Remote Control Program Verification via Server-Side Integrity Checks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Remote control programs for home electrical appliances distributed via external servers are vulnerable to tampering, risking unauthorized control and data theft, especially since they connect to networks, posing a high risk of third-party interference.
Innovation Solution
A verification method that involves acquiring a unique identifier, generating and transmitting verification data based on the program's partial data, comparing it with authorized user data stored on a server, and prohibiting unauthorized control if the program is deemed invalid.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the control program connects to the network during execution, then the remote control function can be utilized, but the risk of tampering by third parties increases
Solution Approach 1:
The patent performs verification actions before the program executes network connections. The server device verifies the program's authenticity and integrity in advance by checking digital signatures and comparing program data against stored authorized versions, ensuring the program is legitimate before allowing it to connect to networks and perform remote control functions.
Solution Approach 2:
The patent implements continuous verification feedback mechanisms where the terminal device transmits verification data to the server device during program execution. The server device compares received program data with authorized versions and provides feedback to confirm the program's integrity, creating a closed-loop verification system that maintains security throughout the networked operation.
2Adaptability or versatility
If the control program is distributed via external server, then various additional functions can be executed, but the risk of unauthorized control and data theft increases
Solution Approach 1:
The server device performs preliminary verification of the control program before distribution to the terminal device. The server checks digital signatures, verifies program integrity, and compares the program against authorized versions stored on the server, ensuring the program is authentic and has not been tampered with before it reaches the user's terminal.
Solution Approach 2:
The server device acts as an intermediary between the program source and the terminal device. It mediates the distribution process by verifying program authenticity, checking digital signatures, and ensuring the program matches authorized versions before allowing execution, thereby protecting users from tampered programs while still enabling access to legitimate additional functions.
3Reliability
If verification is performed continuously during program execution, then program validity can be ensured, but the system complexity increases
Solution Approach 1:
The patent extracts the complex verification logic from the terminal device and places it on the server device. The server performs the heavy lifting of verifying digital signatures, comparing program data against authorized versions, and managing verification databases, while the terminal device only performs simpler tasks like transmitting verification data and receiving results, thereby reducing terminal complexity.
Solution Approach 2:
The server device serves as an intermediary that handles the complex verification computations and data comparisons. It receives verification data from the terminal, performs comprehensive checks against stored authorized programs and digital signatures, and returns verification results, thereby centralizing complexity in a dedicated server rather than burdening the terminal device.
Data Source
AI summary
A verification method pertaining to the present invention is executed by a terminal device and is used for determining the validity of a control program used for remotely controlling an appliance via a server. Verification data generated from: a unique identifier which is assigned to a user of the terminal device; a parameter which is generated by the server device and is assigned to the control program; and partial data which is at least a portion of the control program, is compared with comparison data generated from: the ID of the user stored in the server device; the parameter; and a portion of a program corresponding to the partial data of the control program. When a mismatch occurs, the remote control of the appliance will be prohibited.