Secure File Memory Access with DRM-Checked Dual Pointers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data management systems fail to enforce data access rights configured by DRM software after data is copied to shared memory, allowing unauthorized applications to access secure data.
Innovation Solution
Implement a data access manager that intercepts function calls to the memory management unit, determining access permissions using DRM software and managing secure and clear data pointers to enforce access rights.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If data is copied from data storage device to shared memory for rapid access, then access speed is improved, but security is worsened because the memory management unit cannot check DRM access rights
Solution Approach 1:
The patent introduces a data access manager as an intermediary component between applications and the memory management unit. This mediator intercepts function calls, verifies DRM access rights, and manages separate pointers to secure and clear data in memory, thereby maintaining security while enabling fast memory access
Solution Approach 2:
The patent segments memory storage by creating separate storage locations for secure data and clear data. The data access manager maintains separate pointers to these segmented regions, allowing the system to provide both fast access to clear data and security protection through controlled access to secure data
2Productivity
If the memory management unit returns a pointer to already copied data for subsequent access, then access efficiency is improved, but security is worsened because multiple applications can access the same data location
Solution Approach 1:
The data access manager acts as a mediator that intercepts function calls before they reach the memory management unit. It verifies access rights using DRM credentials and determines whether to return a pointer to secure data or clear data, thereby maintaining access efficiency while enforcing security policies
Solution Approach 2:
The patent applies local quality by providing different access rights to different applications based on their credentials. The data access manager checks each application's DRM credentials and returns appropriate pointers - either to secure data for authorized applications or to encrypted data for unauthorized ones, thereby customizing access control locally for each application
Data Source
Figure 1~2
Figure 3
Figure 4
AI summary
A data access manager is provided on a computing device to manage access to secure files stored in memory. The data access manager intercepts function calls from applications to the memory management unit and determines whether an application is allowed to access secure data stored in the memory of the computing device. When an initial request to map the data is received, the data access manager maps both secure data and dear data, obtaining pointers to both secure and clear data. When an application has permission to access the requested data, the data access manager returns the pointer to the clear data. When an application does not have permission to access the requested data, the data access manager returns the pointer to the secure data.