NDM File Integrity Verification via Hash and Timestamp
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
NDM files used in Openflow protocols are vulnerable to tampering during network transmission, making it difficult for receiving devices to determine if the files have been altered, resulting in low security.
Innovation Solution
A method where a sending device generates and sends integrity information along with the NDM file to a receiving device, allowing verification of the file's integrity using a signature algorithm and a second key, and includes validity information to determine the file's valid period, enhancing security and validity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If NDM file is transmitted through network without integrity verification mechanism, then transmission simplicity is maintained, but file security and reliability deteriorate due to vulnerability to tampering
Solution Approach 1:
The sending device performs preliminary actions by generating integrity information (hash value) and validity information (timestamp, expiration time) before transmission, and sends these along with the NDM file. The receiving device then verifies these pre-provided integrity checks, eliminating the need for complex real-time verification mechanisms during reception.
Solution Approach 2:
Integrity information (hash value) and validity information serve as intermediary elements that mediate between the sending device and receiving device. These intermediaries carry the verification data needed to confirm file integrity and validity without requiring complex direct verification protocols between the devices.
2Reliability
If no integrity verification mechanism is used, then transmission process remains simple, but security against tampering deteriorates
Solution Approach 1:
Integrity verification data is prepared in advance by the sending device before transmission. This preliminary preparation includes generating hash values and validity information, which are then sent together with the NDM file, allowing the receiving device to perform simple verification operations upon receipt.
Solution Approach 2:
The NDM file carries its own integrity verification information (hash value) and validity information embedded within it. This self-service approach allows the file to verify its own integrity and validity without requiring external verification systems, maintaining operational simplicity while enhancing security.
3Reliability
If integrity information and validity information are added to NDM file, then file verification capability is improved, but file structure complexity increases
Solution Approach 1:
The integrity information (hash value) and validity information (timestamp, expiration time) are merged with the NDM file content to form a unified file structure. This combining approach allows verification data to be integrated seamlessly with the original file, improving verification capability while maintaining a cohesive file structure rather than adding separate complex verification layers.
Data Source
Figure 1~3
Figure 4~6
Figure 7~8
AI summary
Embodiments of the present invention provide an NDM file protection method and apparatus. The method includes: a sending device generates integrity information of an NDM file, and send the NDM file and the integrity information of the NDM file to a receiving device, so that the receiving device verifies, according to the integrity information, whether the NDM file is tampered with. According to the embodiments of the present invention, integrity information of an NDM file is sent to a receiving device, so that the receiving device can verify, according to the integrity information, whether the NDM file is tampered with, thereby enhancing security of the NDM file.