Resource Manager Isolating Computer Resources
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Modern operating systems face challenges in ensuring the security and integrity of computer resources due to unsynchronized access by clients, leading to data corruption and unauthorized access, despite existing security measures which provide only partial solutions.
Innovation Solution
Implementing a resource manager that isolates computer resources, monitors operations, and enforces security policies to prevent unauthorized access and data corruption by creating separate processes for each operation and using metadata and security policies to ensure operations do not alter resource states or violate client rights.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If clients directly access computer resources in parallel or sequentially, then ease of operation is improved, but security and data integrity deteriorate due to unsynchronized access and lack of awareness of resource conditions
Solution Approach 1:
The patent introduces a resource manager as an intermediary component between clients and computer resources. This resource manager mediates all access requests, enforcing synchronization and security policies. The resource manager maintains awareness of resource conditions and coordinates client operations to prevent conflicts and ensure data integrity, thereby resolving the contradiction between ease of operation and security.
2Reliability
If security policies and access restrictions are implemented, then security is improved, but device complexity increases due to additional monitoring and control mechanisms
Solution Approach 1:
The patent merges multiple security functions into a single integrated resource manager component. This resource manager combines access control, synchronization, monitoring, and coordination functions that would otherwise be distributed across multiple separate mechanisms. By consolidating these functions, the system achieves enhanced security while minimizing the increase in device complexity through functional integration.
3Reliability
If resource isolation is implemented using resource managers, then security is improved, but productivity decreases due to sequential processing requirements
Solution Approach 1:
The patent implements dynamic resource allocation and access control through the resource manager. Instead of rigid sequential processing, the system dynamically adjusts resource allocation based on current resource conditions, client priorities, and operation types. The resource manager can grant simultaneous access to multiple clients when resource conditions permit, thereby maintaining security through isolation while improving productivity through dynamic parallel processing when safe.
4Measurement precision
If detailed monitoring of resource operations is performed, then measurement precision is improved, but loss of time increases due to verification overhead
Solution Approach 1:
The patent implements preliminary action by having the resource manager establish access conditions, synchronization protocols, and monitoring parameters before clients begin operations. Resource conditions are pre-assessed and documented, allowing the system to make rapid access decisions during operation without extensive real-time verification. This preliminary setup enables detailed monitoring with reduced time loss during actual resource operations.
Data Source
AI summary
Disclosed are methods, systems, and computer program are provided for managing access to computer resources. An example method includes receiving a request, from a client process, for performing an operation on a computer resource, including receiving the request by a kernel of an operating system for creating a separate process to perform the requested operation on the computer resource; obtaining, by a resource manager, metadata of the computer resource, security policies for the client process to perform the requested operation on the computer resource, and data relating to operations requested by other client processes on the computer resource; and performing the requested operation on the resource upon detecting that the requested operation does not: alter the metadata, violate an isolation condition of the computer resource, violate rights of the client process, and distort the operations requested by the other client processes.