Signed Bounded Pointer Generation with Signature Insertion
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data processing systems face challenges in securely reconstructing bounded pointers from general purpose data stored in a backing store, which can compromise the security benefits of bounded pointers if not handled carefully.
Innovation Solution
The implementation of a processing circuitry that generates bounded pointers with associated attributes, including range information and optional signatures, ensures secure reconstruction by performing insert signature operations only under specific conditions, allowing for the differentiation and secure handling of signed and unsigned bounded pointers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If bounded pointers are decomposed into general purpose data format in backing store, then storage flexibility is improved, but security is worsened
Solution Approach 1:
The patent applies preliminary action by inserting a signature into the bounded pointer data before storing it in the backing store. This signature is generated in advance and embedded within the pointer structure, allowing the system to maintain security credentials even when the pointer is stored in a general-purpose data format. The signature serves as a pre-established security mechanism that prevents unauthorized modification or misuse of the pointer data during storage.
2Reliability
If signature insertion is performed during bounded pointer generation, then security is improved, but processing complexity is worsened
Solution Approach 1:
The patent merges the signature insertion operation with the existing bounded pointer generation process. Instead of treating signature insertion as a separate, additional step, the system integrates it into the pointer creation workflow. This is achieved by modifying the pointer generation logic to automatically generate and insert signatures when creating new bounded pointers, thereby combining two operations into one unified process.
3Reliability
If signature verification is performed during pointer reconstruction, then security is improved, but processing time is worsened
Solution Approach 1:
The patent replaces complex cryptographic verification mechanisms with a simpler signature matching process. Instead of performing full cryptographic verification during pointer reconstruction, the system uses a streamlined approach that compares the stored signature against reconstructed pointer data. This substitution maintains security guarantees while significantly reducing the computational overhead and time required during the reconstruction process.
Data Source
Figure 1
Figure 2A~2B
Figure 3
AI summary
An apparatus and method are provided for generating signed bounded pointers from general purpose specified data, for example data that may exist within a backing store such as a disk. The apparatus has processing circuitry that is responsive to a bounded pointer generation request to perform a generation operation to generate a bounded pointer from the specified data provided at least one generation condition is met. The bounded pointer comprises a pointer value and associated attributes, and the associated attributes include range information indicative of an allowable range of addresses when using the pointer value. The processing circuitry is further responsive to detection from the specified data that the bounded pointer to be generated is a signed bounded pointer incorporating a signature, to perform as part of the generation operation, at least in the presence of a signing condition being met, an insert signature operation during which the signature is determined from a portion of the specified data and incorporated within the generated bounded pointer. Thereafter, the generated bounded pointer is output for storage in a storage element of the apparatus.