Script Integrity Verification via Decrypted Fingerprint Matching

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing methods fail to effectively prevent untrusted script execution in trusted environments, as they cannot monitor and verify the integrity of script files executed by interpreters, making them vulnerable to malicious modifications.

Innovation Solution

A method that decrypts an encrypted file fingerprint, computes a script file fingerprint using a hash function, and compares it with a stored fingerprint to ensure the script file has not been modified, allowing execution only if the fingerprints match, thereby preventing untrusted script files from running.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If script files are executed directly by interpreters in trusted environments, then ease of operation is improved, but reliability deteriorates due to inability to verify script integrity

Engineering Contradiction:

Improvescript executionVSAvoidscript integrity verification

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The system performs preliminary actions by computing and storing fingerprints of trusted script files before execution. When a script is requested, its fingerprint is computed and compared against stored fingerprints to verify integrity before allowing execution, thus preventing unauthorized modifications while maintaining ease of operation.

Inventive Principle:

Principle #10Preliminary action

2Reliability

If fingerprint verification is implemented for script files, then reliability is improved, but device complexity increases due to additional verification mechanisms

Engineering Contradiction:

Improvescript integrity verificationVSAvoidverification system

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent replaces complex mechanical verification systems with cryptographic hash functions to compute fingerprints. This substitution uses mathematical algorithms instead of elaborate mechanical checking mechanisms, achieving reliable integrity verification while minimizing additional system complexity.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

3Reliability

If script files are monitored and verified before execution, then reliability is improved, but productivity decreases due to additional verification steps

Engineering Contradiction:

Improvescript execution safetyVSAvoidscript execution speed

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

Fingerprints of trusted script files are computed and stored in advance during system setup or deployment. When execution is requested, only a quick fingerprint comparison is needed rather than re-verify the entire script, minimizing the impact on execution speed while maintaining reliability.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system performs only the necessary minimal verification by comparing fingerprints rather than re-analyzing the entire script content. This partial action approach verifies critical integrity information without the overhead of complete script validation, preserving productivity.

Inventive Principle:

Principle #16Partial or excessive action

Data Source

PatentUS11288360B2Preventing untrusted script execution

Publication Date: 2022.03.29 KYNDRYL INC

AI summary

Using a first key, an encrypted file fingerprint is decrypted, the decrypting resulting in a decrypted file fingerprint. Using a hash function on a script file, a script file fingerprint is computed, the script file intended to be executed by an interpreter. Responsive to the script file fingerprint matching the decrypted file fingerprint, the script file is executed.