Compressed Memory Metadata Canary for Buffer Overflow Detection

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Information processing systems with compressed memory units are vulnerable to security attacks, particularly buffer overflows, which require a real-time data integrity detection mechanism.

Innovation Solution

An apparatus and method for data integrity detection that includes a compressed data sector, a meta data sector with an invalid meta data index, and a compression/decompression engine. A canary is inserted into the meta data sector to detect memory buffer overflows, and a processor monitors for hardware exceptions to declare a real-time fault condition.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Quantity of substance

If data compression is implemented in memory units, then storage requirements are reduced, but vulnerability to security attacks increases

Engineering Contradiction:
Improvestorage requirementsVSAvoidvulnerability to security attacks
Core Design Contradiction:
Quantity of substanceVSObject-affected harmful factors

Solution Approach 1:

The patent implements preliminary protective actions by inserting canary values into metadata sectors before compression operations occur. These canary values serve as预先放置的检测机制, allowing the system to detect buffer overflow attacks before they can compromise data integrity. The fault protection circuit continuously monitors for anomalies in the compressed data, enabling early detection and response to security threats.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces canary values as intermediary elements between the compression process and the stored data. These canary values act as mediators that facilitate detection of unauthorized modifications. When a buffer overflow attempt occurs, the canary values are the first to be affected, serving as an intermediary warning system that alerts the fault protection circuit to potential security breaches before critical data is compromised.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If real-time detection mechanism is added, then data integrity is improved, but device complexity increases

Engineering Contradiction:
Improvedata integrityVSAvoiddetection mechanism complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the detection function into a separate, dedicated fault protection circuit that operates independently from the main compression and storage operations. This extracted detection mechanism monitors specific indicators (canary values in metadata) rather than analyzing entire data streams, significantly reducing computational complexity while maintaining real-time detection capability. The separation of detection functions from data processing paths simplifies the overall system architecture.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent applies local quality monitoring by focusing detection efforts on specific critical points in the data structure - namely the metadata sectors containing canary values. Rather than implementing comprehensive real-time analysis of all compressed data, the system concentrates monitoring resources on these localized, high-value indicators. This approach achieves effective integrity verification with minimal computational overhead, as the canary values serve as localized sentinels for potential buffer overflow attacks.

Inventive Principle:
Principle #3Local quality

Data Source

PatentUS20250156396A1Data integrity detection
Publication Date: 2025.05.15 QUALCOMM INC
  • US20250156396A1 patent drawing
  • US20250156396A1 patent drawing
  • US20250156396A1 patent drawing

AI summary

Aspects of the disclosure are directed to data integrity detection. In accordance with one aspect, an apparatus including a compressed data sector configured to store a compressed data; a meta data sector coupled to the compressed data sector, the meta data sector configured to indicate an invalid meta data index; and a compression/decompression engine coupled to the meta data sector, the compression/decompression engine configured to compress an original data to generate the compressed data and further configured to decompress the compressed data to generate a decompressed data.