Shared Memory Channel Authentication Across Security-Level Subsystems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data communication technologies in complex systems like aviation, autonomous driving, and robotics face challenges in achieving high-security and high-performance data transmission between subsystems with different information security levels.
Innovation Solution
A data transmission method involving a first and second subsystem with authentication processes and shared memory channels, where the second subsystem authenticates the first application and allocates channel information for secure communication, ensuring identity authentication and consistency checks to establish shared memory channels.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If authentication processes are implemented between subsystems with different information security levels, then security is improved, but communication complexity increases
Solution Approach 1:
The system segments authentication by creating separate authentication processes for different security levels (first authentication process for first security level, second authentication process for second security level). Each authentication process handles specific security level requirements independently, reducing overall complexity while maintaining security.
Solution Approach 2:
The patent introduces channel information as an intermediary element that mediates communication between subsystems of different security levels. The channel information includes security level identifiers and authentication status, allowing subsystems to communicate without direct complex authentication interactions.
2Productivity
If shared memory channels are established for data communication, then communication performance is improved, but security risks increase
Solution Approach 1:
The patent applies local quality by assigning different security attributes to different channel information based on the security levels of communicating subsystems. Each shared memory channel is tagged with security level information, allowing high-performance shared memory access while maintaining appropriate security restrictions for each channel.
Solution Approach 2:
The system changes security parameters dynamically by including authentication status and security level identifiers in the channel information. This allows the same shared memory infrastructure to support both high-performance communication and security requirements by adjusting security parameters based on the specific communication context.
3Reliability
If identity authentication is performed between applications in different subsystems, then communication security is improved, but authentication time increases
Solution Approach 1:
The patent implements preliminary action by pre-establishing authentication relationships and channel information between subsystems. The authentication process and channel information are set up in advance, allowing applications to communicate securely with reduced authentication overhead during actual data transmission.
Data Source
AI summary
A data transmission method includes the following. A first application sends request information to a second authentication process, where the request information is for requesting to communicate with the second application; the second authentication process performs authentication on the first application based on the received request information, and allocates channel information for communication between the first application and the second application after authentication succeeds, where the channel information indicates a shared memory channel for communication between the first application and the second application; the second authentication process sends the channel information to the first application and the second application; and the first application and the second application establish the shared memory channel based on the channel information, and communicate with each other through the shared memory channel.