Signature Verification for Secure Booting in Image Formers
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing encryption schemes in image forming apparatuses are vulnerable to future advancements in computing speed and analysis technology, necessitating a secure method to support multiple encryption schemes and verify electronic signatures.
Innovation Solution
An information processing apparatus that stores programs with signatures generated using multiple encryption schemes and employs a controller to verify the validity of these signatures based on supported encryption schemes, allowing for secure booting and operation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple encryption schemes are supported to ensure future security, then security reliability is improved, but verification time increases
Solution Approach 1:
The verification process is segmented into two distinct phases: first verifying the signature corresponding to the supported encryption scheme, and only if that verification fails, then verifying the signature corresponding to the unsupported encryption scheme. This segmentation allows the system to handle multiple encryption schemes while minimizing verification time by avoiding unnecessary verification steps.
Solution Approach 2:
The system performs only the necessary verification action - verifying just one signature (the one corresponding to the supported encryption scheme) unless that verification fails, in which case it performs additional verification of the other signature. This partial action approach avoids the excessive action of always verifying all signatures regardless of support status.
2Adaptability or versatility
If multiple encryption schemes are supported to prevent future vulnerabilities, then adaptability is improved, but device complexity increases
Solution Approach 1:
The verification process is made dynamic by adapting its behavior based on the support status of different encryption schemes. The controller dynamically determines which verification path to follow based on real-time information about which encryption schemes are supported, making the system adaptable without requiring complex static configurations for all possible scenarios.
Solution Approach 2:
The system extracts and separates the verification processes for different encryption schemes into distinct, independent verification paths. By extracting the verification logic for supported and unsupported encryption schemes into separate flows, the system manages complexity through modularization rather than through a single monolithic verification process.
3Reliability
If signature verification for multiple encryption schemes is performed, then security against future threats is improved, but processing load increases
Solution Approach 1:
The system performs only the necessary verification action - verifying just one signature (the one corresponding to the supported encryption scheme) unless that verification fails, in which case it performs additional verification of the other signature. This partial action approach avoids the excessive action of always verifying all signatures regardless of support status, thereby reducing processing load while maintaining security.
Solution Approach 2:
The system performs preliminary verification of the signature corresponding to the supported encryption scheme before considering verification of other signatures. This preliminary action allows the system to quickly eliminate the need for further verification in most cases, reducing overall processing load while maintaining thorough security checking when needed.
Data Source
AI summary
An information processing apparatus verifies, by using a fact that a first encryption scheme is supported and a second encryption scheme is not supported, whether or not a first signature corresponding to the first encryption scheme is valid, verifies, by using a fact that the first encryption scheme is not supported and the second encryption scheme is supported, whether or not a second signature corresponding to the second encryption scheme is valid, and executes, when the first signature or the second signature is verified to be valid, a program.