Time Data Interception for Timing Attack Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional systems fail to protect against timing attacks, which involve malicious scripts determining encryption key information by measuring time taken for encryption algorithms to access address tables, allowing unauthorized access to sensitive data.
Innovation Solution
A computer-implemented method that identifies untrusted executables, intercepts their requests for system clock time, calculates an offset value within a predetermined margin, and provides this offset instead of the actual time, preventing precise timing data access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If accurate system clock information is provided to executables, then timing precision is improved, but security against timing attacks deteriorates
Solution Approach 1:
The patent introduces an intermediary layer between the system clock and the executable that intercepts timing requests. This intermediary (the time modification mechanism) provides time information to the executable while modifying it to prevent accurate timing measurements, thus resolving the contradiction between providing timing information and preventing timing attacks
Solution Approach 2:
The patent applies preliminary anti-action by proactively modifying time information before it reaches the executable. By preemptively altering the time data returned from system clock queries, the system prevents timing attacks before they can occur, while still allowing the executable to function with modified time information
2Object-affected harmful factors
If time data is modified to prevent timing attacks, then security is improved, but timing accuracy for legitimate applications deteriorates
Solution Approach 1:
The patent applies local quality by differentiating the treatment of time information based on the requester. Trusted applications receive accurate time information, while untrusted executables receive modified time information. This localized approach ensures that security measures are applied only where necessary, preserving timing accuracy for legitimate applications while preventing timing attacks from malicious ones
3Object-affected harmful factors
If system clock queries are intercepted and modified, then security against timing attacks is improved, but system complexity increases
Solution Approach 1:
The patent introduces an intermediary layer between the system clock and the executable that intercepts timing requests. This intermediary (the time modification mechanism) provides time information to the executable while modifying it to prevent accurate timing measurements, thus resolving the contradiction between providing timing information and preventing timing attacks
Solution Approach 2:
The system performs self-service by automatically detecting timing attack patterns and modifying time information without requiring external intervention. The time modification mechanism operates autonomously to prevent timing attacks, reducing the need for complex external security infrastructure
Data Source
AI summary
The disclosed computer-implemented method for altering time data may include (i) identifying an untrusted executable that is capable of making queries to an operating system of the computing device, (ii) intercepting a request by the untrusted executable to query a system clock of the operating system of the computing device for a current time, (iii) calculating an offset value for the current time that is within a predetermined margin of the current time, and (iv) providing, in response to the request, the untrusted executable with the offset value for the current time instead of the current time. Various other methods, systems, and computer-readable media are also disclosed.