Trusted OS Security Anomaly Detection and Deactivation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic devices lack automatic and reliable security measures to address security anomalies, particularly the corruption of the general-purpose operating system, which can compromise terminal security and require user vigilance, and may not function properly in cases of network connectivity issues.
Innovation Solution
An electronic assembly and method that utilizes a trusted operating system with a security anomaly detection module and deactivation module to automatically secure the device by deactivating non-essential functions, allowing essential functions like calling to remain operational, even in degraded mode, and can be initiated remotely or upon user request.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the general-purpose operating system is completely deactivated when corruption is detected, then terminal security is improved, but user convenience deteriorates as the user can no longer use the terminal
Solution Approach 1:
The invention segments the operating system into two distinct parts: the trusted operating system (secure) and the general-purpose operating system (potentially corrupted). When corruption is detected, only the general-purpose operating system is deactivated while the trusted operating system remains operational, enabling selective deactivation that preserves essential functions through the trusted system.
Solution Approach 2:
The trusted operating system acts as an intermediary between the user and the secure element. It monitors the general-purpose operating system and can intervene by deactivating access to the secure element when anomalies are detected, while still allowing the user to access non-secure functions through the trusted operating system.
2Device complexity
If the user is responsible for reporting security anomalies, then system complexity is reduced, but security reliability deteriorates as transparent anomalies may go unnoticed
Solution Approach 1:
The trusted operating system performs self-service by automatically monitoring the general-purpose operating system for security anomalies and autonomously deactivating access to the secure element when corruption is detected, eliminating the need for user intervention while maintaining high security reliability.
Solution Approach 2:
The trusted operating system continuously monitors the general-purpose operating system and receives feedback about its state. When anomalies are detected through this feedback mechanism, the system automatically responds by deactivating access to the secure element, creating a closed-loop security system.
3Adaptability or versatility
If radio signal reception is required for securing the terminal, then remote securing capability is improved, but device versatility deteriorates as terminals with insufficient network connection cannot be secured
Solution Approach 1:
The invention extracts the security monitoring and anomaly detection functionality from the general-purpose operating system and places it in the trusted operating system. This allows the terminal to be secured locally without requiring external radio communication, as the trusted system can independently detect and respond to security anomalies.
Data Source
Figure 1
Figure 2~3
Figure 4
AI summary
The assembly (10) has a detection module (210) to detect a security anomaly of a Rich-OS operating system (100), and a disabling module (220) to disable a secure function of an electronic device i.e. mobile telephone terminal (1) used by applications of the Rich-OS operating system, where the disablement allows use of the terminal in fail-soft mode. The implementation of the detection module and the disabling module is dependent on a trusted operating system (200), where the trusted operating system and the Rich-OS operating system are stored in a memory and executed on the assembly. Independent claims are also included for the following: (1) a method for securing an electronic device (2) a computer program for securing an electronic device (3) a computer readable recording medium storing a program for securing an electronic device.