Registry Management via Administrative Database Segmentation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing method of restoring setting values in a computer system's registry using snapshots is time-consuming and inefficient, often reverting to unsuitable or outdated values, and cannot effectively address tampering by unregistered programs, leading to unstable system operations and inconvenience.
Innovation Solution
A computer program that manages a setting information database by maintaining an administrative database to store and retrieve setting information, appending write requests instead of overwriting, and using a white list to register trusted programs, allowing for quick cleanup and initialization, thereby maintaining reliability and stability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the system restore application generates snapshots of the entire registry in chronological order to allow restoration to a previous state, then the system can recover from registry tampering, but the restoration process takes a long time and may revert properly updated entries to outdated values
Solution Approach 1:
The patent segments the registry management into two separate databases: an administrative database that stores only metadata and structural information about registry keys, and the actual registry database that stores setting values. This segmentation allows the administrative database to be quickly restored without transferring entire registry snapshots, significantly reducing restoration time while maintaining system reliability.
Solution Approach 2:
The patent extracts the essential structural information and metadata from the complete registry snapshots, storing only this extracted information in the administrative database. When restoration is needed, only this extracted administrative data needs to be transferred and applied, rather than copying entire registry snapshots, which dramatically speeds up the restoration process.
2Reliability
If the system uses snapshots to restore the entire registry to a previous state, then tampering can be reversed, but properly updated entries are also reverted to previous values which may be outdated or unsuitable
Solution Approach 1:
The patent applies local quality by restoring only the specific registry keys and values that were tampered with, rather than reverting the entire registry to a previous state. The administrative database stores information about which specific entries have been modified, allowing selective restoration of only those entries that need correction while preserving legitimately updated values.
Solution Approach 2:
The administrative database maintains a record of all registry modifications with metadata about the source and timing of changes. This feedback mechanism allows the system to identify which changes are legitimate and which are tampering, enabling intelligent restoration decisions that preserve user-convenient updates while reversing malicious modifications.
3Reliability
If cleanup software deletes data tampered by processes registered in a black list, then known malware can be removed, but unregistered malicious programs cannot be detected and removed
Solution Approach 1:
The patent performs preliminary action by establishing a white list of trusted registry keys and values before system operation. The administrative database contains information about legitimate registry structures and expected values. When restoration is needed, the system compares current registry state against this pre-established white list to identify tampering, enabling detection of unknown malicious programs without relying on black list signatures.
Data Source
AI summary
Computer programs, methods and systems for managing a setting information database of a computer system are described. The computer system includes an original setting information database and an administrative database which store setting information of the system. Each time a write request to write data to the setting information database is received from a requester, a write processing portion writes the requested data to the administrative database. When a read processing portion receives a read request to read data from the setting information database, if the data is included in the administrative database, the read processing portion passes the data from the administrative database to the program that issued the read request. An editing portion cleans up the administrative database using a white list to ensure that only a trusted program can write data.