Secure File Transfer to Process via Move and Rename
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing file inter-process communication (IPC) methods in operating systems like UNIX and Linux face challenges in achieving secure and efficient unidirectional data transfer, with move-based solutions being time and resource efficient but not secure, and copy-based solutions being secure but inefficient, especially in multi-process environments.
Innovation Solution
A secure move process that utilizes rename system calls, discretionary access controls (DAC), and mandatory access controls (MAC) to ensure unidirectional file transfer by updating file pointers, ownership, and permissions, while performing a unique access check to prevent unauthorized access, thereby providing directionality and non-bypassability without copying the file contents.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If move-based solution is used for file transfer, then time efficiency and resource usage are improved, but security is worsened because processes can access files after move
Solution Approach 1:
The patent performs the move operation first to change the file location and break existing process access, then subsequently updates access controls and performs unique access checks. This preliminary action ensures that by the time security checks are performed, the file has already been relocated, preventing unauthorized access while maintaining efficiency.
2Reliability
If copy-based solution is used for file transfer, then security is improved by preventing unauthorized access, but time efficiency and resource usage are worsened
Solution Approach 1:
The patent segments the file transfer process into distinct phases: move operation, access control updates, and unique access verification. This segmentation allows the system to benefit from the efficiency of move operations while incorporating security checks, rather than requiring complete copying for security.
3Ease of operation
If traditional file IPC is used, then ease of operation is improved, but directionality control and process bypass prevention are worsened
Solution Approach 1:
The patent implements feedback mechanisms through unique access checks that verify whether any other processes have the file open before allowing the move operation to complete. This feedback loop ensures directional control and prevents process bypass while maintaining a simple interface for legitimate file transfers.
Data Source
AI summary
Discussed herein are methods, devices, and systems for moving a file to a process. A device can include a kernel, a memory, and processing circuitry to: issue one or more move and rename instructions to the memory to change a location and name of a file requested by the second process, issue one or more update access control instructions to update permissions, perform a UAC to determine whether any processes other than the second process currently have the file open and whether any MMaps have the file open, and allow the second process to access the renamed and moved file only if it is determined that no other processes other than the second process have the file open and no MMaps have the file open.