Virtual Machine Isolation Switching for Secure Data Processing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Virtual machines currently lack the capability to provide a secure environment for processing sensitive data, leading to potential information leakage and high security risks.
Innovation Solution
Implement a data processing host with a program running environment and a first isolation environment, where the first isolation environment operates in a secure mode, including an operating system and resources to run secure processing programs, isolated from the non-secure program running environment.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a virtual machine is used to run the program and process the to-be-processed data, then the program can be executed in a controlled environment, but the security of the running environment is insufficient leading to information leakage
Solution Approach 1:
The system divides the running environment into two distinct segments: a non-secure program running environment for general operations and a secure first isolation environment for sensitive data processing. This segmentation allows the program to operate in different security contexts, improving overall data security without requiring complete redesign of the execution environment.
Solution Approach 2:
A security management module is introduced as an intermediary component that manages the interaction between the program running environment and the first isolation environment. This mediator controls data flow and execution context switching, enhancing security while maintaining system manageability.
2Ease of operation
If the host operates in a non-secure mode for general operations, then system accessibility and ease of operation are improved, but data processing security is compromised
Solution Approach 1:
Different security qualities are applied to different operational contexts: the program running environment operates with lower security restrictions for ease of access and operation, while the first isolation environment implements strict security measures for data processing. This local differentiation of security properties allows the system to be both accessible and secure.
Solution Approach 2:
The system dynamically switches between non-secure and secure modes based on operational requirements. The program can execute in the accessible non-secure environment for general tasks, then transition to the secure first isolation environment when data processing is required, and switch back afterward. This dynamic mode switching maintains ease of operation while ensuring data security.
3Reliability
If a first isolation environment is created corresponding to each virtual instance, then data processing security is enhanced, but system complexity and resource allocation complexity increase
Solution Approach 1:
The security management module serves multiple functions: it manages the creation, destruction, and switching between isolation environments; it controls data flow between environments; and it handles resource allocation. This universal management component reduces overall system complexity despite the presence of multiple isolation environments.
Solution Approach 2:
The first isolation environment is nested within the host system structure, with each isolation environment corresponding to a virtual instance. This nested architecture allows the secure environment to be integrated into the existing virtualization framework, managing complexity through hierarchical organization rather than parallel independent systems.
4Reliability
If the first isolation space is isolated from the program running environment, then information leakage is prevented, but system resource sharing and communication efficiency are reduced
Solution Approach 1:
The security management module acts as an intermediary that facilitates controlled communication between the isolated first isolation space and the program running environment. It enables necessary data transfer and coordination while maintaining security boundaries, thus preserving processing efficiency without compromising information security.
Solution Approach 2:
Data and execution context are prepared and transferred to the first isolation environment before the secure processing operation begins. This preliminary action includes loading necessary program components and data into the isolation environment in advance, which minimizes the impact of isolation on overall processing efficiency during actual data operations.
Data Source
AI summary
A data processing host includes a program running environment and a first isolation environment. The first isolation environment is isolated from the program running environment. The host operates in a non-secure mode in the program running environment, and operates in a secure mode in the first isolation environment. The program running environment includes a virtual instance operating in the non-secure mode, and the first isolation environment corresponds to the virtual instance in the program running environment. The first isolation environment includes an operating system in the secure mode and a resource allocated to the first isolation environment and comprising a first isolation space for running the operation system and a secure processing program, which corresponds to a program in the virtual instance and is for processing to-be-processed data.