VeriFIDES Trusted OS Data Access Control via Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies lack effective methods for securely controlling access to protected digital content, especially in distributed environments like the internet, where data protection and access management are critical but challenging.
Innovation Solution
The implementation of a VeriFIDES system, which includes a trusted operating system with an access control module, tamper detection mechanisms, and the use of tickets for controlling access to protected data. This system ensures that protected data are encrypted and can only be decrypted within the trusted environment, with access permissions managed through tickets.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If protected data are stored in unprotected form (decrypted) on memory devices, then data accessibility and processing speed are improved, but security and protection against unauthorized access are worsened
Solution Approach 1:
The system segments data protection by separating encrypted data storage from decryption operations. Data remain encrypted on storage devices and are only decrypted in trusted computing environments where access is controlled by the access control module, allowing both security and accessibility
Solution Approach 2:
The access control module acts as an intermediary between the trusted operating system and applications seeking to access protected data. It verifies tickets, manages decryption keys, and controls when data are decrypted, balancing security requirements with data accessibility
2Reliability
If tamper detection mechanisms are implemented to protect against copying unprotected data, then security is improved, but system complexity and difficulty of operation are worsened
Solution Approach 1:
The tamper detection mechanism is merged with the access control module and trusted operating system. The access control module both controls data access and detects tampering attempts, eliminating the need for separate complex security hardware while maintaining security
3Reliability
If decryption keys are deleted to disable further access after tamper detection, then security is improved by limiting compromise, but data accessibility is worsened
Solution Approach 1:
The system takes preliminary anti-action by deleting decryption keys when tampering is detected, preventing further unauthorized access. This proactive measure limits the sphere of compromise by ensuring that even if the system is breached, the attacker cannot access data outside the trusted environment
Solution Approach 2:
The system applies different access qualities to different locations: data can be accessed in unprotected form only within the trusted computing environment, while remaining protected elsewhere. The access control module enforces this local quality distinction through ticket verification and key management
Data Source
AI summary
Various hardware and software configurations are described herein which provide improved security and control over protected data. In some embodiments, a computer includes a main motherboard card coupled to all input/output devices connected to the computer, and a trusted operating system operates on the main motherboard which includes an access control module for controlling access to the protected data in accordance with rules. The trusted operating system stores the protected data in an unprotected form only on the memory devices on the main motherboard. The computer may also have a computer card coupled to the main motherboard via a PCI bus, on which is operating a guest operating system session for handling requests for data from software applications on the computer. A tamper detection mechanism is provided in the computer for protecting against attempts to copy the unprotected form of the protected data onto memory devices other than the one or more memory devices used by the motherboard or computer card.