Computer Security Auditing via Cryptographic Key Comparison
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computer security methods struggle to effectively secure systems from unauthorized changes and ensure only licensed software is used, while also preventing malware and breaches.
Innovation Solution
A method that involves executing a kernel and a security process upon powering on a computing device. The security process performs audits, generates keys, and compares them to previous keys to determine if a security breach has occurred, enabling or disabling access and network communications accordingly.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a security process performs continuous audits and key comparisons to detect security breaches, then security detection capability is improved, but system complexity and processing overhead increase
Solution Approach 1:
The patent performs an initial audit and generates a first key before enabling the operating system. This preliminary security check establishes a baseline configuration state, allowing subsequent audits to compare against this pre-established reference rather than requiring continuous complex analysis from scratch.
Solution Approach 2:
The patent creates a copy of the system configuration state by generating cryptographic keys (first key, loop key, second key) that represent the audited configuration. These key copies serve as lightweight surrogates for the actual system state, enabling efficient comparison without repeatedly analyzing the entire system configuration.
2Ease of operation
If the security process enables read and write access to hard drive memory for the operating system, then system functionality is improved, but vulnerability to unauthorized changes increases
Solution Approach 1:
The patent implements a feedback mechanism where the security process periodically performs supplemental audits of the system configuration and compares generated keys against the loop key. This continuous monitoring provides feedback on whether the system configuration has changed, allowing the security process to detect unauthorized modifications even while the operating system has full read and write access to the hard drive.
3Adaptability or versatility
If the kernel permits networked communications between computing devices, then system adaptability is improved, but exposure to external security threats increases
Solution Approach 1:
The patent performs the initial security audit and generates the first key before the operating system is enabled and before network communications are permitted. This preliminary security establishment ensures that the baseline configuration is verified before the system exposes itself to external network threats.
Solution Approach 2:
The patent implements continuous supplemental auditing while the system operates in enabled mode with network access. The security process continuously monitors configuration changes through periodic audits and key comparisons, maintaining security oversight throughout the entire operational period rather than performing single-point checks.
Data Source
AI summary
Described herein are various methods of securing a computer system. One or more methods include starting a security process after basic functionality on a computer is initiated at startup. The security process performs one or more reviews, such as audits, of the computer to verify that there have not been unauthorized changes to the computer, such as to any settings or executable files.