OS Kernel Encryption via Boot Program Hash Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current booting processes for computer systems are complex, time-consuming, and insecure due to separate verification processes for the booting program and operating system kernel, which can be falsified or replaced, requiring extensive storage and multiple verification steps.
Innovation Solution
An encryption and decryption method using a definition table to compute reversible hash functions between the booting program and operating system kernel, replacing kernel bit values with hash values to encrypt and decrypt the kernel, ensuring mutual authentication and preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If separate verification processes are used for booting program and operating system kernel, then verification completeness is improved, but process complexity and time consumption increase
Solution Approach 1:
The patent merges the verification of the booting program and operating system kernel into a single integrated verification process. The computing device verifies both the booting program and operating system kernel together by computing their respective verification results and determining authenticity in one unified process, eliminating the need for separate verification steps and reducing overall process complexity.
Solution Approach 2:
The patent applies preliminary action by pre-storing verification results (hash values) of both the booting program and operating system kernel in a database before the actual verification process. During booting, the system retrieves these pre-computed values and compares them with current values, avoiding the need for complex real-time verification computations and significantly reducing verification time.
2Reliability
If multiple verification processes are conducted, then security is improved, but time consumption increases
Solution Approach 1:
The patent performs preliminary computation of verification results (hash values) for both the booting program and operating system kernel and stores them in a database before the actual verification process. During booting, the system retrieves these pre-computed values and compares them with current values, avoiding the need for complex real-time verification computations and significantly reducing verification time while maintaining security.
Solution Approach 2:
The patent segments the verification process into distinct components: verifying the booting program separately from verifying the operating system kernel. Each component has its own verification result stored in the database. This segmentation allows the system to efficiently verify each component independently using pre-computed values, reducing overall verification time while maintaining comprehensive security coverage.
3Measurement precision
If verification results are pre-stored and compared, then verification accuracy is improved, but storage space requirements increase
Solution Approach 1:
The patent extracts only the essential verification results (hash values) from the complete booting program and operating system kernel data. Instead of storing entire programs or extensive verification metadata, the system computes and stores only the critical hash values that are necessary for verification. This extraction approach maintains verification accuracy while significantly reducing the storage space required.
Solution Approach 2:
The patent uses lightweight hash values as disposable verification tokens instead of storing large, complex verification datasets. These hash values are computationally inexpensive to generate and store, yet provide sufficient verification accuracy. The system generates fresh verification results by comparing current booting data against stored hash values, eliminating the need for persistent storage of large verification datasets.
Data Source
AI summary
An encryption and decryption methods applied on an operating system kernel are disclosed, where a hash result is obtained from a computation between a booting program and the operating system kernel by using a definition table, the computation result is combined with the operating system kernel for encryption of the operating system kernel, and the operating system kernel may not be decrypted and thus booted whenever the booting program, the operating system kernel or the two combined are falsified or replaced, whereby the technical efficacy which the booting program and the operating system kernel are authenticated bilaterally for safety booting may be achieved.