Information Processing Apparatus Alteration Detection Startup Optimization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing information processing systems face delays during startup due to mandatory alteration detection processing, which increases startup time, and managing alteration detection settings is complicated when using multiple storage regions.
Innovation Solution
An information processing apparatus that stores alteration detection settings in two regions: one accessible by the BIOS and another by the application, allowing for switching between enabling and disabling alteration detection processing without complicating management, and synchronizing these settings to facilitate quick startup and secure operation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If alteration detection processing is performed on every occasion of starting a program, then security is improved, but startup time increases
Solution Approach 1:
The patent implements dynamic alteration detection by allowing the detection processing to be enabled or disabled based on a setting stored in storage. The system can switch between performing alteration detection on every startup and skipping it for faster startup, making the security measure adaptive rather than static. This resolves the contradiction by allowing users to balance security and startup speed based on their needs.
Solution Approach 2:
The patent changes the parameter of alteration detection execution by introducing a controllable setting that determines whether detection is performed. By modifying this execution parameter based on user configuration, the system can adjust between full security mode (detection always on) and performance mode (detection skipped), thereby resolving the time-security tradeoff.
2Ease of operation
If a setting indicating whether to perform alteration detection processing is written to a storage region referable by a first program, then the first program can control alteration detection, but a second program can also access and potentially alter this setting, compromising security
Solution Approach 1:
The patent segments the storage location for alteration detection settings into two distinct regions: a first region accessible by the first program (which performs alteration detection) and a second region inaccessible to the first program but accessible by a second program. This segmentation ensures that the setting controlling alteration detection cannot be easily altered by unauthorized programs, as modifying it would require access to the protected second region, thereby maintaining security while allowing controlled management.
Solution Approach 2:
The patent introduces a second program as an intermediary that has exclusive access to the second storage region. This second program acts as a gatekeeper, allowing it to be the only entity that can modify the alteration detection setting. This intermediary mechanism prevents direct access by other programs while still enabling setting management through the authorized second program, thus resolving the security-access contradiction.
Data Source
AI summary
Provided is an information processing apparatus that performs alteration detection processing on every occasion of starting a program, comprising a writing component capable of writing a setting indicating whether or not to perform the alteration detection processing to a first region referable by a first program that firstly performs the alteration detection processing on another program and to a second region not referable by the first program at a point when the first program is started. The first program performs the alteration detection processing in accordance with the setting written in the first region, and a second program capable of referring to the second region performs the alteration detection processing in accordance with the setting written in the second region.