Privilege Elevation Merging for Secure Multi-Action Execution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The frequent requirement for elevated privilege prompts during multiple software installations or upgrades degrades the user experience by increasing the number of prompts needed, compromising security without a corresponding multiple of actions executed securely.
Innovation Solution
A method and apparatus that securely execute multiple actions using a single privilege elevation prompt by establishing a secure inter-process communication connection between a client download controller and a client application assistant, allowing subsequent actions to be executed without additional prompts through a secure authenticated connection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a privilege elevation prompt is displayed for each independent source or action, then security is ensured, but the number of prompts increases and user experience degrades
Solution Approach 1:
The patent merges multiple privilege elevation prompts into a single prompt by establishing a secure connection between the first source and subsequent sources. Once the initial elevation prompt is responded to, the system maintains a secure authenticated connection that allows multiple actions to be executed without requiring separate prompts for each source, thus combining multiple security checks into one while preserving security through the secure connection mechanism
Solution Approach 2:
The patent performs the privilege elevation action preliminarily by obtaining elevated privileges during the first source's installation process. This preliminary elevation of privileges is then reused for subsequent sources, eliminating the need for repeated elevation prompts while maintaining security through the secure connection established during the initial action
2Reliability
If multiple independent privilege elevation prompts are required for multiple actions, then security is maintained, but the time and effort required for installation increases
Solution Approach 1:
The patent combines multiple privilege elevation operations into a single operation by establishing a secure connection that allows subsequent sources to be installed without additional elevation prompts. This merging of operations significantly reduces installation time while maintaining security through the secure authenticated connection mechanism
Solution Approach 2:
The patent enables continuous execution of installation actions without interruption for additional privilege elevation prompts. Once the initial elevation is obtained and the secure connection is established, subsequent installations can proceed continuously without time loss due to repeated prompts, thus improving installation efficiency while preserving security
Data Source
AI summary
A method and apparatus for securely executing a plurality of actions requiring elevated privilege using less than a corresponding plurality of prompts for privilege elevation, and in some embodiments, only a single prompt for privilege elevation, comprising: receiving a request to perform a first action requiring an elevated privilege; acquiring the elevated privilege to perform the first action; executing the first action, wherein the first action is executed based on the elevated privilege; receiving a request to perform a second action requiring an elevated privilege; and executing the second action using the elevated privilege acquired for the first action.