Single Digital Signature for Installation Image Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing code signing process is time-consuming due to the need for multiple digital signatures for each file within a software package, which increases the number of files required for authentication.
Innovation Solution
A system where multiple files making up an installation image are encrypted with a symmetric key, and a single metadata file containing hash values and key indexes is digitally signed, allowing a destination to verify the authenticity and integrity of all files using a single digital signature.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple digital signatures are used for each file in a software package, then authentication reliability is improved, but authentication time and complexity increase
Solution Approach 1:
The patent combines multiple individual digital signatures into a single digital signature that covers multiple files. The metadata file contains a digital signature that authenticates multiple files simultaneously, eliminating the need for separate signatures for each file while maintaining authentication reliability.
Solution Approach 2:
The single digital signature in the metadata file serves multiple functions by authenticating multiple different files at once. This universal signature approach allows one signature to perform the authentication function that would otherwise require multiple separate signatures.
2Reliability
If multiple digital signatures are used for each file, then authentication reliability is improved, but the number of files required for authentication increases
Solution Approach 1:
The patent merges multiple authentication components into a single metadata file that contains a single digital signature. This metadata file serves as a unified authentication mechanism that replaces multiple separate signature files, reducing the total number of files needed for authentication while maintaining the ability to verify multiple original files.
3Reliability
If individual digital signatures are applied to each file, then file integrity verification is improved, but processing speed decreases
Solution Approach 1:
The patent performs preliminary action by creating a metadata file that contains a digital signature before the actual file processing occurs. This pre-computed signature in the metadata file allows for faster verification during installation or execution, as the authentication information is prepared in advance rather than being generated or verified individually for each file during processing.
Data Source
AI summary
A system includes a source including a memory storing: at least two encrypted files making up an installation image, each file encrypted with a key; a metadata file including an index to each key and a hash value for each encrypted file; a signature file providing a digital signature for the metadata file, the metadata file digitally signed with a private certificate; and a public certificate associated with the private certificate.