Temporally Isolating Data via Mode Switch Controller
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional security methods for computing devices are susceptible to data breaches as they store secure data on the device, making it accessible to the operating system, which can be compromised by hackers or malicious code, even with virtualized layers of security.
Innovation Solution
A method and system for temporally isolating data accessed by a computing device, where a mode switch controller and security processor ensure that only a single set of data is accessible, removing all other data and operating in a specific mode based on security policies, preventing access to unauthorized data even if security measures are circumvented.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If data is stored on the computing device for accessibility, then data access convenience is improved, but security against hackers and malicious code deteriorates
Solution Approach 1:
The patent segments data into multiple distinct sets (first set, second set, third set) that are stored in different locations and accessible under different conditions. The mode switch controller segregates access to these data sets by requiring specific mode transitions, thereby preventing a single point of compromise while maintaining accessibility through controlled switching between segmented data portions.
Solution Approach 2:
The patent introduces a temporal dimension to data access by implementing mode switching that requires time-based transitions between different access states. Rather than simple binary access control, the system adds the dimension of time and sequence to data access, requiring specific temporal patterns (mode switching sequences) to access different data sets, thereby complicating unauthorized access while preserving legitimate access paths.
2Reliability
If virtualized layers of security are added to protect data, then security posture is improved, but system complexity deteriorates
Solution Approach 1:
The mode switch controller serves multiple functions simultaneously: it acts as a security gatekeeper, a data access manager, and a mode transition controller. By consolidating these security-related functions into a single universal component rather than implementing separate virtualized layers, the system achieves strong security posture while avoiding the complexity multiplication that would result from multiple independent security subsystems.
3Adaptability or versatility
If all data is made accessible to the operating system for functionality, then system functionality is improved, but vulnerability to data breaches deteriorates
Solution Approach 1:
The patent applies local quality by granting different access permissions to different data sets based on their sensitivity and usage requirements. The first set of data has different access characteristics than the second and third sets, with the mode switch controller applying localized access control policies to each data set, thereby maintaining necessary system functionality while limiting the scope of potential data breaches to only the currently accessible data set.
Data Source
AI summary
Embodiments of the present invention provide a method to temporally isolate data accessed by a computing device so that the data accessed by the computing device is limited to a single set of data. The method includes removing any data that is accessed by the computing device when operating in different modes so that the data is inaccessible by the computing device when operating in the mode. The method also includes switching to the mode after the data associated with the modes different from the mode have been removed. The method also includes operating in the mode based on a plurality of rules associated with the security policy in temporal isolation from any other mode associated with the computing device. The computing device is limited to operating in the mode and is prevented from accessing any data that is distinct from the single set of data of the mode.