METHODS FOR VERIFYING DATA INTEGRITY

• US 20170070890A1
• Filed: 09/07/2016
• Published: 03/09/2017
• Est. Priority Date: 09/07/2015
• Status: Active Grant

• Current Assignee: Arm IP Limited (SoftBank Group Corp.), Arm Ltd. (United Kingdom) (SoftBank Group Corp.)
• Original Assignee: Arm IP Limited (SoftBank Group Corp.), Arm Ltd. (United Kingdom) (SoftBank Group Corp.)
• Inventors: Moran, Brendan, Pegourie-Gonnard, Manuel, Luff, Geraint, Meriac, Milosch
• Granted Patent: US 10,595,207 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 12/102 Route integrity, e.g. using trusted paths
• CPC Class Codes: H04W 12/106 Packet or message integrity
• CPC Class Codes: H04W 12/12 Detection or prevention of fraud
• CPC Class Codes: H04W 12/122 Counter-measures against attacks; Protection against rogue devices
• CPC Class Codes: H04W 12/33 using wearable devices, e.g. using a smartwatch or smart-glasses
• CPC Class Codes: H04W 4/02 Services making use of location information
• CPC Class Codes: H04W 4/06 Selective distribution of broadcast services, e.g. multimedia broadcast multicast service [MBMS]; Services to user groups; One-way selective calling services
• CPC Class Codes: H04W 4/70 Services for machine-to-machine communication [M2M] or machine type communication [MTC]
• CPC Class Codes: H04W 4/80 Services using short range communication, e.g. near-field communication [NFC], radio-frequency identification [RFID] or low energy communication

Abstract

A method for verifying the integrity of data in a message by a data processing device, the message comprising a plurality of packets, the method comprising: receiving, at the device from a first resource, a manifest associated with the message, the manifest comprising a plurality of group check values for the plurality of packets; receiving, at the device, from the first or a different resource, the message; generating a first progression of rolling hashes for the plurality of packets; deriving group check values from the first progression of rolling hashes for groups of the plurality of packets along one or more paths; verifying the integrity of the data in the message based on or in response to a determination that the derived group check values correspond to the plurality of group check values in the manifest.

Claims

1. A method for verifying the integrity of data in a message received by a data processing device, the message comprising a plurality of packets, the method comprising:

receiving, at the device from a first resource, a manifest associated with the message, the manifest comprising a plurality of group check values for the plurality of packets;

receiving, at the device, from the first or a different resource, the message;

generating a first progression of rolling hashes for the plurality of packets;

deriving group check values from the first progression of rolling hashes for groups of the plurality of packets along one or more paths;

verifying the integrity of the data in the message based on or in response to a determination that the derived group check values correspond to the plurality of group check values in the manifest.

2. The method according to claim 1, further comprising:

generating a second progression of rolling hashes for the plurality of packets;

deriving group check values from the second progression of rolling hashes for groups of the plurality of packets along one or more paths.

3. The method according to claim 1, wherein the groups along a first path of the one or more paths are forward consecutive groups.

4. The method according to claim 2, wherein the groups along a second path of the one or more paths are backward consecutive groups.

5. The method according to claim 4, wherein a stride of the forward consecutive groups is equal to a stride of the backward consecutive groups.

6. The method according to claim 5, wherein the stride of the forward consecutive groups is one packet.

7. The method according to claim 2, wherein the group check values comprise extract sample bits of the first or second progressions of rolling hashes.

8. The method according to claim 7, wherein the manifest further comprises data identifying bits of the respective rolling hashes used to provide the extract samples bits.

9. The method according to claim 7, wherein respective values of the first or second progression of rolling hashes are dependent on static hashes of one or more of the plurality of packets.

10. The method according to claim 1, wherein respective values of the first or second progression of rolling hashes are dependent on secret data.

11. The method according to claim 10, wherein the method further comprises:

deriving, from secret protocol data in the manifest, the secret data.

12. The method according to claim 11, wherein the method further comprises:

decrypting, at the device, the secret protocol data.

13. The method according to claim 11, wherein the secret data comprises:

a random number or a cryptographic key.

14. The method according to claim 1, further comprising:

checking a verifiable signature of the first resource;

verifying the integrity of the data in the message further based on or in response to a determination that the verifiable signature corresponds to an expected signature.

15. The method according to claim 1, the method comprising:

transmitting, from the device to the first or different resource, a request for one or more packets of the message based on or in response to a determination that the derived group check values do not correspond to the plurality of group check values in the manifest.

16. The method according to claim 1, wherein the first or the different resources include one of:

a server and a data processing device.

17. The method according to claim 1, wherein the one or more paths are defined in the manifest.

18. A method for verifying the integrity of data in a portion of a message by a data processing device, the portion comprising a plurality of packets, the method comprising:

receiving, at the device from a first resource, a manifest associated with the message, the manifest comprising a plurality of group check values for the plurality of packets;

receiving, at the device, from the first or a different resource, the portion;

generating a progression of rolling hashes for the plurality of packets;

deriving group check values from the progression of rolling hashes for groups of the plurality of packets along a first path;

deriving group check values from the progression of rolling hashes for groups of the plurality of packets along a second path;

verifying the integrity of the data in the portion of the message based on or in response to a determination that one or more of the derived group check values for the groups along the first path corresponds to one or more of the derived group check values for the groups along the second path.

19. A method of providing, from a resource to one or more data processing devices, a data manifest for verifying the integrity of data in a plurality of packets of a message associated with the manifest, the method comprising:

generating, at the resource, a first progression of rolling hashes;

deriving, at the resource, check values for groups of the plurality of packets from the first progression of rolling hashes along one or more paths;

providing, in the manifest, the check values for the groups;

providing, in the manifest, data identifying the groups;

providing, in the manifest, data identifying the one or more paths;

transmitting the manifest to the data processing device.

20. The method according to claim 19, the method further comprising:

generating, at the resource, a second progression of rolling hashes;

deriving, at the resource, check values for groups of the plurality of packets from the second progression of rolling hashes along one or more paths.