Application Executing Device Hash-Based Domain Allocation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing resource allocation techniques for applications in MHP devices require unique organization IDs worldwide, leading to increased costs and complexity, and fail to ensure application executability when root certificates are exposed.
Innovation Solution
An application executing device uses a management unit to verify applications with disc root certificates, allocating domain areas based on hash values rather than unique organization IDs, allowing multiple organizations to share domain areas and ensuring application executability even if root certificates are exposed.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If separate directories are created and assigned to respective application supplier organizations with unique organization IDs, then data confidentiality is improved, but device complexity and cost increase due to the need for third-party ID management
Solution Approach 1:
The patent extracts the organization identification function from the device and transfers it to the application itself. Each application carries its own organization ID in the application data, eliminating the need for the device to maintain a database of organization IDs and their corresponding directories. This extraction resolves the contradiction by removing the complex ID management system while preserving data confidentiality through application-level identification.
Solution Approach 2:
The patent uses copying by creating a mapping relationship between application data and storage area information. Instead of storing actual organization ID mappings in the device, the system copies the essential identification information into the application data structure, allowing the device to allocate storage areas based on copied application identifiers rather than maintaining unique global organization ID mappings.
2Reliability
If root certificate is renewed after exposure, then security is improved, but application executability deteriorates for applications using the old certificate
Solution Approach 1:
The patent segments the certificate validation process into multiple independent components: the device stores multiple root certificates in a database, each associated with specific storage areas. When a new certificate is issued, only the relevant storage areas need to be reallocated, not the entire system. This segmentation allows the system to maintain backward compatibility with old certificates while adopting new security measures.
Solution Approach 2:
The patent implements dynamic certificate management where the system can adapt to certificate renewals by dynamically reallocating storage areas associated with new certificates while preserving access to storage areas linked to old certificates. The device dynamically updates its certificate database and storage area mappings, ensuring both security improvement through new certificates and application executability through maintained old certificate support.
Data Source
AI summary
A BD-ROM stores a disc root certificate 301 that is issued by a root certificate authority and assigned to the disc medium. An application manger 2 acquires a hash value from the disc root certificate 301 and verifies the authenticity of an application by using the hash value. If the authenticity is verified, the virtual machine 3 executes the application. A local storage 5 has a plurality of domain areas. Form among the plurality of domain areas, a security manger 4 allocates to the application a domain area that corresponds to the hash value.