Process Interaction Security via Bitmap Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
As more computers connect to the Internet, traditional computer security methods become inadequate in managing access and interactions between processes, leading to potential malicious activities such as data theft and unauthorized actions.
Innovation Solution
Implementing a security system that uses bitmaps to control interactions between processes, including a 'protecting others' bitmap to restrict activities, a 'protection from others' bitmap to safeguard processes, and an 'override' bitmap to allow specific overrides, ensuring secure access and interactions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional computer security methods are used, then system simplicity is maintained, but security effectiveness deteriorates as computers connect to the Internet
Solution Approach 1:
The security system segments access control into three distinct bitmap structures: protecting others bitmap (processes that can protect others), protection from others bitmap (processes protected from others), and override bitmap (processes that can override protection). This segmentation allows fine-grained control of process interactions while maintaining manageable complexity through structured data organization.
Solution Approach 2:
The patent changes the parameter representation from traditional access control lists to bitmap data structures. Each bitmap uses binary flags to represent security permissions, enabling efficient storage and processing of access control information. This parameter transformation improves security effectiveness by enabling faster access decisions while keeping the system complexity manageable through standardized data formats.
2Reliability
If process interaction control is implemented, then security against malicious activities improves, but ease of operation deteriorates
Solution Approach 1:
The security system operates autonomously by automatically evaluating bitmap permissions when process interactions are requested. The operating system checks the protecting others bitmap, protection from others bitmap, and override bitmap to determine whether to allow or deny interactions, eliminating the need for manual security configuration by users while maintaining strong security controls.
Solution Approach 2:
By representing security permissions as bitmap parameters with clear binary states (allow/deny), the system simplifies the operational interface for process interactions. Developers can specify security requirements through straightforward bitmap assignments rather than complex access control policies, maintaining ease of operation while improving security through automated enforcement.
3Reliability
If bitmap-based access control is implemented, then interaction security improves, but device complexity increases
Solution Approach 1:
The access control structure is segmented into three specialized bitmaps, each serving a specific function: protecting others bitmap for processes that can protect others, protection from others bitmap for processes protected from others, and override bitmap for processes that can override protection. This segmentation reduces overall complexity by dividing the access control logic into manageable, purpose-specific components.
Solution Approach 2:
The bitmap data structure serves multiple functions simultaneously: it stores access control permissions, enables efficient bitwise operations for security decisions, and provides a standardized interface for process interaction control. This multi-functionality reduces device complexity by consolidating multiple security management tasks into a single unified data structure and evaluation mechanism.
Data Source
AI summary
In aspects, interactions between processes of a desktop are allowed or denied based on security data. The security data may comprise a first bitmap that indicates whether a requesting process is allowed to cause an action to occur, a second bitmap that indicates whether a process is protected from having an action occur, and a third bitmap that indicates whether the requesting process may override protection, if any, in causing the action to occur.