Medium Handling Software Validation With Tamper-Resistant Version Lists
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing sheet handling apparatuses face challenges in securely managing software versions due to the lack of a robust mechanism for identifying and validating executable software, leading to potential inconsistencies and unauthorized changes.
Innovation Solution
A medium handling apparatus with a tamper-resistant memory device and a processor that stores verification information, allowing for secure identification and validation of software versions through a white list mechanism, ensuring only authorized software is executed.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If software has multiple versions with verification information, then software version management capability is improved, but security risk increases due to potential unauthorized changes
Solution Approach 1:
The verification information is segmented into two distinct parts: a list containing verification information for multiple software versions, and separate identification information that specifies which version from the list is the executable version. This segmentation allows the system to manage multiple versions securely by isolating the version selection mechanism from the verification data itself, thereby maintaining security while enabling version management.
Solution Approach 2:
The identification information acts as an intermediary between the list of verification information and the executable software version. Instead of directly accessing or modifying verification information, the system uses this intermediary identifier to securely reference the valid executable version, preventing unauthorized changes while maintaining version management capability.
2Measurement precision
If verification information is stored in accessible memory, then software validation is improved, but vulnerability to tampering increases
Solution Approach 1:
The system performs preliminary validation by storing verification information in advance within the processor's memory structure. The identification information is pre-configured to point to the correct executable version, allowing the system to validate software before execution without requiring external access during runtime, thus preventing tampering while maintaining validation accuracy.
3Ease of operation
If a simple checksum mechanism is used, then software verification is improved, but ability to manage multiple versions securely deteriorates
Solution Approach 1:
The system adds a new dimension to traditional checksum verification by introducing identification information that operates at a higher level of abstraction. Instead of merely checking checksums, the system uses this additional dimensional layer to selectively identify which version from the verification list should be executed, thereby maintaining verification simplicity while enabling secure multi-version management.
Data Source
AI summary
A medium handling apparatus includes a first memory device that is tamper resistant, a second memory device that stores a plurality of executable instructions, and a processor. The first memory device includes a first memory area that stores pieces of verification information, used for verification of validity of the plurality of executable instructions, as a list which enables a search for particular verification information by version of an executable instruction, and a second memory area that stores identification information for identifying a piece of verification information of an executable version of the executable instruction from the list. Each of the pieces of verification information includes an identifier of a version and a verification value calculated based on a valid executable instruction corresponding to the identifier.