Update Package Authenticity via Blockchain Ledger Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing information handling systems face challenges in ensuring the authenticity of update packages, particularly when the private key used for signing is compromised, leading to potential malicious packages that can threaten system security.
Innovation Solution
A decentralized permissioned distributed update package tracking ledger records each valid update package creation as a transaction, with a measurement value derived from transaction details added to the package, and verified by clients using both signature and measurement value comparison.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a private key is used to sign update packages, then package authenticity can be verified, but security is compromised if the private key is stolen or compromised
Solution Approach 1:
The authentication mechanism is segmented into two independent components: signature verification (using public key cryptography) and measurement value verification (using blockchain ledger). This segmentation allows the system to verify package authenticity through multiple independent channels, so that compromise of one mechanism (private key) does not necessarily compromise the entire authentication system.
Solution Approach 2:
A blockchain-based transaction ledger is introduced as an intermediary to record and verify update package transactions. The ledger stores measurement values (hashes) of legitimate packages and provides a decentralized, tamper-evident verification mechanism. This intermediary allows clients to verify package authenticity without directly relying on the private key, thereby mitigating the security risk of key compromise.
2Reliability
If traditional signature verification is used, then package integrity can be checked, but additional authentication layers increase system complexity
Solution Approach 1:
The blockchain transaction ledger serves multiple functions: it stores measurement values for verification, provides a decentralized authentication mechanism, creates an immutable audit trail of package transactions, and enables both signature and measurement value verification. This multi-functionality reduces the need for separate dedicated systems for each function, thereby managing complexity while enhancing security.
Solution Approach 2:
The measurement value (hash) of the update package is calculated and recorded in the blockchain transaction ledger before the package is distributed to clients. This preliminary action allows clients to efficiently verify package authenticity by comparing the received package's hash against the pre-recorded measurement value in the ledger, without needing to perform complex real-time authentication operations.
Data Source
AI summary
A system for ensuring update package authenticity includes an update package transaction ledger and a repository. Change managers are configured to maintain the update package transaction ledger, create a transaction block using metadata of an update, and determine a package value based on the transaction ledger and on the update. The change managers also incorporate the package value and the update into a package, and upload the package to the repository. A client obtains the package from the repository, obtains the transaction block from the update package transaction ledger, determines a calculated value based on the transaction block and on the update, and compares the calculated value and the package value. The update is installed when the calculated value and the package value match.