Kernel RootDisk Authentication via Embedded Signature
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems require independent validation of both the kernel and RootDisk files during boot, doubling the verification burden and potentially slowing the boot process, as they are not able to leverage a shared signature for authentication.
Innovation Solution
A method where the kernel is embedded with a signature associated with the RootDisk, allowing the kernel to authenticate the RootDisk directly, by comparing hash values stored in memory to ensure authenticity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If independent validation of kernel and RootDisk is performed, then authentication reliability is improved, but verification time increases
Solution Approach 1:
The patent merges the authentication of kernel and RootDisk into a single verification process. The kernel contains an embedded signature that combines both the kernel signature and RootDisk signature, allowing the boot process to verify both components simultaneously through one authentication call rather than requiring separate validation steps for each component.
Solution Approach 2:
The patent performs preliminary action by pre-embedding the combined signature into the kernel during the build process. This embedded signature is created in advance by combining the kernel signature and RootDisk signature, so that during boot, no additional external authentication steps are needed - the verification is already prepared within the kernel structure itself.
2Reliability
If separate signature validation is performed for kernel and RootDisk, then authentication thoroughness is improved, but verification burden increases
Solution Approach 1:
The patent combines multiple authentication operations into a single unified verification process. Instead of validating the kernel signature and RootDisk signature separately through different external systems, the embedded signature structure allows one authentication call to verify both components, reducing the verification burden while maintaining comprehensive authentication coverage.
Solution Approach 2:
The kernel performs self-service authentication by containing the embedded signature that enables it to verify the RootDisk directly. The kernel uses its own embedded signature structure to authenticate the RootDisk without requiring external authentication systems, making the verification process self-contained and reducing overall system complexity.
Data Source
AI summary
A method is provided for authenticating two distinct objects using a single signature stored on one of the objects. On initiation of a hardware system a valid hash value can be generated based at least in part on a rootdisk file and a kernel can be modified to contain the valid hash value. On subsequent boots of the hardware system, the valid hash value stored within the kernel can be compared with a value of a potential rootdisk file and if the valid hash value and the rootdisk hash value match, the hardware system can proceed with the boot process.