Quarantined Memory Media Data Protection Mechanism
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing memory systems face challenges in protecting sensitive data from unintended exposure, as applications can access and transfer data without user awareness, leading to undesirable public exposure despite data protection schemes.
Innovation Solution
Implementing a data protection scheme that designates specific memory locations as 'quarantined' within memory systems, where data can be selectively stored and protected against legitimate but undesirable requests, preventing transfer out of the system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If data is stored in accessible memory locations for easy retrieval by applications, then ease of operation is improved, but data security deteriorates as applications can transfer data out without user awareness
Solution Approach 1:
The memory system is segmented into multiple regions with different access permissions. Quarantined memory regions are separated from general accessible memory, allowing data to be stored in protected segments that applications cannot access or transfer from, while other memory regions remain freely accessible for normal operations.
Solution Approach 2:
Different memory locations are assigned different access qualities and permissions. Specifically, quarantined memory locations have restricted write and transfer permissions at the local level, while non-quarantined locations maintain full accessibility. This allows simultaneous data protection in critical areas and easy access in non-critical areas.
2Object-affected harmful factors
If data protection schemes are implemented to prevent unauthorized access, then data security is improved, but ease of operation deteriorates as legitimate applications cannot access needed data
Solution Approach 1:
The memory access control system is made dynamic through the quarantined bit mechanism. Memory locations can be dynamically designated as quarantined or non-quarantined based on data sensitivity, and applications can request access to non-quarantined data. This dynamic control allows the system to adapt access permissions based on current operational needs while maintaining protection for sensitive data.
Solution Approach 2:
The quarantined bit acts as an intermediary control mechanism between the memory storage layer and the application access layer. It provides a middle ground that allows legitimate applications to access non-sensitive data while blocking access to sensitive quarantined data, thus mediating between security requirements and operational needs.
3Productivity
If all memory locations are made accessible for cloud synchronization, then productivity is improved, but loss of information control worsens as sensitive data can be transferred out
Solution Approach 1:
Memory is segmented into quarantined and non-quarantined regions, allowing cloud synchronization services to efficiently access and synchronize non-sensitive data in non-quarantined regions while automatically preventing transfer of sensitive data stored in quarantined regions. This segmentation enables productive synchronization operations without compromising data security.
Solution Approach 2:
Different memory locations have different transfer permissions assigned locally through the quarantined bit. Non-quarantined locations allow free transfer for cloud synchronization, improving productivity, while quarantined locations block transfers to prevent loss of information control. This local differentiation resolves the contradiction between synchronization efficiency and data control.
Data Source
AI summary
Methods and apparatuses related to access to data stored in quarantined memory media are described. Memory systems can include multiple types of memory media (e.g., volatile and/or non-volatile) and data (e.g., information included in) stored in the memory media often are subject to risks of the data being undesirably exposed to the public. For example, requests to write data in the memory media can often be made and accepted without a user's awareness, which can lead to the undesirable exposure of the data. According to embodiments of the present disclosure, a particular portion and/or location in the memory media can provide a data protection scheme such that data stored in the particular location can be refrained from being transferred out of the computing system.