Secure Boot Module Merging for Memory Optimization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for detecting software alterations in computer systems are inefficient in utilizing memory resources, particularly in devices with limited size or cost, due to redundant storage of signature verification processing and key information across modules.
Innovation Solution
A mechanism where each module stores its own digital signature and shares verification information with subsequent modules, allowing effective detection of alterations without redundant storage of public keys, thereby optimizing memory usage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If each module stores its own signature verification processing and key information, then alteration detection capability is improved, but memory resource utilization deteriorates due to redundant storage
Solution Approach 1:
The patent merges the signature verification functionality into a single dedicated module rather than duplicating it across multiple modules. This centralization eliminates redundant storage of verification processing code and key information, directly resolving the contradiction between maintaining alteration detection capability and reducing memory resource consumption.
Solution Approach 2:
The single signature verification module serves as a universal component that can verify multiple different modules (kernel, file system, applications). This multi-functional approach allows one module to perform the role that would otherwise require multiple duplicate verification components, thereby improving memory resource utilization while preserving comprehensive alteration detection capability.
2Reliability
If signature verification processing is embedded in each module, then verification capability is improved, but device complexity increases
Solution Approach 1:
The patent combines all signature verification processing into a single dedicated module, reducing the number of components that need to be designed, implemented, and maintained. This merging approach simplifies the overall system structure while preserving the ability to verify alterations across all modules, thereby reducing device complexity without sacrificing verification capability.
3Adaptability or versatility
If public keys are stored in each module, then verification independence is improved, but memory resource efficiency deteriorates
Solution Approach 1:
The patent introduces a central signature verification module as an intermediary that holds the public keys and verification logic. Instead of each module independently storing copies of public keys, they all interact with this single intermediary component. This approach maintains the ability to perform independent verification of each module while eliminating redundant storage of public keys, thereby improving memory resource efficiency without compromising verification independence.
Data Source
Figure 1
Figure 2A
Figure 2B
AI summary
An information processing apparatus that successively activates a plurality of modules, comprises a first module, a second module, and a third module. The first module activates the second module which has been verified, and the second module activates the third module which has been verified. The first module includes verification information used for verifying both of the second module and the third module, verifies the second module using the verification information and verifies the third module using the verification information.