Blockchain Website Authentication Against Tampering
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional data communication protection methods, such as HTTPS, are inadequate against malicious attacks like website tampering and man-in-the-middle attacks, which can compromise user information by injecting malicious code or altering communications, and existing measures fail to prevent the spread of malicious content until corrective actions are taken.
Innovation Solution
A computer-implemented method using blockchain technology to authenticate and validate the authenticity of website code by hashing, encrypting, and signing it with private and public keys, and then verifying this authenticity through a blockchain record before allowing access, thereby preventing the execution of malicious code.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If HTTPS protocol is used for data communication protection, then data transmission security is improved, but protection against website tampering and man-in-the-middle attacks deteriorates
Solution Approach 1:
The patent applies preliminary action by calculating and storing the hash value of the original website code in the blockchain before any tampering occurs. This pre-established reference allows for subsequent detection of modifications, preventing the harmful effects of website tampering and man-in-the-middle attacks while maintaining data transmission security through HTTPS.
2Ease of repair
If regular backups of website code are performed, then website restoration capability is improved, but prevention of malicious code spread deteriorates
Solution Approach 1:
The patent implements feedback by continuously monitoring the hash value of the website code against the stored blockchain hash. When modifications are detected, the system provides immediate feedback to administrators, enabling them to take corrective action before malicious code can spread widely, while still maintaining the ability to restore from the original backup.
3Difficulty of detecting and measuring
If service providers actively monitor for malicious content, then detection capability is improved, but response time for removing malicious code deteriorates
Solution Approach 1:
The patent applies self-service by enabling the website itself to monitor its own integrity through hash comparison with the blockchain. This self-monitoring mechanism eliminates the need for external service provider monitoring, provides immediate detection of tampering, and allows administrators to respond instantly without waiting for third-party detection.
4Difficulty of detecting and measuring
If existing monitoring measures are implemented, then malicious content detection is improved, but user information security protection deteriorates
Solution Approach 1:
The patent applies preliminary action by establishing the correct hash value in the blockchain before any malicious content can be introduced. This pre-established reference enables real-time detection and prevention of tampering, protecting user information security by blocking access to malicious websites before users can be compromised, while maintaining effective monitoring capabilities.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Systems, methods, and other embodiments associated with protecting online content are described. In one embodiment, a method includes generating a hashed code, and generating an encrypted and signed hash. The method may also include transmitting the encrypted and signed hash and the domain to a blockchain, causing: the blockchain to request validation the encrypted and signed hash by a terminal associated with a registrar of the domain; and the terminal associated with the registrar to: (a) decrypt the encrypted and signed hash using the private key to obtain the hashed code, (b) attempt to validate an authenticity of the hashed code, and (c) control inclusion of the hashed code in a blockchain record based on a result of the attempt to validate the authenticity of the hashed code.