Mixed checksum injection for content verification on multiple platforms

• US 10,411,896 B2
• Filed: 02/13/2017
• Issued: 09/10/2019
• Est. Priority Date: 02/13/2017
• Status: Active Grant

• Current Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Original Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Inventors: Bouterse, Brian Michael, Hrivnak, Michael John
• Primary Examiner(s): Chen, Shin-Hon (Eric)
• Assistant Examiner(s): Lakhia, Viral S
• Application Number:
  US15/430,892
• Publication Number:
  US 20180234247A1
• Time in Patent Office: 939 Days
• Field of Search: 713150-155
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD

Abstract

A mixed checksum injection system includes a memory, at least one processor in communication with the memory, a data repository including content, and a server including a CRMS. The CRMS executes on the at least one processor to generate a plurality of checksum values for the content. The plurality of checksum values includes a first checksum value generated using a first checksum function and a second checksum value generated using a second checksum function. The CRMS receives a first request for the content for a first platform, and responsive to receiving the first request, renders first metadata. The CRMS injects the first checksum value and an identifier of the first checksum function into the first metadata. Then, the CRMS publishes the content and the associated first metadata including the injected first checksum value and the identifier of the first checksum function.

Claims

1. A system comprising:

a memory;

at least one processor in communication with the memory;

a data repository including content; and

a server including a content repository management system (CRMS), wherein the CRMS executes on the at least one processor to;

generate a plurality of checksum values for the content, wherein the plurality of checksum values includes a first checksum value generated using a first checksum function and a second checksum value generated using a second checksum function, and the first checksum function is associated with a first power consumption level and the second checksum function is associated with a second power consumption level greater than the first power consumption level,

receive a first request for the content for a first platform,

responsive to receiving the first request, render first metadata,

inject the first checksum value and an identifier of the first checksum function into the first metadata, and

publish the content and the associated first metadata including the injected first checksum value and the identifier of the first checksum function.

2. The system of claim 1, wherein the CRMS executes on the at least one processor to:

receive a second request for the content for a second platform,

responsive to receiving the second request, render second metadata,

inject the second checksum value and an identifier of the second checksum function into the second metadata, and

publish the content and the associated second metadata including the injected second checksum value and the identifier of the second checksum function, wherein the second checksum function is unsupported on the first platform.

3. The system of claim 2, wherein the second platform uses a different operating system than the first platform.

4. The system of claim 1, wherein at least one of the first checksum function and the second checksum function is a cryptographic hash function.

5. A method comprising:

generating, by a content repository management system (CRMS), a plurality of checksum values for content stored on a data repository, wherein the plurality of checksum values includes a first checksum value generated using a first checksum function and a second checksum value generated using a second checksum function, and the first checksum function is associated with a first power consumption level and the second checksum function is associated with a second power consumption level greater than the first power consumption level;

receiving, by the CRMS, a first request for the content for a first platform;

responsive to receiving the first request, rendering first metadata;

injecting, by the CRMS, the first checksum value and an identifier of the first checksum function into the first metadata; and

publishing, by the CRMS, the content and the associated first metadata including the injected first checksum value and the identifier of the first checksum function.

6. The method of claim 5, further comprising:

receiving, by the CRMS, a second request for the content for a second platform;

responsive to receiving the second request, rendering second metadata;

injecting, by the CRMS, the second checksum value and an identifier of the second checksum function into the second metadata; and

publishing, by the CRMS, the content and the associated second metadata including the injected second checksum value and the identifier of the second checksum function, wherein the second checksum function is unsupported on the first platform.

7. The method of claim 6, wherein the second platform is a newer version of the first platform.

8. The method of claim 5, further comprising acquiring the content immediately prior to generating the plurality of checksum values.

9. The method of claim 5, wherein at least one of the first checksum function and the second checksum function is a cryptographic hash function.

10. The method of claim 5, wherein the first checksum function includes at least one of a Secure Hash Algorithm 1 (SHA-1), a Secure Hash Algorithm 256 (SHA-256), a Secure Hash Algorithm 512 (SHA-512), and a MD5 algorithm.

11. The method of claim 5, further comprising comparing the first checksum value against a previously stored third checksum value.

12. A non-transitory machine readable medium storing code, which when executed by a processor causes a content repository management system (CRMS) to:

generate a plurality of checksum values for content stored on a data repository, wherein the plurality of checksum values includes a first checksum value generated using a first checksum function and a second checksum value generated using a second checksum function, and the first checksum function is associated with a first power consumption level and the second checksum function is associated with a second power consumption level greater than the first power consumption level;

receive a first request for the content for a first platform;

responsive to receiving the first request, render first metadata;

inject the first checksum value and an identifier of the first checksum function into the first metadata; and

publish the content and the associated first metadata including the injected first checksum value and the identifier of the first checksum function.

13. The non-transitory machine readable medium of claim 12, which further causes the CRMS to:

receive a second request for the content for a second platform;

responsive to receiving the second request, rendering second metadata;

inject the second checksum value and an identifier of the second checksum function into the second metadata; and

publish the content and the associated second metadata including the injected second checksum value and the identifier of the second checksum function, wherein the second checksum function is unsupported on the first platform.

14. The non-transitory machine readable medium of claim 13, wherein at least one of the first checksum function and the second checksum function is a cryptographic hash function.

15. The non-transitory machine readable medium of claim 12 further comprising acquiring the content immediately prior to generating the plurality of checksum values.

16. The non-transitory machine readable medium of claim 12, wherein the first checksum function includes at least one of a Secure Hash Algorithm 1 (SHA-1), a Secure Hash Algorithm 256 (SHA-256), a Secure Hash Algorithm 512 (SHA-512), and a MD5 algorithm.

17. The non-transitory machine readable medium of claim 12, further comprising comparing the first checksum value against a previously stored checksum value.