Security Policy Register for Operation Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional electronic devices lack an effective mechanism to differentiate and restrict operations at different processor modes, allowing malicious software to bypass security restrictions and execute unintended operations.
Innovation Solution
A security mechanism that validates operations by checking if the memory location of an application requesting an operation is within authorized address ranges defined in a security policy register, ensuring only intended operations are performed.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If processor modes are used to restrict operations, then operation security is improved, but malicious software can still bypass these restrictions
Solution Approach 1:
The patent applies preliminary action by establishing a security policy register before execution occurs. The policy register is configured in advance with authorized operation definitions and associated memory address ranges. During execution, every operation request is automatically verified against this pre-configured policy, preventing malware bypass attempts before they can execute harmful code.
Solution Approach 2:
The patent introduces an intermediary mechanism - the security policy register - that sits between the processor execution phase and the operation requests. This intermediary validates each operation request by checking whether the requesting application's memory location falls within the authorized address ranges defined in the policy register, thereby mediating and controlling access to prevent malware execution.
2Reliability
If operation verification is performed prior to execution, then security is improved, but processing time increases
Solution Approach 1:
The patent applies self-service by enabling the processor to perform the security verification autonomously during the execution phase. The security policy register is checked automatically as part of the normal operation request handling, eliminating the need for external verification systems and minimizing additional processing overhead while maintaining strong security.
3Reliability
If a security policy register with address ranges is implemented, then operation authenticity is improved, but system complexity increases
Solution Approach 1:
The patent applies parameter changes by transforming the security verification process into a simple address range comparison. Instead of complex authentication protocols, the system uses memory address parameters and predefined ranges in the security policy register. This parameter-based approach simplifies the verification logic while maintaining strong authenticity guarantees.
Data Source
AI summary
A device, system, and method secures executable operations through verification of an operation prior to execution. The method performed at an electronic device comprising a processor in an execution state and a memory representable with a memory map includes receiving a request for the operation from an application installed on the electronic device, the request including a location in the memory map. The method includes determining whether the location is within one of at least one address range included in a security policy register generated prior to the execution phase, the at least one address range respectively corresponding to at least one authorized operation. The method includes, when the location is within one of the at least one address range, servicing the request to perform the operation.