Automated Software Verification via Dynamic Hash Calculation

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional methods for creating verification information to ensure software integrity are unreliable and require significant human effort, especially when dealing with typical software that lacks reliable collation information and requires manual setup, especially during software installation.

Innovation Solution

A system and method that dynamically acquires and calculates hash values of files in the software installation directory to create verification information, including file paths and hash values, which can be used to verify the integrity of software packages, even when installed without a software package, by identifying real files and recalculating hash values post-installation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional techniques are used to create verification information, then the process can be completed with existing methods, but the reliability of verification information is insufficient and human work is required

Engineering Contradiction:

Improvereliability of verification informationVSAvoidautomation of verification information creation

Core Design Contradiction:

ReliabilityVSExtent of automation

Solution Approach 1:

The system automatically installs software packages, extracts files, calculates hash values, and generates verification information without requiring manual human intervention. The verification information creation apparatus autonomously performs all necessary operations to create accurate verification information, eliminating the need for human work while ensuring high reliability.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The system performs preliminary actions by automatically installing the software package before creating verification information. It extracts files, calculates hash values, and prepares all necessary data in advance, so that when verification is needed, the verification information is already accurate and ready, eliminating the need for manual setup.

Inventive Principle:

Principle #10Preliminary action

2Adaptability or versatility

If verification information is created for typical software without reliable collation information, then the system can handle more software types, but the accuracy and reliability of verification decreases

Engineering Contradiction:

Improvesupport for typical softwareVSAvoidreliability of verification information

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The system replaces manual mechanical processes of creating verification information with automated computational processes. It automatically calculates hash values using cryptographic algorithms, extracts file information, and generates verification information programmatically, eliminating the need for manual input and ensuring high accuracy and reliability for all software types including typical software.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

3Ease of operation

If manual setup of verification information is performed, then human control over the process is maintained, but time and effort are significantly increased

Engineering Contradiction:

Improvemanual control capabilityVSAvoidtime required for verification information creation

Core Design Contradiction:

Ease of operationVSLoss of time

Solution Approach 1:

The verification information creation apparatus performs all operations autonomously without requiring manual control or human intervention. It automatically installs software, extracts files, calculates hash values, and generates verification information in a single automated process, significantly reducing the time and effort that would otherwise be required for manual setup.

Inventive Principle:

Principle #25Self-service

4Adaptability or versatility

If verification information is created after software installation with manual setting, then the system can adapt to installation destinations, but the process becomes more complex and time-consuming

Engineering Contradiction:

Improveinstallation destination flexibilityVSAvoidcomplexity of verification information creation process

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The system performs preliminary actions by automatically installing the software package and extracting all files before creating verification information. It automatically determines installation destinations and file locations through programmatic analysis, eliminating the need for manual configuration and reducing process complexity while maintaining adaptability to different installation environments.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS12073004B2Verification information generating system, verification information generating method, and verification information generating program

Publication Date: 2024.08.27 NIPPON TELEGRAPH & TELEPHONE CORP

AI summary

A verification information creation apparatus acquires an installation directory of software from equipment on which the software is installed, and acquires a file path and a hash value of a file whose hash value is acquirable based on types of files stored in the acquired directory. Then, the verification information creation apparatus creates verification information about the software, where the verification information includes the acquired file path and the hash value of the file.