Self-Correcting Secure Computer System Boot

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current operating systems executed from persistent memory are vulnerable to persistent attacks due to resource-intensive integrity verification and tracking of configuration changes, which are time-consuming and prone to malicious modifications.

Innovation Solution

A self-correcting secure computer system that loads a trusted operating system configuration from read-only memory (ROM) into volatile random access memory (RAM) during boot, allowing automatic erasure of volatile memory upon shutdown or reboot, thereby reducing vulnerability to cyber-attacks and maintaining system integrity.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If operating systems are executed from persistent memory, then system functionality is maintained, but vulnerability to persistent attacks increases and integrity verification becomes resource intensive

Engineering Contradiction:

Improvesystem functionalityVSAvoidvulnerability to persistent attacks

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The system divides memory into two distinct segments: persistent memory for storing the operating system and volatile memory for executing it. This segmentation allows the OS to be stored in a permanent repository while running from temporary memory, reducing the attack surface by isolating the executable environment from persistent storage.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

Volatile memory acts as an intermediary between persistent memory and the processor. The OS is loaded from persistent memory into volatile memory for execution, creating a buffer zone that prevents direct access to persistent storage during runtime, thereby reducing vulnerability to persistent attacks.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Duration of action of stationary object

If operating systems are executed from persistent memory, then system continuity is maintained, but integrity verification becomes time consuming

Engineering Contradiction:

Improvesystem continuityVSAvoidintegrity verification time

Core Design Contradiction:

Duration of action of stationary objectVSLoss of time

Solution Approach 1:

The system performs integrity verification of the operating system before loading it into volatile memory. By verifying the OS in advance while it resides in persistent memory, the system ensures integrity before execution begins, avoiding time-consuming verification during runtime and maintaining system continuity.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system replaces continuous mechanical verification processes with a preliminary verification step. Instead of continuously verifying integrity during execution from persistent memory, the system performs a single verification pass before loading, significantly reducing the time required while maintaining system continuity.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

3Duration of action of stationary object

If operating systems are executed from persistent memory, then data persistence is maintained, but random access times increase

Engineering Contradiction:

Improvedata persistenceVSAvoidrandom access time

Core Design Contradiction:

Duration of action of stationary objectVSSpeed

Solution Approach 1:

The system segments the memory hierarchy into persistent memory for data storage and volatile memory for active processing. By loading the operating system into volatile memory for execution, the system gains fast random access speeds while maintaining data persistence in the separate persistent memory repository.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The system creates a copy of the operating system from persistent memory into volatile memory. This copy enables fast random access during execution, while the original in persistent memory maintains data persistence. The copying process allows the system to enjoy the benefits of both fast access and data retention.

Inventive Principle:

Principle #26Copying

Data Source

PatentUS11175981B1Systems and methods for dynamic self correcting secure computer systems

Publication Date: 2021.11.16 KEEP SECURITY LLC

AI summary

A self-correcting secure computer system is provided. The computer system includes a read-only memory (ROM) device, a random access memory (RAM) device, and at least one processor in communication with the ROM device and the RAM device. The at least one processor is programmed to receive an activation signal, retrieve, from the ROM device, data to execute an operating system, and execute, on the RAM device, the operating system based on the data from the ROM device.