Temporary Value Translation for Secure Software Compilation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing vehicle systems face vulnerabilities due to the exposure of sensitive information in source code, making them susceptible to data breaches, and there is a need for enhanced security measures to protect credentials and secrets from unauthorized access.
Innovation Solution
Implementing a method to translate dummy values in source code to secret values stored in a secure data store during compilation, ensuring that sensitive information is never exposed in the source code, by using a decentralized blockchain system for authorization and authentication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If sensitive information is stored in source code for easy access and modification, then ease of operation is improved, but data security deteriorates due to exposure of credentials and secrets
Solution Approach 1:
The patent extracts sensitive information (credentials and secrets) from the source code by replacing them with placeholder dummy values. The actual sensitive data is stored separately in a secure data store, eliminating the risk of exposure through source code while maintaining the ability to access the information when needed through the compilation process.
Solution Approach 2:
The patent introduces dummy values as intermediary placeholders that replace sensitive information in the source code. These dummy values serve as a mediator between the source code and the actual sensitive data, allowing the compilation process to proceed without exposing credentials while enabling secure access through the translation mechanism.
2Reliability
If dummy values are used in source code to protect sensitive information, then data security is improved, but device complexity increases due to additional translation and compilation steps
Solution Approach 1:
The patent performs preliminary action by pre-translating dummy values to their corresponding actual values during the compilation process. This preliminary translation step is automated and integrated into the existing compilation workflow, so while it adds complexity, it eliminates the need for manual security handling and reduces operational complexity in the long run.
3Reliability
If sensitive information is kept isolated from source code using translation, then data security is improved, but loss of information occurs during the translation and compilation process
Solution Approach 1:
The patent implements feedback mechanisms where the compilation system tracks and manages the translation of dummy values to actual values. The system maintains awareness of which values have been translated and ensures that the translated information is properly integrated into the compiled output, preventing information loss while maintaining security isolation during the compilation process.
Data Source
Figure 1A
Figure 1B
Figure 2A
AI summary
An example operation includes one or more of receiving a request to compile a software application, identifying one or more dummy values which were previously stored in source code of the software application, translating the one or more dummy values into source code using one or more secret values stored in a data store, and compiling, via a device, the source code of the software application into binary code using the secret values.