Web Server Content Tampering Detection via Encryption and Backup Comparison
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
It is challenging to detect and prevent unauthorized tampering with web server contents, especially when a third-party terminal intrudes using stolen login credentials, as conventional methods struggle to anticipate and address all vulnerabilities.
Innovation Solution
An information processing device that associates contents with identification information from the administrator terminal, using a control device to set access rights and check for tampering by encrypting contents and verifying access rights, ensuring only authorized terminals can access and modify them.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If conventional attack pattern registration is used to prevent unauthorized intrusion, then detection of known attack patterns is improved, but detection of unknown vulnerabilities and unauthorized access methods is worsened
Solution Approach 1:
The patent applies preliminary action by encrypting contents before storing them in the web server, and creating backup copies of the original unencrypted contents. This pre-encryption measure ensures that even if the server is compromised through unknown vulnerabilities or stolen credentials, the stored contents remain protected and cannot be accessed without the decryption key, thus preventing unauthorized access before it can occur.
Solution Approach 2:
The patent introduces an intermediary mechanism by separating the encryption key management from the web server system. The backup contents are stored separately and used as an intermediary reference to detect tampering. When contents are accessed, the system can compare them against the backup to detect any unauthorized modifications, thus providing an intermediate layer of security that doesn't rely on the server's direct security.
2Reliability
If access control is strengthened to prevent unauthorized access, then security is improved, but ease of operation for legitimate users is worsened
Solution Approach 1:
The patent applies local quality by implementing encryption at the data level rather than relying solely on system-level access controls. Each content is encrypted individually with its own decryption key, allowing fine-grained access control where only authorized users with the specific decryption key can access particular contents. This maintains security while allowing flexible access management for legitimate users without requiring complex authentication systems.
Data Source
AI summary
An information processing device 10 includes: a database 12 that stores contents created by an administrator terminal 13; and a control device 11 that stores the contents and the administrator terminal 13 that are associated with each other as association information, and executes setting an access right to the contents on the basis of this association information.