Blockchain Agent for Patch Integrity Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current network devices rely on certification authorities for patch integrity verification, lacking a blockchain-based solution to validate the integrity of network elements after patch application, which is inadequate for distributed and multi-vendor environments, especially in IoT settings where integrity and security are critical.
Innovation Solution
A blockchain network agent verifies and accepts patch requests by determining their order and dependencies within a blockchain network, using a hardware security module to compute patch reports and ensure integrity, preventing malicious updates by comparing hash values against expected values stored in the blockchain.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If certification authorities are used to verify patch integrity, then patch verification is possible, but the solution is inadequate for distributed and multi-vendor environments
Solution Approach 1:
The patent introduces a blockchain network as an intermediary between patch initiators and network elements. The blockchain stores patch requests in a distributed, immutable ledger that all participants can verify, replacing the traditional centralized certification authority model. This allows multiple vendors and distributed devices to verify patch integrity without relying on a single trusted third party.
Solution Approach 2:
The system segments the verification process into independent blockchain nodes that each maintain a copy of the patch request ledger. Instead of a single centralized authority, verification capabilities are distributed across multiple independent nodes, enabling adaptability in multi-vendor environments while maintaining reliability through consensus mechanisms.
2Adaptability or versatility
If blockchain-based verification is implemented, then distributed environment adaptability is improved, but system complexity increases
Solution Approach 1:
The agent on the network element performs self-verification by checking patch requests against the blockchain ledger locally. Instead of requiring complex centralized verification infrastructure, each device independently verifies patch integrity using the distributed ledger, reducing overall system complexity while maintaining adaptability.
Solution Approach 2:
The blockchain network serves multiple functions simultaneously: it stores patch requests, provides integrity verification, maintains ordering information, and enables consensus across distributed participants. This multi-functionality reduces the need for separate systems for each function, thereby managing complexity while improving adaptability.
3Reliability
If patch requests are verified in correct order using blockchain, then network element integrity is maintained, but verification time increases
Solution Approach 1:
Patch requests are pre-validated and ordered in the blockchain ledger before being applied to network elements. The blockchain maintains a predetermined sequence of patch requests, allowing agents to verify integrity by checking against this pre-established order rather than performing complex real-time verification, thus reducing verification time while maintaining integrity.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Various embodiments relate to a method and agent for method for accepting and verifying a patch request from a patch initiator, the method including the steps of receiving, by an agent, the patch request from the patch initiator, determining, by the agent, a status of a network element, checking, by the agent, with a blockchain network peer to determine which of a plurality of patch requests are being accepted by the blockchain network peer, determining, by the agent, whether the patch request is included in the plurality of patch requests being accepted by the blockchain network peer, determining, by the agent, whether the patch request is next in an order specified by the blockchain peer, and applying the patch of the patch request.