Authenticity Confirmation Management for Software Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for confirming software authenticity in information processing apparatuses are vulnerable to unauthorized use due to leakage of secret keys or expiration of public keys, leading to potential security breaches and inconvenience.
Innovation Solution
An information processing apparatus manages multiple authenticity confirmation information pieces and their validity, allowing for the update of validity information when a public key is invalidated, ensuring secure operation even if a secret key is leaked or a public key expires.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a digital signature technique using public key cryptography is used to confirm software authenticity, then security against unauthorized software is improved, but the system becomes vulnerable if a secret key is leaked or a public key expires
Solution Approach 1:
The patent segments the authenticity confirmation mechanism by maintaining multiple public keys (first public key and second public key) instead of relying on a single key pair. This segmentation allows the system to divide the security function across multiple keys, so that compromise of one key does not affect the overall security. The software is signed with one public key while another serves as a backup, resolving the vulnerability to single-key compromise.
Solution Approach 2:
The patent changes the parameter of key validity by introducing validity information that can dynamically update the status of public keys. When a public key expires or is compromised, the system changes its validity parameter from valid to invalid, and switches to using another public key. This parameter change mechanism allows the system to adapt to key leakage or expiration events while maintaining continuous security.
2Reliability
If a public key is invalidated due to leakage or expiration, then security is improved by preventing unauthorized use, but convenience deteriorates due to potential interruption of normal operations
Solution Approach 1:
The patent applies preliminary action by pre-configuring multiple public keys and their corresponding validity information before any security incident occurs. The system is prepared in advance with a first public key for normal operation and a second public key as a backup. When the first public key needs to be invalidated, the system can immediately switch to the second public key without interruption, thus maintaining operational continuity while ensuring security.
Solution Approach 2:
The patent provides beforehand cushioning by maintaining a standby public key that acts as a buffer against operational interruptions. When the active public key becomes invalid, the standby public key is already in place to immediately take over, cushioning the system against the harmful effect of key invalidation. This ensures both security (by invalidating compromised keys) and convenience (by preventing operational interruptions).
Data Source
AI summary
An information processing apparatus that includes at least a non-transitory computer-readable storage medium storing a program and at least a processor configured to execute the program to perform a method of managing a plurality of pieces of authenticity confirmation information used to confirm authenticity of data, managing validity information indicating whether each of the plurality of pieces of authenticity confirmation information is valid, and confirming the authenticity of the data using the authenticity confirmation information to be indicated as valid with the validity information, wherein in a case where the authenticity of the data is confirmed using second authenticity confirmation information that is different from first authenticity confirmation information and is indicated as valid with the validity information in response to an instruction for invalidating the first authenticity confirmation information, update the validity information associated with the first authenticity confirmation information.