Hardware-Isolated Verifier and Scanner for Electronic Device Integrity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for verifying the integrity of electronic devices are vulnerable to attacks, as anti-malware solutions installed in the normal operating space can be modified or disabled by attackers, and solutions like TIMA and secure boot only detect simple changes, failing to address complex modifications or run-time attacks.
Innovation Solution
A system and method that involves a verifier module in a secure environment verifying the integrity of a scanner module within the normal environment, using encrypted challenges and responses, and allowing for periodic integrity checks, with the scanner module being easily updated with anti-malware, anti-rooting, or anti-jailbreak programs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Difficulty of detecting and measuring
If anti-malware solutions are installed in the normal operating space, then the detection capability is improved, but the reliability deteriorates because attackers can modify or disable these solutions
Solution Approach 1:
The system divides the verification function into two separate modules: a scanner module in the normal environment that performs detection, and a verifier module in the secure environment that validates results. This segmentation allows the scanner to have high detection capability while the verifier ensures reliability through hardware isolation and cryptographic verification.
Solution Approach 2:
The scanner module acts as an intermediary between the normal operating system and the secure verifier module. It collects system state information and passes it to the verifier for cryptographic validation, enabling the secure environment to indirectly monitor the normal environment without being vulnerable to the same attacks.
2Reliability
If verification modules are installed in the secure environment, then the reliability is improved, but the adaptability deteriorates because updates are difficult to implement
Solution Approach 1:
The system separates the scanner module (in normal environment, easily updatable) from the verifier module (in secure environment, maintains reliability). The scanner can be updated with new detection signatures and algorithms without compromising the cryptographic verification capability of the secure verifier, thus achieving both reliability and adaptability.
Solution Approach 2:
The scanner module in the normal environment can be dynamically updated with new anti-malware signatures and detection algorithms, allowing the system to adapt to new threats while the secure verifier maintains consistent cryptographic validation for reliability.
3Reliability
If simple verification methods like TIMA are used, then the reliability is improved, but the measurement precision deteriorates because they only detect simple changes
Solution Approach 1:
The system merges the cryptographic verification reliability of TIMA with advanced scanning capabilities in the scanner module. The scanner performs comprehensive system state analysis (processes, files, registry, network) while the verifier provides cryptographic validation, achieving both high measurement precision and reliability simultaneously.
Solution Approach 2:
The scanner module provides multi-functional detection capabilities including process monitoring, file system scanning, registry analysis, and network traffic inspection, going far beyond simple kernel verification to achieve comprehensive system integrity monitoring with high measurement precision.
4Reliability
If verification is performed only at boot-up, then the reliability is improved, but the duration of action deteriorates because it cannot detect run-time attacks
Solution Approach 1:
The system implements periodic integrity verification where the scanner module continuously or periodically collects system state information and submits it to the verifier for validation. This periodic action extends protection from just boot-up to ongoing runtime monitoring, detecting attacks that occur during system operation.
Solution Approach 2:
The verification system maintains continuous monitoring capability through the scanner module that operates throughout system operation, not just at boot-up. This continuous action ensures protection against run-time attacks while maintaining reliability through cryptographic verification of each scan result.
Data Source
AI summary
This document discloses a system and method for verifying system integrity of an electronic device. The electronic device includes a verifier device provided within a secure environment of the electronic device and a scanner device provided within a normal environment of the electronic device whereby the secure environment comprises hardware that is isolated from the hardware in the normal environment, i.e. these two environments are hardware isolated.