File Alteration Detection Using Startup and Cyclic Hash Checks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods are inefficient in checking alterations of software and configuration files in IoT apparatus due to limited calculation resources, leading to delayed detection and wasteful repetitive checks.
Innovation Solution
A detection device that performs a full scan of all files at startup and periodic checks on specific files during operation, using hash values to identify alterations, thereby minimizing resource consumption and impact on the apparatus.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If all files are checked for alteration during operation, then detection completeness is improved, but processing time and resource consumption increase
Solution Approach 1:
The patent segments files into different priority levels (high priority and low priority files). High priority files that are frequently accessed are checked during operation, while low priority files are checked only at startup. This segmentation allows the system to maintain detection completeness for critical files while reducing overall processing time and resource consumption.
2Speed
If checking interval for high priority files is shortened, then detection speed is improved, but resource consumption increases
Solution Approach 1:
The patent applies local quality by differentiating checking strategies based on file characteristics. Frequently accessed high priority files receive intensive monitoring with shorter checking intervals, while less critical files receive minimal monitoring. This localized approach ensures fast detection speed for important files without unnecessarily consuming resources on less critical files.
3Reliability
If repetitive checking is performed at predetermined intervals, then detection coverage is improved, but efficiency deteriorates
Solution Approach 1:
The patent implements dynamic checking intervals based on file access patterns and priority. Instead of uniform periodic checking, the system adapts the checking frequency to each file's characteristics - high priority files are checked more frequently while low priority files are checked less often. This dynamic approach maintains comprehensive detection coverage while significantly improving overall checking efficiency.
Data Source
Figure 1
Figure 2(a)~2(b)
Figure 3
AI summary
A collation unit (15b) checks the presence/absence of alteration of all files when an apparatus is started. A cyclic collation unit (15d) checks the presence/absence of alteration of a predetermined file at predetermined time intervals during the operation of the apparatus.