Secure Content Buffering via Kernel Space Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for reproducing encrypted content data do not adequately ensure confidentiality, particularly in open platforms where malicious applications can access plain-text content data stored in user memory, compromising copyright protection.
Innovation Solution
The method involves decrypting encrypted content data, dividing it into decrypted content data and reproduction management information, storing the decrypted content data in a secret kernel space buffer, and sending the reproduction management information to the user space, limiting access and ensuring confidentiality by separating sensitive data from applications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If plain-text content data is stored in user space buffer for smooth reproduction, then reproduction performance is improved, but confidentiality of content data deteriorates
Solution Approach 1:
The patent segments the buffer into two distinct spaces: user space buffer for reproduction management information and kernel space secret buffer for decrypted content data. This segmentation allows reproduction operations to proceed efficiently while maintaining security boundaries, resolving the contradiction between performance and confidentiality.
Solution Approach 2:
The patent extracts the decrypted content data from the user space buffer and stores it separately in the kernel space secret buffer. This extraction removes the security risk from the user space while maintaining the reproduction functionality, thus improving confidentiality without sacrificing reproduction performance.
2Ease of operation
If applications have free access to memory map in user space, then ease of operation is improved, but security against malicious applications deteriorates
Solution Approach 1:
The patent segments memory access permissions by separating reproduction management information (accessible to user space applications) from decrypted content data (stored in kernel space secret buffer). This segmentation maintains ease of operation for legitimate applications while preventing malicious applications from accessing sensitive content data.
Solution Approach 2:
The patent introduces the kernel space secret buffer as an intermediary layer between applications and decrypted content data. Applications access content through controlled interfaces rather than direct memory access, acting as a security mediator that prevents malicious applications from compromising content confidentiality while maintaining operational ease for legitimate uses.
Data Source
AI summary
A content data reproducing method includes: decrypting encrypted data to generate plain-text data; dividing the plain-text data into decrypted content data and reproduction management information; sending the reproduction management information to a user space; storing the decrypted content data in a secret buffer; obtaining the decrypted content data as reproduction target data from the secret buffer and transmitting the reproduction target data to a decoder; and decoding the reproduction target data by the decoder.