Multi-Layer Data Signature Verification for Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data processing systems fail to detect corruption of data within multiple hardware and software layers, as signatures are determined after data reaches the security processor, making undetectable any corruption that occurs before or after this point.
Innovation Solution
Incorporating additional signatures determined by software components before reaching the security processor and after reaching the security processor, using algorithms like cyclic redundancy checks or hash functions, to verify data integrity across the device layers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a single signature verification is performed at the security processor, then the device complexity is reduced, but the reliability of data integrity verification deteriorates because corruption in multiple layers cannot be detected
Solution Approach 1:
The patent divides the data verification process into multiple independent signature checks at different system layers. Each layer (application layer, security processor, hardware layer) generates and verifies its own signature, creating segmented verification points that collectively cover the entire data processing path without requiring a single complex verification mechanism.
Solution Approach 2:
Signatures are generated and verified at multiple preliminary stages before final data processing. The application layer generates a first signature before data leaves the application, the security processor generates a second signature during processing, and the hardware layer generates a third signature. This preliminary action at each stage prevents corruption from propagating through the system.
2Reliability
If multiple signatures are used at different layers, then the reliability of detecting data corruption improves, but the device complexity increases due to additional verification steps
Solution Approach 1:
The patent implements a universal signature verification mechanism that operates consistently across multiple layers with different functions. The same cryptographic verification logic is applied at the application layer, security processor, and hardware layer, allowing each component to perform verification according to its specific function while maintaining system-wide consistency and reducing overall complexity.
Solution Approach 2:
The verification system is structured with nested signatures where each layer's signature is contained within and protected by the outer layers. The first signature from the application layer is nested within the second signature from the security processor, which is in turn nested within the third signature from the hardware layer. This nested structure allows comprehensive verification without requiring separate independent systems.
3Measurement precision
If signature verification is performed only at the security processor, then the processing speed is maintained, but the measurement precision of data validity deteriorates as pre-processor corruption remains undetectable
Solution Approach 1:
The system performs preliminary signature generation at the application layer before data enters the security processor, and preliminary verification at each layer to detect corruption early. This preliminary action prevents corrupted data from consuming subsequent processing resources, maintaining overall productivity while improving detection accuracy.
Solution Approach 2:
The patent introduces signature data as an intermediary element that carries validity information through each processing layer. Each layer adds its signature as an intermediary verification marker, allowing the system to maintain processing speed while enabling precise detection of where corruption occurs in the data flow.
Data Source
AI summary
According to an example, a device for processing data is suggested, said device comprising a first component, wherein the first software component is arranged for receiving the data; a security processor for receiving said data and a first signature, wherein the security processor is arranged for determining based on the first signature whether the data are valid; for determining a second signature for the data; and for conveying the second signature to the first component.