Tamper Detection in Protection Control Modules via Data Segmentation

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing software protection mechanisms are vulnerable to tampering, where detection modules can compromise the protection control module, leading to unauthorized operations and leakage of confidential data.

Innovation Solution

The system employs detection modules that verify the application decryption process performed by the protection control module without using its data, splitting output data into blocks for distribution among multiple modules, and performing mutual surveillance to detect tampering, ensuring that no single module accumulates sensitive information.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If detection modules read all protection control module data to detect tampering by calculating MAC values, then tamper detection capability is improved, but the risk of detection modules compromising the protection control module and leaking confidential data increases

Engineering Contradiction:

Improvetamper detection capabilityVSAvoidrisk of confidential data leakage

Core Design Contradiction:

Measurement precisionVSObject-affected harmful factors

Solution Approach 1:

The patent divides the protection control module data into multiple data blocks and distributes them to different detection modules. Each detection module only accesses and processes its assigned data block, rather than all data blocks. This segmentation reduces the attack surface for each detection module, so that even if one detection module is compromised, the attacker can only access a fraction of the confidential data, not the entire protection control module data.

Inventive Principle:

Principle #1Segmentation

2Reliability

If a single detection module has access to all protection control module data for verification, then verification completeness is improved, but the security risk from potential compromise of that module increases

Engineering Contradiction:

Improveverification completenessVSAvoidsecurity risk from module compromise

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent segments both the data blocks and the verification process across multiple detection modules. Each detection module is responsible for verifying its assigned data block independently. The system achieves complete verification by aggregating the verification results from all detection modules, thus maintaining verification completeness while distributing security risk across multiple modules.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent introduces a data management module as an intermediary that coordinates the verification process. The data management module distributes data blocks to detection modules, collects verification results, and aggregates them to determine overall verification outcomes. This intermediary enables complete verification without requiring any single detection module to have access to all data blocks.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Measurement precision

If detection modules accumulate all sensitive information for comprehensive verification, then verification accuracy is improved, but the potential damage from unauthorized operations by compromised modules increases

Engineering Contradiction:

Improveverification accuracyVSAvoiddamage from unauthorized operations

Core Design Contradiction:

Measurement precisionVSObject-generated harmful factors

Solution Approach 1:

The patent implements segmentation of sensitive information into multiple data blocks, with each block assigned to a different detection module. This ensures that no single detection module accumulates all sensitive information. Even if a detection module is compromised and performs unauthorized operations, the damage is limited to the specific data block it has access to, rather than all sensitive information in the system.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent applies local quality by giving each detection module specific verification responsibilities for its assigned data block, rather than requiring all modules to have access to all data. Each detection module develops specialized verification capabilities for its local data block, maintaining overall verification accuracy while minimizing the security risk associated with each individual module.

Inventive Principle:

Principle #3Local quality

Data Source

PatentEP2479701B1Information processing device, administration device, invalid-module detection system, invalid-module detection method, recording medium having an invalid-module detection program recorded thereon, administration method, recording medium having an administration program recorded thereon, and integrated circuit

Publication Date: 2019.07.03 PANASONIC HOLDINGS CORP

Figure 1
Figure 2
Figure 3

AI summary

The present invention aims to perform tamper detection on a protection control module without having detection modules come to know the key data and functions thereof. The detection modules of the present invention perform tamper detection by verifying whether or not the correspondence between the input and output data of the application decryption process performed by the protection control module is correct. Furthermore, the present invention offers improved security against leaks of the application output data by the detection modules by having a plurality of detection modules verify different data blocks.