Application Distribution Server Encryption for Software Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional methods for protecting software from viruses and hacking tools are limited, as they rely on registering patterns of hacking tools and detecting file integrity, which becomes ineffective when new hacking tools are produced or when files are re-compiled or compressed, making it difficult to distinguish between genuine and infected software.
Innovation Solution
A method involving a distribution server that encrypts application installation files with a private key, verifies metadata, and re-installs files if invalid, using a public key for decryption and execution, ensuring the integrity and authenticity of software before installation and execution.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional anti-virus methods using pattern registration are used, then detection of known hacking tools is improved, but detection of new hacking tools and re-compiled files becomes ineffective
Solution Approach 1:
The patent replaces the mechanical pattern-matching system with a cryptographic verification system. Instead of comparing file patterns against a database of known virus signatures, the system uses digital signatures and hash functions to verify file integrity. This substitution enables detection of both known and unknown malware, as well as re-compiled or compressed files, by verifying their cryptographic signatures rather than relying on pattern recognition.
Solution Approach 2:
The patent changes the detection parameter from pattern similarity to cryptographic signature validation. By transforming the detection mechanism from comparing file contents against known patterns to verifying mathematical signatures, the system achieves universal detection capability across all file types and versions, including newly created or modified malware that would evade pattern-based detection.
2Object-affected harmful factors
If file integrity detection is performed, then security against known viruses is improved, but detection fails when files are re-compiled or compressed
Solution Approach 1:
The patent applies preliminary action by pre-computing and storing cryptographic signatures (hash values) of legitimate files before distribution. These signatures serve as reference fingerprints that enable future verification of file integrity. When files are downloaded or executed, their current state is compared against these pre-stored signatures, allowing detection of any modifications including re-compilation or compression, regardless of whether the file has been previously seen by the security system.
3Productivity
If pattern-based security scanning is used, then processing speed is improved, but security effectiveness deteriorates with new hacking tools
Solution Approach 1:
The patent replaces the computationally intensive pattern-matching process with efficient cryptographic verification. Instead of scanning file contents and comparing against large pattern databases, the system performs rapid hash computations and signature validations. This substitution maintains high processing speed while dramatically improving security effectiveness, as cryptographic verification can quickly determine file authenticity without requiring extensive pattern analysis.
Data Source
AI summary
Provided is a method of distributing an application including transmitting, by a distribution server, a signal for requesting metadata to a user terminal where an application is installed; receiving, by the distribution server, a reply including first metadata from the user terminal; determining, by the distribution server, whether the first metadata is valid based on second metadata corresponding to the application; setting a connection with the user terminal to re-install the application on the user terminal if the distribution server determines that the first metadata is not valid; encrypting, by the distribution server, one or more installation files that install the application with a private key; and transmitting the one or more encrypted installation files via the set connection to the user terminal.