Whitelist Integrity Verification for Low-Reliability Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Information processing apparatuses using inexpensive storage devices with low fault tolerance are vulnerable to data loss or corruption, which can compromise the integrity of whitelists used to determine program execution, and existing methods of updating whitelists do not ensure their completeness.
Innovation Solution
An information processing apparatus that verifies the integrity of downloaded whitelists from a secure external server before storing them in internal storage, using hash values to ensure the whitelist's completeness and safety.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of manufacture
If inexpensive storage devices with low fault tolerance are used, then cost is reduced, but reliability of whitelist storage deteriorates
Solution Approach 1:
The patent creates a backup copy of the whitelist on a reliable external storage device (cloud storage, USB drive) in addition to the primary storage on the inexpensive internal storage device. This copying approach allows the system to maintain low storage costs while improving reliability through redundancy - if the internal storage fails, the backup can be restored.
Solution Approach 2:
The system performs beforehand cushioning by automatically downloading and storing backup whitelists from external reliable storage before any failure occurs. The backup mechanism is pre-configured and continuously maintained, cushioning against potential future failures of the inexpensive internal storage device.
2Duration of action of stationary object
If whitelist is downloaded from server to replace damaged one, then operational continuity is maintained, but integrity of downloaded whitelist cannot be ensured
Solution Approach 1:
The system performs preliminary action by verifying the integrity of the downloaded whitelist using hash values before actually using it to replace the damaged one. The verification process checks the hash value of the downloaded file against the expected hash value, ensuring integrity is established before the replacement occurs.
Solution Approach 2:
The system implements feedback by comparing the hash value of the downloaded whitelist with the expected hash value to verify integrity. This feedback mechanism provides confirmation that the downloaded file is complete and uncorrupted before proceeding with replacement, thus ensuring both operational continuity and data integrity.
3Reliability
If hash value verification is performed, then whitelist integrity is ensured, but processing time increases
Solution Approach 1:
The system performs preliminary action by pre-calculating and storing the expected hash value of the whitelist on the reliable external storage device along with the whitelist itself. This preliminary preparation allows for rapid verification during replacement operations, minimizing the time required for integrity checking while ensuring reliability.
Data Source
AI summary
An information processing apparatus includes: an internal storage configured to store one or more programs; a controller configured to execute the one or more programs; and an interface configured to receive information from an external storage containing a whitelist. The whitelist includes determination information indicating whether to allow the controller to execute each of the one or more programs. The controller is configured to acquire the whitelist from the external storage through the interface, verify an integrity of the acquired whitelist, and in response to a determination that the acquired whitelist is complete, store the acquired whitelist in the internal storage as an active whitelist to be used for determining whether to allow the controller to execute each of the one or more programs stored in the internal storage.