Secure Domain Indicator Using User-Specific Image Display
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure user interface systems fail to reliably indicate to users when they are operating within a secure domain, as icons can be easily mimicked, dedicated hardware is not desirable, and external indicators are costly.
Innovation Solution
A processor generates and displays a user-specific image accessible only within the secure domain, which can be a photo, video, or dynamically generated, stored in secure memory, and displayed on the screen, ensuring authenticity and security without requiring dedicated hardware.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If a generic icon (e.g., padlock) is displayed to indicate secure operation, then the indication is simple and easy to implement, but the icon can be easily mimicked by unauthorized applications
Solution Approach 1:
The display area is segmented into a secure zone and a normal zone. The secure zone displays the user-specific image that is exclusively accessible from the secure domain, while the normal zone displays regular application content. This spatial segmentation ensures that only authenticated secure applications can display content in the secure zone, preventing mimicking by unauthorized applications.
Solution Approach 2:
A portion of the display screen is designated with special properties as a secure zone. This zone has different access controls and rendering rules compared to the normal display area. The user-specific image displayed in this zone carries local quality attributes (exclusivity to secure domain) that make it distinguishable and trustworthy, resolving the contradiction between simplicity and reliability.
2Reliability
If a dedicated external indicator (e.g., LED) is provided to indicate secure mode, then the security indication is reliable and clear, but the cost increases significantly
Solution Approach 1:
The display screen serves multiple functions: it displays both normal application content and secure domain indicators simultaneously. The secure zone on the display acts as both a functional display area and a security indication mechanism, eliminating the need for separate dedicated indicator hardware. This multi-functionality resolves the contradiction by making the display itself provide reliable security indication without additional cost.
Solution Approach 2:
The security indication function is merged with the existing display screen functionality. Instead of adding a separate LED indicator, the patent combines the security status display with the main screen by allocating a portion of it as a secure zone. This merging eliminates additional hardware costs while maintaining clear and reliable security indication through the user-specific image.
3Reliability
If a dedicated screen space is allocated for secure indication, then the security indicator is always visible and prominent, but the available screen space for applications is reduced
Solution Approach 1:
The secure zone is dynamically positioned and sized within the display area. Rather than allocating fixed dedicated space, the secure zone can adapt its position and dimensions based on available screen real estate and application requirements. This dynamic approach ensures the security indication remains visible and prominent while minimizing impact on application display space, resolving the contradiction between visibility and space availability.
Data Source
AI summary
A data processing apparatus and a method of indicating operation of a data processor within a secure domain. The apparatus comprising a display for displaying data; a processor operable in a secure domain, said processor when operating in said secure domain having access to a user specific image; wherein said processor is operable to indicate operation within said secure domain by displaying said user specific image on at least a portion of said display when operating within said secure domain.