Multi-Level Security Display Secure Input Routing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In multi-level security (MLS) display environments, existing systems fail to securely distribute human-machine input/output to ensure that input is routed to the correct security domain and widget, particularly when multiple user applications with different security levels are involved, leading to potential unauthorized access.
Innovation Solution
A system and method utilizing an input device manager to categorize user input as selection or message input, determine the active display, and securely route it to the corresponding graphics server and application, ensuring that input is processed within the intended security domain, with visual indicators to aid the user in identifying the active security level.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If out-of-band input data is passed directly from input device to all user applications, then input processing is simple and fast, but security is compromised as input can be accessed by applications without proper authorization
Solution Approach 1:
The patent introduces an intermediary component (the graphics server or display manager) that sits between the input device and the user applications. This intermediary receives input data, determines the security domain based on the active display, and selectively forwards the input to the appropriate application. This resolves the contradiction by maintaining fast input processing while adding a security layer that prevents unauthorized applications from accessing input data.
2Device complexity
If input is routed to all applications with focus, then input distribution is simple, but unauthorized access occurs when multiple applications with different security levels are involved
Solution Approach 1:
The patent applies local quality by making the input distribution behavior different for different applications based on their security clearance and the active display. Instead of uniform distribution to all focused applications, the system selectively distributes input only to applications that have both focus and appropriate security authorization for the current display context. This maintains simplicity in the distribution mechanism while achieving secure access control.
3Reliability
If a graphics server is involved with input processing in MLS environment, then secure input distribution is achieved, but system complexity increases
Solution Approach 1:
The patent makes the graphics server multi-functional by having it handle both graphics rendering and input processing/security control. Instead of adding separate dedicated security modules, the graphics server performs multiple functions: displaying content, managing input processing, determining active displays, and controlling input distribution to applications. This universal approach achieves secure input distribution while minimizing the increase in system complexity by consolidating functions rather than adding separate components.
Data Source
AI summary
A method and system for securely distributing human-machine input/output to multi-level displays in a multi-level security environment is disclosed. The method and system in accordance with the present disclosure provides the ability to take input from common input devices and manages the input to ensure that the input is delivered only to the intended security domain/level and that the input is delivered only to the intended display element within the intended security domain/level. Furthermore, architectures configured for supporting the multi-level security display with secure input/output are also disclosed.