Security Manager Mediator for Application Trust
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security systems for software applications are inadequate in ensuring secure communication and data protection, as once a computing device is infected with malware, applications can be snooped upon, and security policies cannot be easily updated or enforced.
Innovation Solution
A centralized security manager application module modifies software application object code to introduce encryption, policy engines, and secure communication channels, ensuring compliance with security policies and establishing trust between applications using shared secrets and public key infrastructure (PKI) keys.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a centralized security manager modifies application object code to introduce encryption and security policies, then security reliability is improved, but device complexity increases
Solution Approach 1:
A centralized security manager application module is introduced as an intermediary component that mediates between applications and security services. The security manager modifies application object code to include security functionality, acting as a mediator that provides encryption, authentication, and policy enforcement without requiring each application to implement these features independently. This resolves the contradiction by centralizing security complexity in a dedicated manager while maintaining reliability through consistent security enforcement across all applications.
Solution Approach 2:
The security manager application module provides multiple security functions (encryption, authentication, authorization, policy enforcement) through a single unified component. By modifying application object code to call this universal security manager, the system achieves comprehensive security coverage without duplicating security mechanisms across multiple applications, thereby improving reliability while managing device complexity through functional consolidation.
2Reliability
If security policies are enforced through object code modification, then security policy compliance is improved, but ease of operation deteriorates
Solution Approach 1:
The security manager application module automatically enforces security policies by modifying application object code to include security checks and compliance verification. The system performs self-service security enforcement without requiring manual intervention for each security policy application, improving compliance reliability while maintaining ease of operation through automated policy implementation. Applications are automatically configured with security requirements through object code modification rather than manual security configuration.
3Reliability
If applications establish trust through shared secrets and PKI keys, then security reliability is improved, but device complexity increases
Solution Approach 1:
The security manager consolidates trust establishment mechanisms (shared secrets and PKI keys) into a unified authentication framework. Instead of implementing separate trust mechanisms in each application, the security manager provides a combined authentication service that handles both shared secret verification and PKI key validation through a single integrated interface. This merging approach improves trust establishment reliability while reducing device complexity by eliminating redundant authentication implementations across multiple applications.
Data Source
AI summary
Systems, methods and machine-readable media for providing a security service are disclosed. The methods include receiving a modification of the application object code to allow the software application to transmit a request for the security service; retrieving the modified application object code corresponding to the software application from memory; receiving, via a processor, the request for the security service from the modified application object code; and providing, via the processor, the security service. The systems and machine-readable media performing operations according to the methods disclosed.