Automatic Host Device Verification via System Hash Comparison
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing electronic device systems require manual password input for decryption during startup, preventing automatic verification and posing challenges in system access and security when system information changes.
Innovation Solution
An automatic verification method and system that calculates and compares verification values using a system verification module to decrypt the host electronic device, allowing for automatic startup and re-encapsulation of keys with new verification values when system information changes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If manual password input is used for decryption during startup, then system security is maintained, but automatic verification cannot be achieved and system access becomes inconvenient
Solution Approach 1:
The system uses the system information itself (bootloader, kernel, etc.) as the verification key through hash calculation. The verification module automatically calculates the hash value of system information and compares it with stored verification values, eliminating the need for manual password input while maintaining security. The system serves itself for verification purposes.
Solution Approach 2:
The patent extracts the password function from manual input and replaces it with automatic hash verification. The verification module separates the verification logic from user interaction, using cryptographic hash functions to automatically verify system integrity during startup without requiring user intervention.
2Adaptability or versatility
If system information is changed to enable updates, then system adaptability is improved, but verification fails because the original verification values no longer match
Solution Approach 1:
The verification mechanism is made dynamic by allowing verification values to be updated when system information changes. The system can recalculate verification values based on new system information (such as updated kernels or bootloaders) and store new verification values, enabling the system to adapt to changes while maintaining continuous verification capability.
Solution Approach 2:
Before system information changes are made, the verification module can pre-calculate new verification values based on the expected new system information. This preliminary action ensures that when the system information is actually updated, the verification can immediately succeed without interruption, maintaining both adaptability and reliability.
3Measurement precision
If cryptographic hash functions are used for verification, then verification accuracy is improved, but computational complexity increases during startup
Solution Approach 1:
The patent uses cryptographic hash functions (such as SHA-256) that provide high verification accuracy through their mathematical properties. While hash calculation requires computational resources, the operation is performed once during startup rather than continuously, and the results are stored for quick comparison, balancing accuracy requirements with computational feasibility.
Data Source
AI summary
The application provides an automatic verification method and system, with the method executing in a startup procedure of a host electronic device and including: calculating specific to system information to obtain a set of verification values in the startup procedure when the host electronic device is booted up; comparing a verification value from the set of verification values with a preset verification value from a set of preset verification values according to a preset condition and obtaining a comparison result; decapsulating a key to substitute for a step of manually inputting a password when the comparison result indicates conformity; and decrypting the host electronic device with the key to complete the startup procedure. If the system information is desired to be changed, a proxy device is required to re-calculate according to the changed system information to obtain a new set of verification values to substitute the original preset verification values.