Shared-Memory Process Identity for Secure Low-Latency IPC
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Intelligent connected vehicles face challenges in efficient and secure communication between processes due to service-based deployment and microkernel development trends, leading to increased inter-process communication delays and security vulnerabilities.
Innovation Solution
A communication method that allocates a memory in the kernel to carry process identity information, maps it to a shared memory, and controls visibility based on virtual address page tables, enabling efficient and secure inter-process communication by decoupling identity and payload data transfer.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional inter-process communication methods are used in kernel space, then communication security is maintained through kernel mediation, but communication delay increases due to repeated kernel transitions
Solution Approach 1:
The patent introduces shared memory as an intermediary mechanism that allows processes to exchange data directly in user space without repeated kernel transitions. The kernel mediates the initial setup by creating and mapping the shared memory segment, but subsequent communications occur directly between processes through this intermediary structure, eliminating the need for continuous kernel involvement and reducing communication delay while maintaining security through controlled access permissions.
Solution Approach 2:
The patent segments the communication process into two distinct phases: (1) kernel-space setup phase where shared memory is created, mapped, and permissions are configured, and (2) user-space execution phase where processes communicate directly through the mapped shared memory. This segmentation allows the system to benefit from both kernel-mediated security setup and efficient user-space direct communication, resolving the contradiction between security and speed.
2Reliability
If process identity information is stored separately from communication data, then security and clarity are improved, but communication complexity increases due to additional management overhead
Solution Approach 1:
The patent merges process identity information with communication data by storing both within the same shared memory segment. The identity information (such as process IDs or authentication tokens) is placed in designated regions of the shared memory alongside the actual communication payload. This unified approach simplifies the communication mechanism by eliminating separate identity management structures while maintaining security through proper memory region delimitation and access control.
Data Source
AI summary
Embodiments of this application provide a communication method and apparatus, and an intelligent driving device. The method includes: allocating, in a kernel, a first memory to a first process, where the first memory includes a memory used to carry identity information of the first process; filling the identity information of the first process into the first memory; and mapping the first memory to obtain a shared memory, so that a second process obtains the identity information of the first process by using the shared memory. Embodiments of this application may be applied to an intelligent vehicle or an electric vehicle, to help reduce an inter-process communication delay, and also help improve communication efficiency and certainty.