Coherent Data Set Verification Using Build-Time Signatures
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Computer and communication systems face challenges in detecting and correcting data errors, as well as restricting unauthorized access to software components, due to accidental, malicious, and transmission errors.
Innovation Solution
The creation and verification of coherent data sets (CDS) and locked software functions, using build-time signatures and access control mechanisms, ensure data integrity and authorized access by generating and comparing signatures using functions like CRC, LRC, and MD5, and implementing digital locks for privileged functions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If data is transmitted and stored in computer systems, then data processing and communication functionality is improved, but data corruption due to errors becomes more likely
Solution Approach 1:
The patent applies preliminary action by generating a digital signature of the data set at build time (before runtime use). This pre-computed signature is stored and later used for verification, allowing the system to detect data corruption without adding computational overhead during critical runtime operations. The signature generation is performed in advance when the data is created or modified.
Solution Approach 2:
The patent introduces a digital signature as an intermediary element that mediates between the data set and the verification process. Rather than directly comparing data sets or using complex error detection algorithms, the signature serves as a compact representative that can be efficiently verified to ensure data integrity. This intermediary approach simplifies the verification process while maintaining reliability.
2Reliability
If access control mechanisms are implemented for software components, then security against unauthorized access is improved, but system complexity increases
Solution Approach 1:
The patent extracts the access control verification from the main execution flow by using pre-computed digital signatures. Instead of implementing complex runtime checks for every access request, the system separates the verification function into an independent signature comparison operation. This extraction simplifies the access control mechanism while maintaining security, as the signature verification can be performed independently and efficiently.
3Reliability
If error detection mechanisms are added to verify data integrity, then data reliability is improved, but processing time and computational overhead increase
Solution Approach 1:
The patent minimizes verification time by performing the computationally intensive signature generation in advance at build time. At runtime, only a simple signature comparison is required, which is much faster than generating signatures on-the-fly. This preliminary action ensures that error detection mechanisms do not significantly impact processing time during critical operations.
Solution Approach 2:
The patent uses a lightweight digital signature representation that is computationally inexpensive to verify. Rather than implementing complex error detection algorithms or maintaining extensive checksum data structures, the system uses compact signatures that can be quickly compared. This approach provides effective error detection with minimal computational overhead and time loss.
Data Source
AI summary
Systems, methods, and computer program products that can be used concurrently or alternatively to detect errors in data as well as to protect access to data are provided. Embodiments enable a coherent data set (CDS) which is a data set guaranteed to be genuine and error-free at run-time. Embodiments provide systems, methods, and computer program programs to create a CDS, identify a CDS, and verify the coherency of a data set purported to be a CDS. Embodiments further enable privileged functions which are functions that can only be accessed by a restricted set of other privileged functions. Embodiments provide systems, methods, and computer program products to create, identify, and protect access to privileged functions.