Encryption Key File Hash Verification for Tamper Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing information processing systems lack effective methods to verify the integrity and authenticity of encryption key files, making them vulnerable to tampering, which compromises the security and integrity of the system.
Innovation Solution
The system writes an encryption key file encrypted with a first hash value into a non-encryption storage, decrypts it using a second encryption key data, calculates a second hash value, and verifies if it matches the first hash value, notifying a failure in verification to ensure the integrity and authenticity of the encryption key data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If encryption key files are stored in non-encryption storage for ease of access, then ease of operation is improved, but reliability deteriorates due to vulnerability to tampering
Solution Approach 1:
The patent applies preliminary action by calculating and storing the hash value of the encryption key file before it is stored in non-encryption storage. This pre-computed hash value serves as a reference for later verification, allowing the system to maintain both ease of access and integrity verification capability.
Solution Approach 2:
The patent implements feedback by verifying the hash value of the encryption key file against the stored reference hash value after retrieval from non-encryption storage. This feedback mechanism detects any tampering or corruption, ensuring reliability while allowing flexible storage options.
2Reliability
If encryption key files are stored encrypted for security, then reliability is improved, but device complexity increases due to additional decryption requirements
Solution Approach 1:
The patent extracts the hash verification function from the encryption/decryption process. By storing and verifying only the hash value separately from the encryption key file, the system reduces device complexity while maintaining security and reliability.
Solution Approach 2:
The patent uses the hash value as an intermediary element that mediates between the encryption key file and the verification process. This intermediary allows for simplified verification without requiring complex decryption operations for every access.
3Reliability
If hash verification is performed on encryption key files, then reliability is improved, but loss of time increases due to additional verification steps
Solution Approach 1:
The patent applies preliminary action by pre-calculating and storing the hash value of the encryption key file. This eliminates the need for time-consuming re-calculation during verification, reducing time loss while maintaining integrity verification capability.
Data Source
AI summary
An information processing apparatus includes processing circuitry. The processing circuitry writes an encryption key file that is encrypted into a second storage. The encryption key file includes first encryption key data and a first hash value of the first encryption key data. The first encryption key data is used for decrypting data stored in a first storage. The processing circuitry decrypts the encryption key file that is encrypted using a second encryption key data to obtain the encryption key file that is decrypted. The processing circuitry calculates a second hash value from the first encryption key data included in the encryption key file that is decrypted. The processing circuitry performs verification of the second encryption key data based on a determination of whether the first hash value matches the second hash value. The processing circuitry notify a verification result when the verification fails.