Secure Flow Container for Information Flow Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current computer systems lack effective mechanisms to enforce security policies on information flows, allowing unauthorized access and misuse of data once accessed by clients.
Innovation Solution
Implementing a secure flow container system that enforces information flow policies across component boundaries using virtualization, with a permission data store managing access and integrity labels to control data flow between entities, and monitors intercepting communications to validate permissions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional authorization control is used to manage data access, then client access to services is controlled, but no control exists over what the client does with the data after access
Solution Approach 1:
The patent segments the data access control into two distinct phases: authorization control for accessing services, and information flow control for managing data usage. This is achieved by introducing separate security mechanisms that operate at different levels - traditional authorization handles service access while the new information flow control handles data propagation, thereby resolving the contradiction by dividing the security control function.
Solution Approach 2:
The patent introduces an intermediary information flow control mechanism that sits between the data source and the client. This intermediary monitors and controls data flow paths, enforcing policies on how data can be used and propagated after access is granted. The intermediary validates data flow requests against security policies, preventing unauthorized data usage while maintaining the original authorization decisions.
2Reliability
If no information flow control is implemented, then data access is simple, but unauthorized data flow and misuse can occur
Solution Approach 1:
The patent implements preliminary action by establishing information flow control policies before data access occurs. Security policies are predefined and registered in advance, specifying allowed data flow paths and restrictions. When data access requests are made, the system checks against these pre-established policies, preventing unauthorized data flow before it can occur rather than reacting after the fact.
Solution Approach 2:
The patent incorporates feedback mechanisms where the information flow control system continuously monitors data flow operations and enforces policies in real-time. The system provides feedback by validating each data flow operation against security policies, blocking unauthorized flows, and allowing compliant flows. This continuous feedback loop ensures unauthorized access prevention while maintaining controlled complexity through automated policy enforcement.
3Ease of operation
If data is accessed by a client, then the client can use the data, but there is no control over data usage and propagation
Solution Approach 1:
The patent introduces an intermediary information flow control layer that operates transparently between data sources and clients. This intermediary automatically enforces usage control policies without requiring changes to client applications or data access patterns. The intermediary validates data flow operations in the background, allowing legitimate data usage while blocking unauthorized propagation, thereby maintaining ease of operation while ensuring reliability.
Solution Approach 2:
The patent implements self-service by enabling the information flow control system to automatically enforce usage policies without requiring manual intervention. The system autonomously monitors data flows, validates operations against registered policies, and enforces restrictions automatically. This self-enforcing mechanism maintains ease of operation for users while ensuring reliable data usage control through automated policy compliance.
Data Source
AI summary
Secure information flow may include a service receiving a request for data from a caller. The service may respond to the request with the requested data via a secure flow container. The secure flow container may then send the information to the caller component. Before the secure flow container receives or sends the information, a monitoring environment may permit the secure flow container to receive or send the information, respectively.