Special Handler for Computing Device Resource Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems for protecting resources in computing devices are resource-intensive and unsuitable for devices with limited resources, as they often require substantial computational power and memory to effectively manage access and intrusion detection.
Innovation Solution
A system and method that associate resources with a special handler, which determines access requests from an operating system, allowing or denying access based on predefined rules and criteria, and can provide access to a dummy resource or log attempts, enabling the operating system to invoke subsequent handlers for actual access while managing access efficiently.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If substantial resources are allocated to protect resources in a computing device, then security protection capability is improved, but resource consumption increases making it unsuitable for devices with limited resources
Solution Approach 1:
A special handler is introduced as an intermediary component between the operating system and resources. The handler intercepts access requests, evaluates them against security criteria, and determines whether to allow access. This intermediary approach enables security enforcement without requiring the entire system to be resource-intensive, as the handler can be designed to operate efficiently with minimal overhead.
Solution Approach 2:
The patent creates dummy resources that replicate the interface and behavior of actual resources. When security policies prevent access to real resources, the system can provide access to dummy resources instead, maintaining system functionality and user experience while protecting the actual resources. This copying strategy allows security protection without requiring substantial additional resources.
2Reliability
If comprehensive access control and intrusion detection are implemented, then security monitoring capability is improved, but device complexity increases
Solution Approach 1:
The security system is segmented into discrete, modular components including the special handler, resource access policies, logging mechanisms, and dummy resource generators. Each component performs a specific function independently, making the overall system easier to manage and maintain despite its comprehensive capabilities. The handler can be configured to enable or disable specific monitoring functions based on system needs.
Solution Approach 2:
The special handler is designed as a universal component that can manage access to multiple different types of resources (files, devices, memory, etc.) through a single interface. This multi-functionality reduces system complexity by eliminating the need for separate access control mechanisms for each resource type, while still providing comprehensive security monitoring capabilities.
Data Source
Figure 1
Figure 2
Figure 3A~3B
AI summary
A system and method for controlling operation of a computing device may include associating a resource with a first manager; receiving, by the first manager and from a source, a request to access the resource; selecting, by the first manager, whether or not to allow the source to access the resource, and: if selecting to allow access then refusing the request, and if selecting to prevent access then performing at least one of: providing access to a dummy resource, preventing access to the resource, logging an attempt to access the resource, and reporting an attempt to access the resource.