Verification System Chain of Trust Update Mechanism

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing verification systems, such as those described in PTL 1, face challenges in updating programs while maintaining a chain of trust without restarting the entire system.

Innovation Solution

A verification system comprising a first verification device that verifies the integrity of a first verification target and a second verification device with higher security privileges that verifies the integrity of the first verification device. The first verification device includes a processor and memory that operate as a verifier and updater, allowing it to generate verification values, compare them with expected values, and update verification-related information upon receiving authorized update requests.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the verification system uses a chain of trust model where a second verification device verifies the first verification device, then the security and reliability of the verification process is improved, but the device complexity and system overhead increase

Engineering Contradiction:

Improveverification reliabilityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The verification system is segmented into multiple verification devices with distinct roles. The first verification device performs verification of verification targets, while the second verification device performs verification of the first verification device. This segmentation allows each device to have specialized functionality, improving overall system reliability while keeping individual device complexity manageable.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The second verification device acts as an intermediary that verifies the trustworthiness of the first verification device. This intermediary mechanism ensures that verification results from the first verification device can be trusted, as they have been validated by a higher-privileged device in the chain of trust.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Adaptability or versatility

If the first verification device automatically updates verification-related information when programs are updated, then the system adaptability is improved, but the risk of unauthorized modifications increases

Engineering Contradiction:

Improveupdate adaptabilityVSAvoidunauthorized modification risk

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The system performs preliminary verification of update requests before allowing modifications to verification-related information. The first verification device checks whether update requests meet predetermined conditions (such as coming from authorized sources) before automatically updating verification-related information, thus preventing unauthorized modifications while maintaining adaptability.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system implements feedback mechanisms where the first verification device monitors and responds to program updates by selectively updating verification-related information. This feedback loop ensures that only authorized and appropriate updates are applied, maintaining system adaptability while preventing harmful unauthorized modifications.

Inventive Principle:

Principle #23Feedback

3Measurement precision

If the verification system performs comprehensive integrity verification of programs and verification-related information, then the measurement precision of verification accuracy is improved, but the processing time and productivity decrease

Engineering Contradiction:

Improveverification accuracyVSAvoidverification speed

Core Design Contradiction:

Measurement precisionVSProductivity

Solution Approach 1:

The verification system performs partial verification actions based on the criticality of the verification target. Not all verification-related information requires the same level of verification thoroughness. The system applies comprehensive verification to critical components while using lighter verification methods for less critical items, thereby maintaining high verification accuracy where needed without unnecessarily reducing overall productivity.

Inventive Principle:

Principle #16Partial or excessive action

Data Source

PatentUS20250156549A1Verification system, verification method, and recording medium

Publication Date: 2025.05.15 PANASONIC AUTOMOTIVE SYST CO LTD

AI summary

A verification system includes: a first verification device that verifies integrity of a first verification target; and a second verification device that has a higher security privilege than the first verification device and verifies integrity of the first verification device. The first verification device includes: a first verifier that refers to first verification related information including first verification target information and a first expected value, generates a first verification value by performing the predetermined operation on data on a first storage area storing the first program, and verifies integrity by comparing the first verification value with the first expected value; and a first updater that accepts a first update request for updating the first verification related information when receiving the first update request from the second verification device or when receiving the first update request while the first verification related information is updated, and updates the first verification related information.