Virtual Machine Data Processing Using Secure Isolation Environments
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Virtual machines lack a secure environment for running programs and processing data, leading to potential information leakage and high security risks.
Innovation Solution
Implement a data processing host with a program running environment and a first isolation environment, where the first isolation environment operates in a secure mode, including an operating system and resources to run secure processing programs, isolated from the non-secure program running environment.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a virtual machine is used to run programs and process data, then program execution and data processing are enabled, but security is compromised and information leakage occurs
Solution Approach 1:
The system is divided into two distinct environments: a non-secure program running environment for general operations and a secure isolation environment for sensitive data processing. This segmentation allows programs to execute normally while sensitive operations occur in an isolated secure context, preventing information leakage without requiring complete system redesign.
Solution Approach 2:
A host system acts as an intermediary between the virtual machine and the secure isolation environment. The host manages the secure environment, allocates resources, and controls data flow between environments. This intermediary provides security management capabilities while maintaining compatibility with existing virtual machine architectures.
2Reliability
If a secure environment is created for data processing, then data security is improved, but system complexity increases
Solution Approach 1:
The secure isolation environment merges multiple security functions including operating system protection, resource isolation, and program execution control into a single integrated environment. This consolidation provides comprehensive security without requiring separate complex systems for each security function, reducing overall system complexity while maintaining high security standards.
3Reliability
If isolation is implemented between program environment and secure environment, then information leakage is prevented, but resource sharing becomes difficult
Solution Approach 1:
The host system serves as an intermediary that manages resource sharing between the non-secure program running environment and the secure isolation environment. It controls data flow, manages memory allocation, and coordinates resource access, enabling secure programs to access necessary resources while maintaining isolation boundaries that prevent unauthorized information leakage.
Solution Approach 2:
The secure isolation environment is designed with universal resource access capabilities through the host manager, allowing different types of resources (CPU, memory, storage, I/O) to be allocated and managed uniformly. This multi-functional resource management system supports various secure processing needs while maintaining a single coherent isolation framework.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A data processing method, a data processing host, and a data processing apparatus are provided and pertain to the IT field. The host includes a program running environment (1) and a first isolation environment (2), the program running environment (1) is an environment in which the host operates in a non-secure mode, and the first isolation environment (2) is an environment in which the host operates in a secure mode; the program running environment (1) includes at least one virtual instance (11) operating in the non-secure mode, and the first isolation environment (2) corresponds to the virtual instance (11) in the program running environment (1); and the first isolation environment (2) includes an operating system in the secure mode and a resource allocated to the first isolation environment (2). The resource includes a first isolation space and a processor resource. The first isolation space is used to run the operating system and a secure processing program, and store to-be-processed data. The secure processing program corresponds to a program in the virtual instance (11) and is used to process the to-be-processed data. The first isolation space is isolated from the program running environment (1). This can improve data processing security.