File Authentication via Selective Data Segment Hashing

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional file authentication methods that hash entire files are time-consuming and vulnerable to hacking, as they require significant computational resources and store digests that can be compromised by untrusted parties.

Innovation Solution

Authenticating a file by performing a cryptographic function on a subset of its data segments, rather than the entire file, to generate a digest that is used to verify the file's authenticity.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a hash of an entire computer file is performed, then file authentication reliability is improved, but authentication time increases and user experience deteriorates

Engineering Contradiction:

Improvefile authentication reliabilityVSAvoidauthentication time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent divides the file into multiple blocks and selectively hashes only specific blocks (e.g., first block, last block, and blocks at regular intervals) rather than hashing the entire file. This segmentation approach maintains authentication reliability by checking critical portions of the file while significantly reducing the computational time required.

Inventive Principle:

Principle #1Segmentation

2Speed

If pre-hashing a computer file and storing the digest is performed, then authentication speed is improved, but vulnerability to hacking increases

Engineering Contradiction:

Improveauthentication speedVSAvoidvulnerability to hacking

Core Design Contradiction:

SpeedVSObject-affected harmful factors

Solution Approach 1:

The patent performs preliminary actions by hashing specific blocks of the file during the authentication process rather than pre-hashing the entire file and storing the digest. This approach allows for rapid authentication by only hashing necessary portions at the time of verification, eliminating the vulnerability associated with stored digests while maintaining fast authentication speed.

Inventive Principle:

Principle #10Preliminary action

3Reliability

If conventional authentication approaches are used, then file integrity verification is achieved, but computational resources consumed increase

Engineering Contradiction:

Improvefile integrity verificationVSAvoidcomputational resources consumed

Core Design Contradiction:

ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent applies partial action by hashing only specific blocks of the file rather than the entire file. This selective hashing approach provides sufficient integrity verification for security purposes while consuming significantly fewer computational resources and energy compared to hashing the complete file.

Inventive Principle:

Principle #16Partial or excessive action

Data Source

PatentUS20250045432A1Authentication of files

Publication Date: 2025.02.06 MICROCHIP TECHNOLOGY INC

AI summary

Systems for authenticating a file are disclosed. A system may include one or more physical devices. The one or more physical devices may select, based on an identifier, a subset of data segments of a computer file for generating a first digest with a cryptographic function. The one or more physical devices may also execute the cryptographic function on the selected subset of data segments of the computer file to generate the first digest. Further, the one or more physical devices may generate an authenticator based on the first digest and a private key. The one or more physical devices may further send the computer file, the identifier, and the authenticator to a secure node. Associated methods and non-transitory machine-readable medium are also disclosed.