Data Center Hash Tree for Unauthorized Firmware Change Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Data centers face challenges in securing firmware/software running on IoT devices and other devices without Trusted Platform Module (TPM) chips, as traditional TPM-based security measures are not feasible due to space constraints, leaving them vulnerable to unauthorized intrusions and malicious attacks.
Innovation Solution
A system generates a data center hash tree by concatenating hardware and software hashes of production systems, creating central and test copies to detect unauthorized changes, allowing for real-time monitoring and alerting of potential security breaches without relying on TPMs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If TPM-based security measures are used, then security reliability is improved, but device complexity and space requirements increase making them infeasible for IoT devices
Solution Approach 1:
The patent creates hash copies of firmware images and stores them in a centralized location. These hash copies serve as reference points for verifying firmware integrity, eliminating the need for TPM chips in each IoT device. The hash verification mechanism provides the same security function as TPM but with much lower device complexity requirements.
Solution Approach 2:
The patent introduces a centralized firmware update server and hash tree structure as intermediaries between the firmware distribution and verification processes. This intermediary system handles the complex security verification tasks centrally, allowing individual IoT devices to remain simple while maintaining high security reliability through the mediating verification infrastructure.
2Measurement precision
If centralized hash tree monitoring is implemented, then detection precision of unauthorized changes is improved, but system complexity increases
Solution Approach 1:
The patent segments the firmware verification process into modular components: hash generation, hash tree construction, centralized storage, and verification comparison. Each component performs a specific function, making the overall system manageable despite its complexity. The segmentation allows for precise detection of unauthorized changes while organizing the system into manageable modules.
Solution Approach 2:
The patent moves the complex verification logic from the device level to the cloud/server level, effectively changing the dimensional distribution of system complexity. The IoT devices remain simple endpoints while the centralized server handles the sophisticated hash tree monitoring, achieving high detection precision without burdening individual devices with complex verification infrastructure.
Data Source
AI summary
A system hash for each production system is generated. Each system hash includes a concatenation of a hardware hash and a software hash of each production system in the datacenter. A datacenter hash tree is created based on a combination of the system hashes. A test copy of the software hash of each of the production systems is created in respective test systems in the datacenter. In response to detecting a change in the datacenter hash tree, a modification in a system hash which resulted in the change is identified. The central copy of the software hash is compared with the test copy of the software hash. In response to a mismatch between the central copy and the test copy, occurrence of an unauthorized attack in a software of the production system is detected.