Boot File Verification Using Server-Signed Update Hashes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing information processing systems face challenges in correctly verifying updated start-up files due to potential damage or alteration, leading to incorrect verification and potential execution of invalid files during boot-up, and existing methods incur processing time delays for hash calculations.
Innovation Solution
The system generates and verifies start-up files using signature data from a server, ensuring integrity by calculating a hash value on the server and storing verification data, allowing for correct verification without additional hash calculations on the client side, and using public-key encryption to ensure authenticity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If signature data is generated based on a damaged file for boot-up, then the verification process can be completed, but the file is not correctly verified leading to potential execution of invalid files
Solution Approach 1:
The patent applies preliminary action by generating signature data from the update file before the actual update occurs. The server calculates the signature based on the update file in advance, and this pre-generated signature is then used to verify the integrity of the boot-up file after updating. This ensures that even if damage occurs during the update process, the verification can still be performed against the original intended state.
Solution Approach 2:
The patent uses an intermediary approach by introducing a server as a mediator between the update file and the verification process. The server generates the signature data based on the update file and provides it to the information processing apparatus. This intermediary signature serves as a reference that enables correct verification even when the local copy becomes damaged during the update process.
2Reliability
If hash calculations are performed locally for verification, then verification can be performed, but processing time is increased
Solution Approach 1:
The patent extracts the computationally intensive hash calculation operation from the client side and relocates it to the server side. The server performs the signature calculation based on the update file, and only the resulting signature data (not the raw file or intermediate hash values) is transferred to the client. This extraction of the heavy computation to the server eliminates the need for time-consuming local hash calculations while maintaining verification capability.
Solution Approach 2:
The server performs the hash calculation and signature generation in advance as a preliminary action before the client needs to verify the file. By pre-calculating the signature on the server side and providing it to the client, the system eliminates the need for the client to perform time-consuming hash calculations during the verification process, thus reducing processing time.
Applied Scientific Principles
This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.
Function Achieved in This Case
This approach ensures accurate verification of updated start-up files, preventing execution of altered files and reducing processing time by eliminating the need for local hash calculations, thereby enhancing system security and efficiency.
Implementation Method 1
using public-key encryption to ensure authenticity
Data Source
Figure 1
Figure 2
Figure 3
AI summary
An information processing system (1) includes a first information processing apparatus (10) and a second information processing apparatus (100). The first information processing apparatus (10) includes a first generation unit (422, 201) to generate signature data for an update file based on a hash value obtained based on the update file. The first information processing apparatus (10) provides the update file. The second information processing apparatus (100) includes an acquisition unit (401, 301) to obtain the update file and the signature data, a first verification unit (402, 301) to verify the update file with the signature data in updating a start-up file for the second information processing apparatus (100) with the update file, an update unit (403, 301) to update the start-up file with the update file verified by the first verification unit (402, 301), a second generation unit (404, 301) to generate, based on the hash value obtained based on the signature data, verification data for verifying the start-up file updated by the update unit, and a second verification unit (405, 301) to verify the start-up file updated by the update unit (403, 301) with the verification data in starting up the second information processing apparatus (100) with the start-up file updated by the update unit (403, 301).