Activation Mode White List Segmentation for Execution Module Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for verifying the integrity of execution modules in information processing apparatuses do not consider the activation mode, leading to unnecessary system deactivation and decreased operation rates when alterations in modules not affecting the current activation mode are detected.
Innovation Solution
An information processing apparatus with a request reception unit, a first alteration detection unit for detecting alterations in the white list, a second alteration detection unit for detecting alterations in execution modules using an unaltered white list, and an error control unit that determines whether to deactivate the system or inhibit only the execution of the altered module based on the current and intended activation modes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the system deactivates upon detecting any module alteration regardless of activation mode, then security is improved, but the operation rate decreases
Solution Approach 1:
The invention segments the white list into multiple activation mode-specific white lists (STD mode white list and SAFE mode white list). The alteration detection unit selectively references the appropriate white list based on the current activation mode, allowing alterations in non-current mode modules to be ignored while maintaining security for current mode modules.
Solution Approach 2:
The invention introduces dynamic selection of the reference white list based on the current activation mode. The alteration detection unit dynamically determines which white list to use (STD or SAFE) according to the active mode, enabling flexible response to alterations that adapts to the operational context rather than applying a static deactivation rule.
2Device complexity
If the system verifies module integrity using a single white list for all activation modes, then verification simplicity is improved, but false positive alterations increase
Solution Approach 1:
The invention divides the single white list into separate activation mode-specific white lists (STD mode white list for normal operation modules and SAFE mode white list for update operation modules). This segmentation eliminates false positives by ensuring that module alterations are only flagged when they pertain to the currently active activation mode.
Solution Approach 2:
The invention applies different verification criteria (different white lists) to different activation modes. The alteration detection unit selects the appropriate white list based on the current mode, allowing each mode to have its own tailored integrity verification standards rather than applying a uniform verification approach.
Data Source
AI summary
An information processing apparatus includes a request reception unit configured to receive a request for executing an execution module, a first alteration detection unit configured to detect an alteration of a white list upon reception of the execution request, a second alteration detection unit configured to detect an alteration of an execution module which has issued the execution request, by using a white list determined to have no alteration by the first alteration detection unit, and an error control unit configured to, upon detection of an alteration by the second alteration detection unit, select and control whether to deactivate a system of the information processing apparatus or to inhibit only execution of the execution module which has issued the execution request, depending on a current activation mode of the information processing apparatus and an activation mode using the execution module which has issued the execution request.