Virtual OS Encryption via Micro-Kernel Isolation

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current methods for software data protection, such as complex algorithms and hardware dongles, are either vulnerable to cracking or costly and inflexible, failing to provide secure and efficient encryption solutions.

Innovation Solution

The implementation of a virtual operating system with a micro-kernel and a virtual system driver module that performs encryption computations, mapping original data to a buffer area and using a new page table to prevent hardware tracking and debugging, eliminating the need for dedicated hardware and reducing costs.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If complex algorithms are used for data protection, then encryption strength is improved, but vulnerability to hardware tracking and debugging increases

Engineering Contradiction:

Improveencryption strengthVSAvoidvulnerability to cracking

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a virtual machine as an intermediary layer between the host system and the encryption execution environment. This virtual machine isolates the encryption process from direct hardware access, preventing debuggers and crackers from directly observing the encryption algorithm execution on physical hardware. The virtual machine acts as a mediator that protects the cryptographic operations while maintaining encryption strength.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces direct hardware-based encryption mechanisms with a software-based virtual machine execution environment. Instead of relying on hardware dongles or direct CPU execution that can be tracked by hardware debuggers, the system uses virtualized processor emulation where the encryption algorithms run in an isolated virtual environment, substituting mechanical hardware tracking with virtualized software isolation.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If hardware dongles are used for encryption protection, then security is improved, but cost and device complexity increase

Engineering Contradiction:

ImprovesecurityVSAvoidhardware complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent creates a virtual copy of the hardware encryption functionality within a virtual machine environment. Instead of using physical hardware dongles that require actual hardware devices, the system generates a virtualized version of the encryption mechanism that runs on standard computer hardware. This virtual copy maintains the security functions while eliminating the need for complex physical hardware components.

Inventive Principle:

Principle #26Copying

Solution Approach 2:

The patent substitutes physical hardware dongles with a software-based virtual machine that emulates the necessary encryption functionality. The hardware dongle system is replaced by a virtualized environment where encryption operations are performed through software execution rather than dedicated hardware circuits, significantly reducing device complexity and cost.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

3Reliability

If hardware dongles are used for encryption, then protection capability is improved, but processing speed decreases

Engineering Contradiction:

Improveprotection capabilityVSAvoidprocessing speed

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The patent replaces the slow hardware dongle processing mechanism with a virtual machine-based software execution environment. By moving encryption operations from dedicated hardware circuits to a virtualized processor emulation system, the architecture can leverage modern CPU instruction sets and optimization techniques to achieve higher processing speeds while maintaining the protection capabilities provided by the virtual machine isolation.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

4Ease of manufacture

If conventional encryption methods are used, then implementation simplicity is maintained, but crackability increases

Engineering Contradiction:

Improveimplementation simplicityVSAvoidanti-cracking capability

Core Design Contradiction:

Ease of manufactureVSReliability

Solution Approach 1:

The patent introduces a virtual machine as an intermediary layer that sits between the simple encryption implementation and the cracking process. This virtual machine maintains the simplicity of implementing encryption algorithms in standard software while providing an additional layer of protection through virtualization isolation. The intermediary virtual machine prevents direct hardware observation by crackers, thereby enhancing anti-cracking capability without complicating the basic encryption implementation.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS9122894B2Method and apparatus for encryption

Publication Date: 2015.09.01 TENCENT TECHNOLOGY (SHENZHEN) CO LTD

AI summary

Method and apparatus for encryption, and a non-transitory computer-readable medium that stores instructions for performing encryption. The method includes loading a virtual system driver module in a host operating system and constructing a virtual operating system, wherein the virtual operating system comprises a micro-kernel; preparing and providing context of a processor and a memory page table by the virtual system driver for the micro-kernel, and mapping, in the memory page table, original data and a physical address of a buffer area that receives data after encryption computation is completed; and completing the encryption computation in the virtual operating system and saving the computation result in the buffer area.