WATERMARKING FOR DATA INTEGRITY

• US 20170366356A1
• Filed: 06/16/2016
• Published: 12/21/2017
• Est. Priority Date: 06/16/2016
• Status: Active Grant

• Current Assignee: GE Digital Holdings LLC (GE Aerospace)
• Original Assignee: General Electric Company
• Inventors: Ramos, Luis, Sivasubramanian, Venkatesh, Yelisetti, Sriramakrishna
• Granted Patent: US 10,277,396 B2
• Time in Patent Office: Days
• CPC Class Codes: H04L 2209/608 Watermarking
• CPC Class Codes: H04L 2209/805 Lightweight hardware, e.g. radio-frequency identification [RFID] or sensor
• CPC Class Codes: H04L 9/0637 Modes of operation, e.g. cipher block chaining [CBC], electronic codebook [ECB] or Galois/counter mode [GCM]
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage

Abstract

Methods, systems, and apparatus for ensuring data integrity are disclosed. A data container structure is obtained, the data container structure containing data and a source identifier of a first hardware component. The data container structure is modified, using a header processing device, to include a component signature and an identifier of a second hardware component.

Claims

1. A method comprising:

obtaining a data container structure, the data container structure containing data and a source identifier of a first hardware component; and

modifying, using a header processing device, the data container structure to include a component signature and an identifier of a second hardware component.

2. The method of claim 1, wherein the obtained data container structure further includes a source signature based on the data and a source key.

3. The method of claim 1, further comprising modifying the data container structure to include a timestamp generated by the second hardware component.

4. The method of claim 1, further comprising modifying the data in the data container structure.

5. The method of claim 4, wherein the component signature is based on the modified data and a component key.

6. The method of claim 1, wherein the component signature is based on a component key and the data contained in the obtained data container structure.

7. The method of claim 1, further comprising:

obtaining an identification of an expected path of the data container structure, the expected path being defined by one or more component identifiers;

parsing a header of the data container structure to extract a list of one or more component identifiers;

comparing the list of component identifiers and the expected path of the data container structure; and

issuing a notification based on a result of the comparison.

8. The method of claim 7, further comprising identifying one or more unauthorized components traversed by the data container structure.

9. An apparatus comprising:

a processor;

memory to store instructions that, when executed by the processor cause the processor to perform operations comprising;

obtaining a data container structure, the data container structure containing data and a source identifier of a first hardware component; and

modifying, using a header processing device, the data container structure to include a component signature and an identifier of a second hardware component.

10. The apparatus of claim 9, wherein the obtained data container structure further includes a source signature based on the data and a source key.

11. The apparatus of claim 9, the operations further comprising modifying the data container structure to include a timestamp generated by the second hardware component.

12. The apparatus of claim 9, the operations further comprising modifying the data in the data container structure.

13. The apparatus of claim 12, wherein the component signature is based on the modified data and a component key.

14. The apparatus of claim 9, wherein the component signature is based on a component key and the data contained in the obtained data container structure.

15. A non-transitory machine-readable storage medium comprising instructions that, when executed by one or more processors of a machine, cause the machine to perform operations comprising:

obtaining a data container structure, the data container structure containing data and a source identifier of a first hardware component; and

modifying, using a header processing device, the data container structure to include a component signature and an identifier of a second hardware component.

16. The non-transitory machine-readable storage medium of claim 15, wherein the obtained data container structure further includes a source signature based on the data and a source key.

17. The non-transitory machine-readable storage medium of claim 15, the operations further comprising modifying the data container structure to include a timestamp generated by the second hardware component.

18. The non-transitory machine-readable storage medium of claim 15, the operations further comprising modifying the data in the data container structure.

19. The non-transitory machine-readable storage medium of claim 18, wherein the component signature is based on the modified data and a component key.

20. The non-transitory machine-readable storage medium of claim 15, wherein the component signature is based on a component key and the data contained in the obtained data container structure.