Intermediate Representation Verification for Secure Code Execution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing edge devices face challenges in ensuring security for application programs due to resource constraints, making it difficult to verify vulnerabilities in formats other than source code.
Innovation Solution
A method and system that generate intermediate representations from source code, verify them against predetermined rules, and allow execution of execution code only if the intermediate representation satisfies these rules, with optional certificate-based validation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If source code analysis is used to verify security, then security evaluation capability is improved, but it becomes difficult to apply to intermediate representation formats
Solution Approach 1:
The patent introduces an intermediate representation format that serves as a mediator between source code and executable code. This intermediate format enables security verification to be performed on a standardized representation that can be derived from various source code formats, thus improving both measurement precision of security evaluation and adaptability to different formats.
Solution Approach 2:
The patent transforms the verification target from source code-specific formats to a standardized intermediate representation with defined parameters and structure. By changing the parameter space to a standardized format, the verification process can maintain high precision while becoming adaptable to multiple source code formats through consistent transformation rules.
2Quantity of substance
If intermediate representation is used to distribute application programs, then data amount is reduced and know-how is concealed, but security verification becomes more difficult
Solution Approach 1:
The patent performs security verification on the intermediate representation before it is distributed or converted to executable code. By conducting the verification action in advance on the standardized intermediate format, the system maintains security evaluation precision while benefiting from the reduced data amount and concealed know-how that intermediate representation provides.
3Reliability
If security verification is performed on source code, then security holes can be identified, but it requires multiple verification rules for different formats
Solution Approach 1:
The patent creates a universal intermediate representation format that can represent various source code formats in a unified structure. This universal format allows a single set of verification rules to work across multiple source code formats, maintaining high security assurance while reducing the complexity of having separate verification rules for each format.
Data Source
AI summary
A solution that can ensure the security of an application program is provided. An execution code provision method includes: a step of generating a source code according to a user operation; a step of generating an intermediate representation from the source code; a step of verifying whether or not the intermediate representation satisfies a predetermined rule or regulation; and a step of realizing execution of an execution code generated from the intermediate representation when the intermediate representation satisfies the predetermined rule or regulation.