Secure Windowing Service for Labeled Containers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In computer systems, particularly in government security implementations, there is a need to restrict access to information based on clearance levels to prevent security breaches, as windowing services can potentially facilitate unauthorized access to sensitive information across different processes and containers.
Innovation Solution
Implementing a windowing service with access control capabilities that utilizes labeled containers to ensure only properly cleared processes can access window-associated information, by comparing sensitivity labels to determine access permissions and enforcing dominance criteria to restrict access accordingly.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a windowing service allows processes to access window-associated information without access control, then ease of operation is improved, but security reliability deteriorates
Solution Approach 1:
The windowing service acts as an intermediary between processes and window-associated information. It mediates access requests by comparing the sensitivity labels of requesting processes with the labels of the information they seek to access. This intermediary mechanism enables secure access control while maintaining operational ease, as processes can still use the windowing service normally but with automated security enforcement.
2Reliability
If access control mechanisms are implemented in the windowing service, then security reliability is improved, but device complexity increases
Solution Approach 1:
The patent implements access control by changing the parameter of sensitivity labels assigned to processes and window-associated information. The windowing service compares these label parameters to determine access permissions. This parameter-based approach adds security functionality without fundamentally restructuring the windowing service, thereby limiting the increase in device complexity.
3Reliability
If sensitivity label comparison is performed for every access request, then security reliability is improved, but productivity decreases
Solution Approach 1:
The system performs preliminary actions by assigning sensitivity labels to processes and window-associated information in advance, before actual access requests occur. When access requests are made, the windowing service simply compares these pre-assigned labels rather than performing complex security evaluations. This preliminary labeling approach maintains security reliability while improving access speed.
Data Source
AI summary
A secure windowing service is disclosed. When the windowing service receives an indication that a second client (executing in a second container) wishes to be given access to a set of windowing information provided by a first client (executing in a first container), the windowing service determines, based upon sensitivity labels associated with the first and second containers, whether the second client should be given access to the windowing information provided by the first client. By making this determination, the windowing service in effect implements information access control. This information access control helps to ensure that windowing information is not improperly passed from container to container.