Embedded VM Authentication for Storage Block Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increasing computing power poses a security risk to authentication techniques based on standard, transparent, and publicly known hash functions, making it feasible for malicious entities to modify data within storage blocks and generate collisions, thereby compromising data integrity.
Innovation Solution
Embedding a virtual machine (VM) with an opaque authentication algorithm within the storage block, where the algorithm's logic is hidden from observation, preventing malicious entities from learning or exploiting its operation, and ensuring only authorized users have access to the algorithm's logic.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If standard transparent hash functions are used for authentication, then the authentication process is simple and efficient, but security is compromised as computing power increases enabling collision attacks
Solution Approach 1:
The patent embeds a virtual machine (containing the authentication algorithm) inside the storage block being authenticated. This nested structure allows the authentication logic to be self-contained within the data structure itself, making the algorithm opaque to external observers while maintaining authentication functionality. The VM is instantiated externally but contains the secret algorithm, creating a nested architecture that resolves the security-complexity contradiction.
Solution Approach 2:
The virtual machine acts as an intermediary between the storage block and the authentication verification process. Instead of directly exposing the hash function logic, the VM mediates the authentication by executing the algorithm internally and returning only the verification result. This intermediary layer hides the algorithm's inner workings from potential attackers while maintaining the authentication mechanism's functionality.
2Reliability
If hash function logic is made opaque to prevent learning, then security against collision attacks improves, but verification process becomes more complex
Solution Approach 1:
The patent creates a copy of the authentication algorithm inside the virtual machine that is embedded in the storage block. This copy allows the verification process to execute the same algorithm internally without exposing it to external observation. The external system only needs to instantiate the VM and receive the verification result, maintaining operational simplicity while achieving algorithmic opacity for collision resistance.
3Productivity
If computing power increases, then processing speed improves, but security of transparent hash functions deteriorates due to feasible collision generation
Solution Approach 1:
The patent applies preliminary anti-action by pre-embedding the authentication algorithm inside the storage block before any authentication attempts occur. This proactive measure ensures that even when computing power increases and collision attacks become more feasible, the algorithm remains hidden and protected. The anti-action is built into the structure itself, preventing future security compromises from increased computational capability.
Data Source
AI summary
The disclosure provides an approach for authenticating a block of storage by embedding a virtual machine and an authentication algorithm into the block. The virtual machine contains the authentication algorithm. The algorithm remains opaque in its operation by hiding its execution within the embedded VM. The non-transparent operation of the algorithm prevents a malicious entity from learning how to modify information in the block and from learning to how to evade detection of that modification by the authentication algorithm. The opaqueness of the algorithm adds security to a computer storage system.