Secure Store File System Filter for Warranty Data Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems lack a secure method to determine whether a product is warranty-eligible, as they only consider the warranty period and not the maximum usage number, which is often confidential and inaccessible to users.
Innovation Solution
A secure system and method that protects warranty information, including maximum usage numbers, using a secure store with embedded security credentials and a file system filter layer to verify access, ensuring only authorized applications can access the data, and preventing users from unmounting or formatting the secure partition.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If warranty information including maximum usage number is stored in a secure store with embedded security credentials, then security and data protection are improved, but device complexity and access control mechanisms increase
Solution Approach 1:
The patent divides the security system into distinct layers: a secure store for storing warranty information, a file system filter driver for access control, and embedded security credentials. This segmentation allows each component to perform its specific function independently, improving security while managing complexity through modular architecture.
Solution Approach 2:
The file system filter driver acts as an intermediary between applications and the secure store. It intercepts all access requests, verifies security credentials, and controls data flow. This intermediary layer simplifies the overall system by centralizing security logic in one component rather than distributing it throughout the system.
2Reliability
If security credentials are embedded in the application and verified by a file system filter layer, then access security is improved, but ease of operation and maintenance are worsened
Solution Approach 1:
The system performs security verification automatically without requiring user intervention. The file system filter driver autonomously checks security credentials embedded in applications attempting to access the secure store, eliminating the need for users to manually manage security credentials while maintaining strong access control.
Solution Approach 2:
Security credentials are embedded in applications during the development phase, before the applications need to access the secure store. This preliminary action ensures that security verification can occur automatically at runtime without requiring user input or manual configuration, simplifying operation while maintaining security.
3Reliability
If the secure partition cannot be unmounted or formatted by users, then security and data integrity are improved, but ease of repair and maintenance are worsened
Solution Approach 1:
The system provides different access levels based on user role: regular users cannot unmount or format the secure partition to protect data integrity, while administrators can perform these operations through the bootloader for maintenance purposes. This dynamic access control resolves the contradiction by allowing restricted access for most users while maintaining administrative flexibility.
Solution Approach 2:
The bootloader serves as an intermediary interface for partition maintenance. Administrators can format or repair the secure partition through the bootloader, which provides a controlled environment for maintenance operations without exposing regular users to these functions. This intermediary approach maintains data integrity for users while enabling necessary maintenance capabilities.
4Reliability
If the file system filter layer verifies security parameters and logs application PID, then security monitoring is improved, but processing time and system overhead increase
Solution Approach 1:
Security credentials are embedded in applications during development, and security parameters are prepared in advance. When applications access the secure store, the verification process uses these pre-prepared credentials, reducing the time required for runtime verification while maintaining comprehensive security monitoring.
Solution Approach 2:
The file system filter driver implements feedback mechanisms by logging the PID of verified applications and monitoring access patterns. This feedback enables the system to track security events and adjust access control policies dynamically, improving security monitoring efficiency while minimizing processing overhead through intelligent decision-making based on historical data.
Data Source
AI summary
A computer system, computer product, and method for accessing a secure store, which includes receiving a request to access a secure store, checking the file path of the request to make sure it exists in the secure store, verifying security parameters from the process at the file system filter layer, saving the PID of the process by the file system filter layer, comparing the saved PID to the process's PID, and allowing the process to access the path in the secure store specified in the request.