user keys, the system verifies authorization and facilitates controlled key release or decryption, maintaining cryptographic security while enabling authorized access.
4Reliability
If audit mechanisms are implemented to track external access, then accountability is improved, but system complexity increases
Solution Approach 1:
The output module implements a feedback mechanism that records information about authorized external access to applications and data. This audit trail provides accountability by tracking who accessed what data and when, while the automated recording process minimizes the complexity burden on the system.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A computing device is disclosed. The computing device is operated by a user of the computing device. The computing device comprises an access control module (330) configured to verify, using an access verification key (335), a request (318) to access applications (205) and data (207, 218) on the computing device by an authorized external access entity, where the authorized external access entity is a different entity than the user and is external to the computing device, and the access request (318) verified using the access verification key (335) is generated externally to the computing device; and coupled to the access control module (330) and executing on the computing device, an output module (336) configured to record information regarding authorized external access (339); hereby data in an application (205, 212) that executes on the computing device can be accessed by the authorized external access entity.