Secure Application OS Function Verification via Log Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In secure computing environments, existing technologies face challenges in ensuring the correct execution of external OS functions by secure applications, which can introduce vulnerabilities and hinder advanced functionality.
Innovation Solution
An information processing apparatus with a secure application and a cooperative application that verifies the correctness of execution logs using verification rules, ensuring the integrity and tamper-resistance of OS function calls through a processor-based verification mechanism.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If external general-purpose OS functions are used by secure programs, then advanced functionality is enabled, but vulnerability introduction risk increases
Solution Approach 1:
A cooperative application acts as an intermediary between the secure application and the OS. The secure application calls functions of the cooperative application, which in turn calls OS functions. This intermediary layer isolates the secure application from direct OS interactions, enabling advanced functionality while reducing vulnerability introduction risk through controlled interface exposure.
2Reliability
If functions of secure programs are minimized to prevent vulnerability, then security is improved, but advanced process capability is hindered
Solution Approach 1:
The system segments functionality into three distinct components: secure application (minimal trusted code), cooperative application (interface layer), and OS (full functionality). This segmentation allows the secure application to maintain minimal footprint for security while accessing advanced OS processes through the cooperative application, resolving the contradiction between security and process capability.
3Reliability
If verification mechanisms are added to ensure correct OS function execution, then reliability is improved, but system complexity increases
Solution Approach 1:
The verification mechanism implements feedback by having the secure application receive and verify execution logs from the cooperative application. The issuance module issues commands with verification rules, and the log verification module checks whether actual execution matches expected behavior. This feedback loop ensures execution correctness while maintaining relatively simple system architecture.
Data Source
AI summary
According to an embodiment, an information processing apparatus includes: a memory on which first/second processing applications are stored, the first processing application being a secure application; and a processor that is coupled to the memory and executes the first and second processing applications. The first processing application includes an issuance module, a first communication module, and a log verification module. The issuance module issues a command to call a function of the second processing application and links the command to a verification rule. The first communication module transmits, to the second processing application, a command execution request including command identification information that identifies the command, and receives, from the second processing application, an execution log including an execution result of the command identified by the command identification information. The log verification module verifies correctness of the received execution log in accordance with the verification rule.