Secure Input Switching for Flexible Data Security Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional data security systems are inflexible and costly due to their limited ability to handle different input devices and software keypads, requiring redesign when devices or applications change, which restricts their adaptability and security.
Innovation Solution
A data security management system that switches management authority from a non-trusted first system to a trusted second system, transmitting layout information and input device characteristics to ensure secure data input and decoding, allowing for flexible handling of various input devices and applications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a trusted system is exclusively designed for a specific input device and software keypad, then data security is ensured, but the system becomes inflexible and costly when devices or applications change
Solution Approach 1:
The system is divided into two independent components: a trusted system that handles only security-critical functions (input reception and verification) and a non-trusted system that handles display and user interaction. This segmentation allows the trusted system to remain simple and secure while the non-trusted system provides flexibility for different devices and applications.
Solution Approach 2:
The patent introduces a switch as an intermediary component that controls the flow of input data between the non-trusted system (display interface) and the trusted system (secure processing). This mediator enables the trusted system to work with multiple different input devices without direct integration, maintaining security while improving adaptability.
2Adaptability or versatility
If the trusted system is redesigned for every new touch panel device or software keypad update, then compatibility is achieved, but development cost and time increase
Solution Approach 1:
The trusted system is designed with universal input handling capabilities that work with multiple types of input devices (touch panels, keyboards, mice) through standardized interfaces. This multi-functionality eliminates the need for redesigning the trusted system for each new device, reducing development costs while maintaining compatibility.
Solution Approach 2:
The system performs preliminary verification of input data in the trusted system before the data is processed by the non-trusted system. This preliminary action ensures that security checks are completed once in a generic manner, rather than needing to be repeated for each specific device type, reducing overall development effort.
3Reliability
If input procedures are solely processed by the trusted system, then security is maintained, but processing capability is limited
Solution Approach 1:
Processing tasks are segmented between two systems: the trusted system handles security-critical operations (input reception, verification), while the non-trusted system handles resource-intensive operations (display rendering, application logic). This segmentation allows each system to operate within its capabilities, maintaining security while improving overall processing capability.
Solution Approach 2:
The switch acts as an intermediary that enables efficient data transfer between the non-trusted system (with higher processing capability) and the trusted system (with security guarantees). This mediator allows the system to leverage the processing power of the non-trusted system while maintaining security through the trusted system, resolving the productivity-limitation issue.
Data Source
AI summary
Data security management system and methods are provided. First, a first system having a management authority is provided. The first system displays an input interface on an input device. A switch switches the management authority from the first system to a second system, wherein the second system operates with a secure mechanism. When the management authority is switched to the second system, the first system transmits layout information of the input interface and an input device characteristic of the input device to the second system. The second system receives input data via the input device, and decodes the input data according to the layout information and the input device characteristic.