Attested Backup Images for Trusted Device Recovery
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Industrial backup systems lack robust security measures to verify the integrity and trustworthiness of devices during backup creation and restoration, particularly in complex interconnected environments, risking data breaches and system failures.
Innovation Solution
Implement remote attestation to verify device status and integrity during backup creation and restoration, using attestation keys and management systems to ensure compatibility and security, and enforce device status policies.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional backup systems are used to preserve data and enable recovery, then data preservation and recovery speed are improved, but security measures to verify device integrity and trustworthiness are insufficient
Solution Approach 1:
The system performs preliminary device status assessment and integrity verification before creating or installing backups. Attestation of device status information is conducted in advance to ensure the device is in a trusted state before backup operations, preventing security issues from arising during the backup process
Solution Approach 2:
The system implements feedback mechanisms where device status information is continuously assessed and verified. The backup management system receives feedback about device integrity through attestation processes, and uses this feedback to determine whether to proceed with backup creation or installation, creating a closed-loop security verification system
2Productivity
If backup images are stored and restored quickly to minimize downtime, then productivity is improved, but the risk of installing on incompatible or vulnerable devices increases
Solution Approach 1:
Device compatibility and integrity are verified in advance through attestation of device status information before backup installation. The system checks whether the target device matches the source device characteristics and confirms the device is in a trusted state before allowing backup restoration, preventing incompatible or vulnerable devices from receiving backups
Solution Approach 2:
The backup management system acts as an intermediary between backup images and target devices. It mediates the installation process by verifying device status information and controlling whether backups are installed, preventing direct installation on incompatible or vulnerable devices while maintaining fast recovery capabilities
3Reliability
If comprehensive security verification of device status is implemented during backup processes, then security and reliability are improved, but device complexity and verification time increase
Solution Approach 1:
The backup management system serves as a centralized intermediary that handles complex security verification tasks. Instead of distributing complex verification logic across multiple devices, the backup management system consolidates the assessment and verification functions, reducing individual device complexity while maintaining comprehensive security
Solution Approach 2:
The backup management system performs multiple functions including device status assessment, integrity verification, compatibility checking, and backup control in a single unified system. This multi-functionality reduces overall system complexity by consolidating what would otherwise require multiple separate verification systems
Data Source
Figure 1~3
AI summary
The present invention provides a method for creating a backup of a device. The method includes attesting device status information with an attestation and creating a backup image of the device. The backup image is linked to the attested device status information. The method further includes sending the attestation to a backup management system configured to assess the device status information and compare it with the attested device status information. The device status information may include device identification, environment information, hardware properties, software versions, security features, and timestamps. The backup image is linked to the device status information using a fingerprint or digital signature. The disclosure also provides a backup management system configured to determine current device status information, consider the attestation, and install the backup if the current and attested device status information comply with each other.