Cryptographic Web App Signing via Bootstrap Payload
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional methods for securing web applications delivered over the Internet are vulnerable to tampering and do not effectively verify the authenticity of the application code, leading to potential exposure of sensitive information and compromised security.
Innovation Solution
A method of cryptographically signing web applications by using a minimal bootstrap payload stored locally, which includes a public key and a URL pointing to the latest application code payload, allowing validation of the cryptographic signature before executing the code, ensuring the integrity and authenticity of the application.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional methods are used to deliver web applications over the Internet, then the applications can be accessed and executed in the user's browser, but the applications are vulnerable to tampering and authenticity verification is not effective
Solution Approach 1:
The patent applies preliminary action by pre-computing and storing a cryptographic hash of the application code in the bootstrap payload before the application is delivered to the user. This hash serves as a reference fingerprint that enables later verification of the application's integrity without requiring the entire application to be present during the verification setup phase.
Solution Approach 2:
The patent introduces a cryptographic hash as an intermediary element that mediates between the application code and the verification process. Instead of directly comparing the application code against a reference, the system uses the hash function to transform the code into a compact, tamper-evident representation that can be securely stored and compared.
2Productivity
If sensitive user information is transmitted through web applications, then the applications can provide functional services, but the security is compromised when applications are tampered with
Solution Approach 1:
The patent applies preliminary anti-action by implementing a verification mechanism that proactively detects tampering before sensitive operations are performed. The cryptographic hash verification is executed as a preliminary check that prevents the application from proceeding with sensitive user information processing if any modification is detected, thereby neutralizing the security threat before it can materialize.
3Adaptability or versatility
If the application code is delivered through the Internet, then the applications can be updated and accessed remotely, but the authenticity of the application code cannot be effectively verified
Solution Approach 1:
The patent replaces mechanical verification methods (such as manual code comparison or trusted delivery channels) with a cryptographic verification system. Instead of relying on physical or procedural safeguards, the system uses mathematical hash functions to provide automated, precise, and tamper-evident verification of application authenticity, achieving high measurement precision in authenticity verification.
Data Source
AI summary
Embodiments disclosed herein provide a method that includes receiving, at a client-side web browser, a minimal bootstrap payload from an application server; storing, by a client-side processor, the minimal bootstrap payload in a client-side local cache, where the locally cached minimal bootstrap payload is executed by the client-side processor before executing an application from the application server; the minimal bootstrap payload includes at least one public key and at least one Uniform Resource Location (URL) address of an application code payload.