Server Hardware Integrity Verification via Hash Comparison
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for verifying the integrity of terminals in IoT environments are inadequate in detecting hardware or firmware tampering, as they primarily focus on software verification, which is insufficient against third-party attacks exploiting hardware bugs or defects.
Innovation Solution
A server system that verifies the hardware integrity of terminals by comparing memory-related data from external terminals with stored reference data, using hash values for secure verification, and transmits results to involved terminals, enabling detection of hardware issues and preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If software integrity verification methods are used to verify terminal integrity, then verification can be performed through Device to Device authorization or by verifying main files such as applications or binary files of the operating system, but these methods cannot detect hardware or firmware tampering caused by third-party attacks exploiting hardware bugs or defects
Solution Approach 1:
The patent segments the integrity verification process into distinct components: software verification (existing methods) and hardware verification (new hash-based comparison method). By separating these functions, the system can apply appropriate verification techniques to each layer, enabling detection of hardware tampering that software-only methods cannot detect.
Solution Approach 2:
The patent implements preliminary action by pre-storing hash values of hardware components (CPU, GPU, NPU, memory, storage, sensors, camera, display, audio, wireless communication modules) in a secure database before deployment. This allows rapid verification of hardware integrity without requiring physical inspection or complex analysis during runtime, enabling quick detection of hardware tampering.
2Ease of repair
If formatting the hard disc or re-installing the OS is performed to restore a terminal damaged by virus, then the terminal can be restored from software attacks, but hardware or firmware defects cannot be restored by these methods
Solution Approach 1:
The patent implements feedback by continuously monitoring hardware integrity through hash value comparison and providing real-time alerts when tampering is detected. The system compares current hardware hash values against stored reference values, and when discrepancies are found, it immediately notifies the user and prevents system operation, enabling proactive response to hardware compromises before they can cause damage.
3Reliability
If a comprehensive hardware integrity verification system is implemented by storing reference data and comparing memory-related data, then hardware integrity can be verified, but the system complexity increases with multiple terminals, processors, and storage components involved
Solution Approach 1:
The patent introduces an intermediary approach by using hash values as mediators between the complex hardware components and the verification system. Instead of directly analyzing or comparing raw hardware data (which would be extremely complex), the system converts hardware states into compact hash representations, enabling efficient and accurate verification without managing the full complexity of underlying hardware architectures.
Data Source
Figure 1~2
Figure 3~6A
Figure 6B~8A
AI summary
A server includes communication circuitry configured to communicate with a plurality of external terminals, a storage which stores reference data for hardware integrity verification of the plurality of external terminals, and a processor configured to verify the hardware integrity of a second external terminal using the reference data, when a request for the hardware integrity verification of the second external terminal is received through the communication circuitry from a first external terminal.