Quarantined Memory Settings-Based Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing memory systems face challenges in protecting sensitive data from undesired exposure, as applications can access data without user consent, leading to unintended leakage, even with data protection schemes in place.
Innovation Solution
Implementing a quarantined memory location with settings-based access control, using attributes like user intent, geographical location, and security protocols to restrict access and storage of sensitive data, preventing unauthorized transfer or viewing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data protection schemes are implemented in memory systems, then data security is improved, but applications can still access data without user consent leading to unintended leakage
Solution Approach 1:
The memory system is segmented into multiple memory regions including secure memory regions and non-secure memory regions. Each region has distinct access control characteristics, allowing the system to protect sensitive data by storing it in secure regions that require authentication, while permitting applications to access non-sensitive data in non-secure regions without authentication overhead.
Solution Approach 2:
An intermediary authentication mechanism is introduced between applications and secure memory regions. This intermediary layer verifies user consent and authentication credentials before allowing access to protected data, preventing unauthorized access while maintaining legitimate application functionality.
2Reliability
If authentication mechanisms are added to prevent unauthorized access, then data protection is improved, but system complexity increases
Solution Approach 1:
Authentication requirements are applied locally to specific memory regions rather than uniformly across the entire memory system. Secure memory regions have authentication enabled, while non-secure regions have authentication disabled, allowing the system to protect only the necessary data without adding complexity to the entire system.
Solution Approach 2:
The system implements partial authentication by applying authentication mechanisms only to secure memory regions and not to non-secure regions. This partial action approach provides sufficient protection for sensitive data while avoiding the excessive complexity that would result from authenticating all memory access.
3Reliability
If data is stored in protected memory regions, then data security is improved, but access speed may be reduced due to authentication requirements
Solution Approach 1:
Authentication credentials and user consent preferences are established in advance through preliminary authentication during system initialization or user setup. This preliminary action allows the authentication state to be cached or pre-configured, reducing the authentication overhead during subsequent data access operations.
Solution Approach 2:
The system applies authentication only partially to secure regions and completely exempts non-secure regions, ensuring that the speed penalty of authentication is incurred only when absolutely necessary for security, while the majority of data access operations proceed at full speed without authentication overhead.
Data Source
AI summary
Methods and apparatuses related to settings based access to data stored in quarantined memory media are described. Memory systems can include multiple types of memory media (e.g., volatile and/or non-volatile) and data (e.g., information included in) stored in the memory media are subject to risks of the data being undesirably exposed and/or viewable to the public. According to embodiments of the present disclosure, a particular portion and/or location in the memory media can provide a data protection scheme, and a setting associated with the data can include security protocols that can control the accessibility to the stored data. For example, a setting can be associated with data to be stored in a particular location of the memory media, and responsive to a request to access the data, the setting can initiate an authentication of the request.