Secure Inter-Process Communication via Export File Type Definitions
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Sandboxing in computing devices isolates applications, making it difficult to share application state information securely and efficiently, requiring cumbersome workarounds that can expose sensitive information.
Innovation Solution
Implementing secure inter-process communication mechanisms that allow applications to share data objects through export file type definitions, enabling seamless data transfer between isolated applications while maintaining security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If sandboxing is implemented to isolate applications, then application security is improved, but data sharing capability deteriorates
Solution Approach 1:
The patent introduces an intermediary mechanism (the operating system's inter-process communication framework) that mediates between isolated applications. This mediator enables controlled data exchange through defined interfaces and permissions, allowing applications to share data securely without direct access to each other's memory spaces. The intermediary handles data serialization, permission verification, and secure transmission protocols.
2Object-affected harmful factors
If sandboxing is implemented to isolate applications, then information protection is improved, but sharing efficiency deteriorates
Solution Approach 1:
The patent implements preliminary action by pre-defining data sharing interfaces, permission models, and communication protocols before applications need to exchange data. The operating system establishes these frameworks in advance, so when applications need to share data, they simply need to invoke pre-approved interfaces rather than negotiating security protocols in real-time. This reduces overhead and improves sharing efficiency while maintaining protection.
3Ease of operation
If data objects are made accessible to all applications, then data sharing capability is improved, but security control deteriorates
Solution Approach 1:
The patent applies local quality by implementing fine-grained access control where different applications receive different levels of data access rights based on their specific needs and trust levels. Rather than uniform access to all data, the system provides targeted access to specific data objects or data categories to specific applications. This is achieved through capability-based security models and selective data exposure mechanisms that grant access only where explicitly permitted.
Data Source
AI summary
An application may provide an export file type definition indicating data objects that may be shared with another application. Sharing data objects between applications may include obtaining the export file type definition from the application and displaying a graphical user interface based at least in part on the export file type definition. Data objects may be selected through the graphical user interface and provided to another application based at least in part on the selection.


