Docker Image Vulnerability Scanning with Homomorphic Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for storing and distributing docker images face security challenges such as vulnerabilities, malware, and unauthorized access, which compromise data confidentiality and integrity.
Innovation Solution
A computing platform uses homomorphic encryption and blockchain to securely store and distribute docker images by scanning for vulnerabilities, encrypting with AES-256, creating a BCID using RSA, and recording metadata on a blockchain for authentication and access control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If docker images are stored and distributed using conventional methods, then ease of operation is maintained, but security vulnerabilities and unauthorized access occur
Solution Approach 1:
The system segments the docker image into multiple encrypted components and stores them separately in the distributed storage network. Each component is encrypted with its own key, and the decryption requires assembling all components in the correct sequence, thereby enhancing security while maintaining manageable system complexity through modular architecture
Solution Approach 2:
The patent introduces a blockchain-based intermediary layer that mediates between the storage system and users. This intermediary verifies image integrity, manages decryption keys, and coordinates the assembly of encrypted components, thereby improving security without requiring users to directly manage the complex encryption and storage operations
2Reliability
If multiple layers of encryption are applied to docker images, then data confidentiality is improved, but processing time increases
Solution Approach 1:
The system performs encryption and segmentation of docker images in advance during the build and push process. The images are pre-encrypted and stored in encrypted form in the distributed storage network, so that when users retrieve images, the decryption and assembly process is the only time-consuming operation, minimizing the impact on user experience
3Reliability
If blockchain technology is used for authentication, then access security is improved, but device complexity increases
Solution Approach 1:
The blockchain system serves multiple functions: it stores image metadata, verifies image integrity through hash comparisons, manages decryption key distribution, and authenticates user access. This multi-functionality reduces the need for separate security systems and simplifies the overall architecture while maintaining high security standards
Data Source
AI summary
Arrangements for securely storing and distributing docker images are provided. A computing platform may receive a docker image. The computing platform may scan the docker image. The computing platform may generate a CVE list based on identified vulnerabilities and incorporate the CVE list into the docker image. The computing platform may encrypt the docker image and send the docker image to a docker image storage system. The computing platform may create an image BCID and encrypt the image BCID. The computing platform may generate and record metadata associated with the image BCID on a blockchain network.