Program Portion Hash Inspection for Low-Capacity Terminals

Solution Overview

Problem

Information terminals with low computing capacity face inefficiencies in program authenticity inspection due to the need to calculate and compare hash values for the entire program, resulting in lengthy inspection processes.

Innovation Solution

An information processing device that stores unique values for each program portion in advance and inspects for tampering by recalculating and comparing these values, allowing for a focused inspection region based on call relationships and memory addresses.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If hash value calculation is performed for the whole program, then program authenticity inspection coverage is improved, but inspection time increases

Engineering Contradiction:

Improveprogram authenticity inspection coverageVSAvoidinspection time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The program is divided into multiple portions, each with its own unique value (hash value) calculated and stored in advance. During inspection, only the unique values of relevant portions are recalculated and compared, rather than processing the entire program. This segmentation allows for targeted authentication of specific code sections, maintaining security coverage while significantly reducing inspection time for devices with low computing capacity.

Inventive Principle:

Principle #1Segmentation

2Measurement precision

If hash value calculation is performed for the whole program, then tampering detection accuracy is improved, but computing resource consumption increases

Engineering Contradiction:

Improvetampering detection accuracyVSAvoidcomputing resource consumption

Core Design Contradiction:

Measurement precisionVSUse of energy by moving object

Solution Approach 1:

The program is divided into multiple portions, each with its own unique value (hash value) calculated and stored in advance. During inspection, only the unique values of relevant portions are recalculated and compared, rather than processing the entire program. This segmentation allows for targeted authentication of specific code sections, maintaining security coverage while significantly reducing inspection time for devices with low computing capacity.

Inventive Principle:

Principle #1Segmentation

3Reliability

If inspection is performed on the entire program, then security coverage is improved, but processing speed deteriorates

Engineering Contradiction:

Improvesecurity coverageVSAvoidprocessing speed

Core Design Contradiction:

ReliabilityVSSpeed

Solution Approach 1:

The program is divided into multiple portions, each with its own unique value (hash value) calculated and stored in advance. During inspection, only the unique values of relevant portions are recalculated and compared, rather than processing the entire program. This segmentation allows for targeted authentication of specific code sections, maintaining security coverage while significantly reducing inspection time for devices with low computing capacity.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

Unique values (hash values) for each program portion are calculated and stored in advance during the program creation or update phase. This preliminary calculation eliminates the need to recalculate hash values for the entire program during inspection, as only the relevant portions need to be verified. This pre-computation approach significantly speeds up the inspection process while maintaining comprehensive security coverage.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS11449617B2Information processing device, information processing method, and storage medium

Publication Date: 2022.09.20 NEC CORP

AI summary

An information processing device according to the present invention includes: a storage unit that stores a first unique value calculated for each portion of a program in advance; and an inspection unit that inspects whether or not there is a tampering in the portion by newly calculating a second unique value for the portion and comparing the first unique value with the second unique value.