Dynamic Digital Signatures for Code Integrity via Hash Chains
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies fail to effectively secure computer code from tampering, particularly in shared environments, making it vulnerable to malicious insertions, deletions, or changes by hackers.
Innovation Solution
A system and method that dynamically generate specialized digital signatures at predetermined locations throughout the computer code, creating a tamper-proof blockchain-type structure by linking these signatures in a hash chain, thereby ensuring the integrity and authenticity of the code.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If traditional code storage methods are used in shared environments, then code accessibility and collaboration are improved, but code security and tamper resistance deteriorate
Solution Approach 1:
The code is divided into multiple code blocks, each with its own digital signature. This segmentation allows the code to be stored and accessed in a distributed manner while maintaining security through individual block verification via hash chains.
Solution Approach 2:
Digital signatures act as intermediaries between the code blocks and the verification system. These signatures, linked through hash chains, provide a trusted mechanism for verifying code integrity without requiring centralized control, enabling secure collaboration.
2Reliability
If digital signatures are inserted throughout the code, then code integrity and tamper detection are improved, but system complexity and overhead increase
Solution Approach 1:
By segmenting code into blocks with individual signatures, the system manages complexity through modular organization. Each block can be independently verified, making the overall verification process more manageable than treating the entire codebase as a single unit.
Solution Approach 2:
The system applies digital signatures selectively at code block boundaries rather than throughout every line of code. This partial application provides sufficient integrity verification while reducing the overhead and complexity associated with full-line signature insertion.
3Measurement precision
If hash chains are used to link digital signatures, then tamper detection capability is improved, but processing time and computational overhead increase
Solution Approach 1:
The hash chain verification processes code blocks sequentially in segments rather than requiring complete re-verification of entire codebases. This allows for faster detection of tampering at specific locations without processing the entire codebase each time.
Solution Approach 2:
Digital signatures and hash chain links are pre-computed and attached to code blocks during the code creation or update process. This preliminary action eliminates the need for complex real-time computation during verification, reducing processing time while maintaining detection capability.
Data Source
AI summary
Aspects of the present disclosure provide systems, methods, apparatus, and computer-readable storage media that support securing code by dynamically inserting digital signatures in target code and maintaining the digital signatures in a linked structure (e.g., a blockchain-type structure).