Electronic Signature Embedded Execution File Access Control

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional electronic apparatuses face security issues as malicious applications can access unauthorized resources by hacking access control information stored in separate files, leading to potential infections by malicious code.

Innovation Solution

An electronic apparatus with a processor that executes an application program including an execution file and access control information, where the access control information is encoded with an electronic signature using a hash function, allowing secure access control by determining the modulation of the execution file and granting access authority based on the signature.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If access control information is stored in a separate file, then the application can access resources according to user confirmation, but the electronic apparatus can be hacked by modifying the access control information files

Engineering Contradiction:

Improveaccess control securityVSAvoidmalicious code infection

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent merges the execution file and access control information into a single integrated package. The access control information is embedded within the execution file structure rather than being stored separately, so that any modification to access control information would also modify the execution file itself, making tampering detectable through integrity verification of the combined package

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The patent applies preliminary anti-action by embedding an electronic signature (hash code) in the execution file that serves as a pre-established verification mechanism. Before resource access is granted, the system verifies the electronic signature to detect any modifications, preventing malicious code execution by rejecting tampered files before they can cause harm

Inventive Principle:

Principle #9Preliminary anti-action

2Reliability

If access control information is embedded in the execution file with electronic signature, then the security against hacking is improved, but the complexity of the file structure increases

Engineering Contradiction:

Improveaccess control securityVSAvoidfile structure complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The execution file structure is designed to serve multiple functions simultaneously: it contains the executable code, the access control information, and the electronic signature for integrity verification. This multi-functionality reduces the need for separate dedicated structures for each purpose, managing complexity through consolidation rather than proliferation of components

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The electronic signature acts as an intermediary element that links the execution file content with the access control information. Rather than creating complex direct relationships between multiple separate components, the hash code serves as a simplified mediator that verifies integrity without requiring complex verification protocols

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentEP3523745B1Electronic device, method for controlling thereof and computer-readable recording medium

Publication Date: 2021.08.25 SAMSUNG ELECTRONICS CO LTD

Figure 1~3
Figure 4~5
Figure 6

AI summary

An electronic apparatus includes a storage configured to store an application program that includes an execution file and access control information related to the execution file to be used to access a resource of the electronic apparatus and a processor configured to, in response to an execution command regarding the stored application program being input, execute the execution file of the stored application program, and to control access of the execution file regarding the resource of the electronic apparatus according to the access control information included in the stored application program.