Processing Device Sensitive Data Access Mode
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
There is a need to execute software applications in a privileged operating mode without compromising the security of a computing system, particularly when such applications have not undergone rigorous auditing, and to ensure secure access to sensitive data like cryptographic keys.
Innovation Solution
A method and system that allow a processing device to enter a sensitive data access mode, restrict accessible address ranges for non-secure functions, and execute these functions in a sandboxed environment, using memory protection circuits and decryption mechanisms to ensure secure access and execution, while returning to the sensitive data access mode upon termination.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If applications are executed in privileged operating mode without rigorous auditing, then productivity and ease of operation are improved, but system security and reliability deteriorate
Solution Approach 1:
The patent segments the privileged operating mode into two distinct modes: secure mode with full access to sensitive data and sandboxed mode with restricted access. This segmentation allows unverified applications to execute in the sandboxed mode where their access to sensitive data is limited, thus maintaining productivity while improving security. The segmentation is implemented through separate address space configurations and access control lists that define which memory regions are accessible in each mode.
Solution Approach 2:
The patent introduces an intermediary mechanism (sandboxed mode with address space isolation) between the unverified application and the sensitive data. This intermediary restricts the application's access to only specific memory regions through configured address ranges, preventing direct access to sensitive data while still allowing the application to execute. The intermediary acts as a controlled gateway that enables productivity without compromising security.
2Reliability
If rigorous auditing process is applied to all applications, then system security is improved, but device complexity and ease of manufacture worsen
Solution Approach 1:
The patent implements a self-service security mechanism where the sandboxed mode automatically enforces access restrictions through pre-configured address space isolation. Instead of requiring manual auditing of each application, the system provides automatic security enforcement at the hardware/memory management level. The access control lists and address range configurations automatically prevent unauthorized access, eliminating the need for complex software-based auditing processes.
Solution Approach 2:
The patent replaces the mechanical/software-based auditing process with a hardware/memory management-based access control mechanism. The sandboxed mode uses memory management units and access control lists to enforce security policies, substituting complex software auditing with simpler hardware-enforced memory protection. This substitution reduces device complexity while maintaining security.
3Loss of substance
If code duplication is avoided to reduce memory footprint, then loss of substance is reduced, but reliability worsens due to shared code access
Solution Approach 1:
The patent applies local quality by configuring different access permissions for different memory regions. The sandboxed mode allows read-only access to shared code segments while restricting write access and access to sensitive data regions. This local differentiation of access rights enables code sharing to reduce memory footprint while maintaining security through region-specific access control lists that prevent unauthorized modification or access to critical areas.
Data Source
AI summary
The present invention concerns a method of protecting sensitive data, and a corresponding computing system processing device, comprising: entering, by a processing device, a sensitive date access mode in-which sensitive data is accessible; restricting, by a program running in the sensitive data access mode, one or more accessible address ranges for a non-secure function, and calling, from the sensitive data access mode, the non-secure function; and entering, by the processing device, a further operating mode to execute the non-secure function during which the processing device has access to only the one or more accessible address ranges.