Sensitive Data Integrity Checks in Read-Only Memory
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing software protection methods face high performance overheads in ensuring the integrity of sensitive data, making them vulnerable to memory corruption vulnerabilities that can compromise sensitive operations.
Innovation Solution
Identify sensitive data in the software source code, set it in a read-only section during compilation, and insert a check code at the point of use to verify its integrity during runtime, using processor and hardware features to ensure the data remains in the read-only area.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If block cipher algorithm is used for integrity verification of sensitive data, then security protection is improved, but performance overhead increases significantly
Solution Approach 1:
The patent extracts the integrity verification function from general-purpose block cipher algorithms and implements it as dedicated hardware circuitry within the processor. This extraction allows the verification function to operate independently with optimized hardware logic, avoiding the performance overhead of software-based cryptographic operations while maintaining strong security protection for sensitive data
Solution Approach 2:
The patent introduces an intermediary integrity verification unit that sits between the sensitive data storage and usage points. This unit performs verification checks using dedicated hardware logic rather than full cryptographic operations, acting as a mediator that provides security protection with minimal performance impact on the main processing flow
2Reliability
If sensitive data is protected using traditional security mechanisms, then security is improved, but system complexity increases
Solution Approach 1:
The patent merges the integrity verification functionality directly into the processor's existing data path and control logic. By combining security verification with the normal data processing flow, the system achieves enhanced security without adding separate complex security subsystems or requiring significant architectural changes
Solution Approach 2:
The processor performs self-verification of sensitive data through integrated hardware logic that automatically checks integrity attributes during normal operation. This self-service approach eliminates the need for external verification systems or complex security management infrastructure, reducing overall system complexity while maintaining strong protection
Data Source
AI summary
The present disclosure provides a software protection method and apparatus, an electronic device and a storage medium. By identifying the sensitive data in the software source code and determining the point of use of the sensitive data; setting the sensitive data in the read-only section of the compilation product of the software source code so that the sensitive data is stored in the read-only area when the software is running; inserting the check code into the above point of use of the sensitive data, where the check code is used to check whether the sensitive data read is in the read-only area while the software is running, and determine whether to continue running the software according to the check result, embodiments of the present disclosure realize the integrity verification of the sensitive data, and thereby prevent the sensitive data from being corrupted with low performance overheads.