FILE MANAGEMENT APPARATUS AND METHOD FOR VERIFYING INTEGRITY

• US 20170230186A1
• Filed: 02/06/2017
• Published: 08/10/2017
• Est. Priority Date: 02/05/2016
• Status: Abandoned Application

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: LEE, Kwang-ho
• Application Number:
  US15/424,964
• Publication Number:
  US 20170230186A1
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G06F 3/0611 in relation to response time
• CPC Class Codes: G06F 3/064 Management of blocks
• CPC Class Codes: G06F 3/0673 Single storage device
• CPC Class Codes: H04L 9/3239 involving non-keyed hash functions, e.g. modification detection codes [MDCs], MD5, SHA or RIPEMD

Abstract

A file management apparatus and a method for verifying integrity are provided. The method includes storing a plurality of pieces of data comprising a file as units of chunks and storing the chunks in a memory, determining whether the file has integrity by comparing determined certification values of the chunks of the file with pre-stored certification values of the chunks based on an execution command, and executing the file based on the integrity determination result. The file management apparatus improves a performance of a whole system by partially performing integrity verifications of a plurality of pieces of data comprising a file to be executed.

Claims

1. A method of verifying integrity using a file management apparatus, the method comprising:

receiving a file comprising a plurality of pieces of data;

arranging the plurality of pieces of data of the file as units of chunks and storing the chunks in a memory;

determining whether the file has integrity by comparing a certification value of at least one of the chunks of the file with a pre-stored certification value corresponding to the at least one of the chunks based on an execution command; and

executing the file based on the integrity determination result.

2. The method of claim 1, wherein the memory stores:

a super block area configured to store information about a volume;

a volume meta area configured to store at least one of;

information for managing the file and execution information of the file; and

a volume block comprising a file object area storing the file comprising the units of chunks and information about the file.

3. The method of claim 2, wherein the file object area comprises a file meta area configured to store certification values corresponding to the chunks of the plurality of pieces of data comprising the file,

wherein the determining the integrity comprises:

detecting positions of the chunks of the file and the file meta area from the file object area based on information stored in the volume meta area;

determining certification values of the chunks of the file based on the detected positions of the chunks; and

determining whether the file has integrity by acquiring certification values of the chunks of the file with reference to the detected file meta area and comparing the acquired certification values of the chunks with the determined certification values of the chunks.

4. The method of claim 3, wherein the file meta area further stores an encryption value that is determined based on certification values of pieces of information included in the file meta area and a predefined encryption algorithm,

wherein the determining the integrity further comprises:

determining certification values of the pieces of information included in the file meta area based on information stored in the volume meta area and determining an encryption value using the determined certification values and the encryption algorithm; and

determining whether the file object area has integrity by comparing the determined encryption value with an encryption value stored in the file meta area.

5. The method of claim 2, wherein the volume further comprises a global file meta area configured to store information about a particular file,

wherein the global file meta area stores an encryption value determined based on certification values of pieces of information comprising the particular file and a predefined encryption algorithm.

6. The method of claim 5, wherein the particular file comprises a file that is initially executed when booting a system.

7. The method of claim 5, wherein the determining the integrity comprises:

determining certification values of pieces of information comprising the global file meta area based on information stored in the volume meta area and determining an encryption value using the determined certification values and the encryption algorithm when booting the system;

comparing the determined encryption value with an encryption value stored in the global file meta area;

determining certification values of chunks of a file included in the global file meta area in response to the determined encryption value and the stored encryption value corresponding to each other; and

determining whether the file included in the global file meta area has integrity by comparing the determined certification values of the chunks with certification values of the chunks stored in the global file meta area.

8. The method of claim 2, wherein the determining the integrity comprises:

determining whether the file has integrity in response to the file being determined as an executable file based on execution information comprised in the volume meta area.

9. The method of claim 3, wherein the volume meta area stores a certification value for verifying integrity of the super block area,

wherein the determining the integrity further comprises:

determining whether the super block area has integrity by determining certification values of pieces of information included in the super block area and comparing the determined certification values with certification values stored in the volume meta area.

19. The method of claim 1, further comprising:

selecting at least one chunk to be used from among a plurality of chunks stored in the memory;

calculating a certification value for the selected at least one chunk; and

comparing the calculated certification value with a predetermined certification value for the selected at least one chuck.

10. A file management apparatus comprising:

a memory configured to arrange a plurality of pieces of data of a file as units of chunks and to store the chunks; and

a processor configured to determine whether the file has integrity by comparing a determined certification value of at least one of the chunks of the file with a pre-stored certification value corresponding to the at least one the chunks and to execute the file based on the integrity determination result based on an execution command.

11. The file management apparatus of claim 10, wherein the memory stores:

a super block area configured to store all information about a volume;

a volume meta area configured to store at least one of;

information for managing the file and execution information of the file; and

a volume block configured to include a file object area storing the file comprising the units of chunks and information about the file.

12. The file management apparatus of claim 11, wherein the file object area comprises a file meta area configured to store certification values corresponding to chunks of a plurality of pieces of data comprising the file,

wherein the processor comprises:

a file controller configured to detect positions of the chunks of the file and the file meta area from the file object area based on information stored in the volume meta area; and

a certification processor configured to determine certification values of the chunks of the file based on the detected positions of the chunks,

wherein the certification processor is configured to determine whether the file has integrity by acquiring certification values of the chunks of the file with reference to the detected file meta area and comparing the acquired certification values of the chunks with the determined certification values of the chunks.

13. The file management apparatus of claim 12, wherein the file meta area further stores an encryption value that is determined based on certification values of pieces of information included in the file meta area and a predefined encryption algorithm,

wherein the processor further comprises an encryption processor configured to determine certification values of the pieces of information included in the file meta area based on information stored in the volume meta area and determine an encryption value using the determined certification values and the encryption algorithm,

wherein the encryption processor is configured to determine whether the file object area has integrity by determining whether the determined

encryption value corresponds to an encryption value stored in the file meta area.

14. The file management apparatus of claim 11, wherein the volume further comprises a global file meta area configured to store information about a particular file,

wherein the global file meta area stores an encryption value determined based on certification values of pieces of information comprising the particular file and a predefined encryption algorithm.

15. The file management apparatus of claim 14, wherein the particular file comprises a file that is initially executed when booting a system.

16. The file management apparatus of claim 14, wherein when booting the system, the encryption processor is configured to determine whether the global file meta area has integrity by:

determining certification values of pieces of information included in the global file meta area based on information stored in the volume meta area, determining an encryption value using the determined certification values and the encryption algorithm, and comparing the determined encryption value with an encryption value stored in the global file meta area,

wherein in response to the determined encryption value and the stored encryption value corresponding to each other, the certification processor determines whether a file included in the global file meta area has integrity by determining certification values of chunks of the file included in the global file meta area and comparing the determined certification values of the chunks with certification values of the chunks stored in the global file meta area.

17. The file management apparatus of claim 12, wherein the file controller is configured to determine whether the file has integrity in response to the file being determined as an executable file based on execution information included in the volume meta area.

18. The file management apparatus of claim 12, wherein the volume meta area stores a certification value for verifying integrity of the super block area,

wherein the certification processor is configured to determine whether the super block area has integrity by:

determining certification values of pieces of information included in the super block area and comparing the determined certification values with certification values stored in the volume meta area.

20. The file management apparatus of claim 10, wherein the processor is configured to select at least one chunk to be used from among a plurality of chunks stored in the memory, to calculate a certification value for the selected at least one chunk, and to compare the calculated certification value with a predetermined certification value for the selected at least one chuck.