Secure OS Peripheral Access Filtering via TRIZ Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
ARM TrustZone lacks a clear functional structure to securely filter access to peripherals, necessitating a solution for converting peripheral access through encryption and filtering in virtualization scenarios.
Innovation Solution
An information processing apparatus with a processor configured to switch between secure and non-secure modes, featuring a secure OS and a non-secure OS, along with a monitor that manages access rights and performs data processing, including a processing table management controller, memory protection setting controller, and secure device access controller to filter and encrypt data access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If ARM TrustZone memory protection function is used to monitor peripheral access, then access monitoring capability is improved, but functional structure clarity and secure filtering capability deteriorate
Solution Approach 1:
The patent segments the peripheral access control function into distinct modules: a processing table management controller that manages access rules, a processing determination controller that determines whether filtering is needed, and a processing execution controller that performs the actual filtering. This segmentation provides clear functional structure while maintaining monitoring capability.
Solution Approach 2:
The patent introduces an intermediary processing determination controller that sits between the memory protection unit and the peripheral access control. This intermediary analyzes access requests, consults the processing table, and determines whether filtering should be applied, thereby providing clear functional structure for secure filtering.
2Productivity
If virtualization techniques are used to run multiple OSes on a single computer, then system utilization is improved, but secure peripheral access filtering deteriorates
Solution Approach 1:
The patent implements dynamic access control where the processing determination controller dynamically evaluates each peripheral access request based on the current OS context and processing table rules. This dynamic approach enables secure filtering while supporting multiple virtualized OSes with different access requirements.
Solution Approach 2:
The patent applies local quality by allowing different filtering policies for different peripherals and different OS contexts. The processing table stores specific rules for each peripheral, enabling tailored security policies for each device while maintaining overall system virtualization.
3Reliability
If encryption filtering is implemented for peripheral access conversion, then data security is improved, but processing complexity deteriorates
Solution Approach 1:
The patent implements preliminary action by pre-configuring the processing table with encryption rules and keys before peripheral access occurs. The processing table management controller prepares the filtering policies in advance, so that during actual access, the processing determination controller can quickly consult the pre-prepared rules without complex real-time decision-making.
Data Source
AI summary
According to an embodiment, an information processing apparatus includes a secure OS, a non-secure OS, and a monitor. The monitor is configured to switch between the OSs. The secure OS includes a memory protection setting controller, a processing determination controller, and a secure device access controller. The memory protection setting controller is configured to set a protection address in a memory for each certain processing. The processing determination controller is configured to receive an access type, a physical address of an access destination, and data to be written, acquire a list of processing, and determine a type of processing to be performed. The secure device access controller is configured to receive the access type, the physical address of an access destination, and data to be written, and access a peripheral identified by the physical address.