Single-Task OS Mode with Selective Process Suspension
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Modern computing systems face increased security risks due to concurrent processes, especially during sensitive tasks like password entry, where malicious software can steal sensitive information, and existing security measures either fail to protect or impose undue burdens on users.
Innovation Solution
Implementing a single task mode in operating systems that suspends all programs and subsystems, then reactivates only a subset correlated with the sensitive task, using a dedicated scheduler to manage these processes, and ending the mode based on application feedback.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If multiple concurrent processes are allowed to run on the system, then system productivity and user convenience are improved, but system security and reliability deteriorate due to increased attack surface from malicious software
Solution Approach 1:
The system dynamically adjusts its operational state by switching between normal mode (multiple processes allowed) and single-task mode (only essential processes allowed). This dynamic transition enables the system to optimize between productivity and security based on the current task being performed, particularly protecting sensitive operations while maintaining overall system functionality.
Solution Approach 2:
The system changes the parameter of process concurrency from multiple to single by initiating single-task mode. This parameter change reduces the attack surface during sensitive operations while allowing full concurrency during normal operations, effectively resolving the contradiction between productivity and security.
2Reliability
If all programs and subsystems are suspended during sensitive tasks, then system security is improved by reducing attack surface, but system complexity and operational burden increase
Solution Approach 1:
The system segments processes into two categories: essential processes needed for sensitive tasks and non-essential processes that can be suspended. This segmentation allows selective suspension of only necessary processes while maintaining others, reducing complexity compared to suspending all processes while still achieving security goals.
Solution Approach 2:
A dedicated single-task mode scheduler acts as an intermediary to manage process suspension and reactivation. This specialized scheduler automates the complex coordination of suspending and reactivating processes, reducing the operational burden on users while maintaining system security.
3Measurement precision
If a dedicated single-task mode scheduler is implemented, then task scheduling precision and security are improved, but device complexity increases
Solution Approach 1:
The dedicated single-task mode scheduler provides specialized scheduling precision only when needed during sensitive operations, rather than implementing complex scheduling throughout the entire system. This localized approach to high-precision scheduling reduces overall system complexity while maintaining scheduling precision where it matters most.
Data Source
AI summary
A computer-implemented method, according to one approach, includes: initiating, by an operating system and based at least in part on information received from an application, a single task mode. The single task mode is configured to: suspend all programs and subsystems running on a computer, and subsequently reactivate a subset of the suspended programs and subsystems. The subset of the suspended programs and subsystems that are reactivated enables completion of a sensitive task. A dedicated single task mode scheduler also schedules the sensitive task using the reactivated subset of the programs and subsystems, and the sensitive task is completed. Furthermore, the single task mode is ended by the operating system based at least in part on additional information received from the application.