Change-Tolerant Computing Environment Identifier via Error-Correction Codes

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing methods for generating system identifiers in computing environments are vulnerable to attacks due to their sensitivity to changes in device identifiers, which can occur during hardware updates or repairs, and lack robustness against malicious modifications.

Innovation Solution

A change-tolerant method using error-correction schemes, such as Reed-Solomon codes, to generate identifiers based on asset parameters, allowing for occasional changes in hardware without altering the system identifier, while incorporating error-correction fingerprints to enhance security and resilience against attacks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If recorded device identifiers are used for system identification, then change tolerance is improved, but vulnerability to attacks worsens

Engineering Contradiction:

Improvechange toleranceVSAvoidvulnerability to attacks

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent extracts the vulnerability by removing recorded device identifiers from the system identification process entirely. Instead of comparing actual identifiers against recorded values, the system generates identifiers dynamically using hash functions applied to asset parameters, eliminating the attack vector that exploited stored identifier comparisons

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The patent replaces the mechanical comparison system (reading, storing, and comparing device identifiers) with a cryptographic hash-based system. Asset parameters are transformed through hash functions to generate system identifiers, substituting the vulnerable mechanical identification process with a mathematically secure transformation process

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

2Adaptability or versatility

If device identifiers are allowed to change during hardware updates, then adaptability is improved, but identifier stability worsens

Engineering Contradiction:

Improvehardware update capabilityVSAvoididentifier stability

Core Design Contradiction:

Adaptability or versatilityVSStability of the object's composition

Solution Approach 1:

The patent applies preliminary hashing to asset parameters before they are used in system identification. By pre-processing asset parameters through hash functions, the system creates stable identifier representations that remain consistent even when underlying asset parameters change within acceptable ranges, allowing hardware updates while maintaining identifier stability

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent transforms asset parameters through hash functions, changing their representation form. This parameter transformation allows the system to tolerate changes in original asset parameters (such as hardware updates) while maintaining stable system identifiers, as the hash function maps varying inputs to consistent output ranges

Inventive Principle:

Principle #35Parameter changes

Data Source

PatentEP2686767B1Change-tolerant method for generating identifier for collection of assets in computing environment using error-correction code scheme

Publication Date: 2019.06.05 IRDETO BV

Figure 1A~1B
Figure 2
Figure 3~4

AI summary

A secure and change-tolerant method for obtaining an identifier for a collection of assets associated with a computing environment. Each asset has an asset parameter and the computing environment has a fingerprint based on an original collection of assets and on a codeword generation algorithm on the original collection of assets. The method comprises: retrieving the asset parameters of the collection of assets and processing the retrieved asset parameters to obtain code symbols. An error- correction algorithm is applied to the code symbols to obtain the identifier. The method can be used in node-locking.