Remote Attestation Verification for Software With Dynamic Data

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional remote attestation schemes struggle to verify the integrity of software containing dynamic data whose content changes, as preparing a correct value in advance is impossible due to varying measurement results.

Innovation Solution

A verifier device that receives dynamic data or its measurement value from a prover device, along with basic data capable of estimating the dynamic data, stores master dynamic and basic data in association, and verifies the integrity using these data to output a verification result.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional remote attestation schemes are used to verify software integrity, then verification can be performed for static software, but verification fails for software containing dynamic data whose content changes

Engineering Contradiction:

Improvesoftware integrity verificationVSAvoidcapability to handle dynamic data

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The software is segmented into static portions and dynamic data portions. The verification process separately handles these segments by measuring only the static portions and using basic data to estimate the dynamic data, thereby resolving the contradiction between verifying integrity and handling changing content.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The verification approach changes from comparing fixed hash values to comparing measured values against estimated values derived from basic data. This parameter change enables verification to adapt to dynamic data while maintaining reliability for static portions.

Inventive Principle:

Principle #35Parameter changes

2Ease of manufacture

If measurement results are compared against pre-prepared correct values, then verification is simple for static software, but it becomes impossible to verify software with varying dynamic content

Engineering Contradiction:

Improveverification process simplicityVSAvoidverification accuracy for dynamic software

Core Design Contradiction:

Ease of manufactureVSReliability

Solution Approach 1:

Basic data serves as an intermediary that enables the estimation of dynamic data. Instead of directly comparing measurement results against fixed correct values, the system uses basic data as a mediator to derive expected dynamic content, maintaining simplicity while improving accuracy for dynamic software.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Measurement precision

If all software data including dynamic data is measured and verified, then complete integrity verification is achieved, but the verification becomes impossible due to varying content

Engineering Contradiction:

Improvecompleteness of integrity verificationVSAvoidverification system complexity

Core Design Contradiction:

Measurement precisionVSDevice complexity

Solution Approach 1:

The dynamic data portion is extracted from the complete software measurement process. By measuring only the static software portions and separately estimating dynamic data using basic data, the system achieves practical verification completeness without the complexity of measuring and verifying all varying content.

Inventive Principle:

Principle #2Taking out (Extraction)

Data Source

PatentUS20260064850A1Verifier device, verification method, storage medium storing verification program, and remote attestation system

Publication Date: 2026.03.05 DENSO CORP

AI summary

The verifier device is configured to receive dynamic data or a measurement value calculated using the dynamic data from the prover device that places and executes a software in a memory, the software including the dynamic data whose content changes, receive basic data from the prover device, the basic data being capable of estimating the dynamic data that should originally be placed in the memory, store master dynamic data, whose data content changes, and which is included in master software that is a copy of the software, and master basic data, which is capable of estimating the master dynamic data, in association with each other, and verify the dynamic data or the measurement value using the master dynamic data associated with the master basic data corresponding to the basic data to output a verification result.