TEE-Signed Data Storage for Tamper and Deletion Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing data storage systems lack effective mechanisms to ensure the security and integrity of stored data, particularly in preventing tampering and unauthorized modifications.
Innovation Solution
A data processing method that utilizes a trusted execution environment (TEE) to generate timestamps and monotonic counter values, combining these with data digests and signing them to enhance security, ensuring data integrity by detecting unauthorized changes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional data storage methods are used, then storage simplicity is maintained, but data security and integrity cannot be ensured
Solution Approach 1:
The data storage system is segmented into multiple components: original data storage, digest storage, timestamp storage, monotonic counter storage, and signature storage. Each component serves a specific security function, allowing the system to achieve high reliability through modular architecture rather than monolithic complex structures.
Solution Approach 2:
A trusted execution environment (TEE) is introduced as an intermediary component that generates timestamps, monotonic counters, and digital signatures. This mediator ensures data integrity without requiring the entire storage system to be complex, as the TEE handles the security-critical operations in a isolated hardware environment.
2Reliability
If data tampering detection mechanisms are added, then data integrity is improved, but system complexity increases
Solution Approach 1:
The system performs preliminary actions by pre-calculating and storing the digest, timestamp, monotonic counter, and signature alongside the original data during the storage phase. This preliminary preparation enables simple verification operations later, as all necessary verification materials are already in place without requiring complex real-time computation.
Solution Approach 2:
Complex mechanical verification processes are replaced with cryptographic operations. Instead of using elaborate physical or procedural verification mechanisms, the system uses digital signatures and hash functions that can be verified through straightforward mathematical operations, reducing system complexity while maintaining high integrity.
3Difficulty of detecting and measuring
If timestamp and monotonic counter verification is implemented, then detection of deletions or insertions is improved, but processing complexity increases
Solution Approach 1:
The timestamp and monotonic counter fields serve as self-verification mechanisms. The timestamp provides chronological ordering, while the monotonic counter ensures sequential integrity. These fields automatically indicate any deletions or insertions through their inherent properties without requiring external verification systems, making the detection process straightforward.
Data Source
AI summary
The present disclosure relates to a data processing method, apparatus and computer readable storage medium, and relates to the technical fields of data storage and computer. The method of the present disclosure includes: sending a digest of data to be stored to a trusted execution environment; receiving combined information and a signature thereof returned by the trusted execution environment, wherein the combined information comprises the digest of the data to be stored, a timestamp and a monotonic counter value which are generated by the trusted execution environment and correspond to the data to be stored; and storing the data to be stored, the combined information and the signature.