Validation of data integrity through watermarking
Systems and methods are provided for recording and validating modifications to a secured container. Modifications to the secured container by trusted parties are logged. The log may be maintained in a secured memory of an IHS (Information Handling System) and may be periodically validated. Each logged modification specifies a timestamp of the modification and the digital watermark assigned to the trusted party making the modification. Upon completing modifications, the secured container is sealed by imprinting the first digital watermark and the first timestamp at locations in the secured container specified by a watermarking algorithm assigned to the trusted party making the modification. Additional modifications may be serially watermarked on the secured container according the watermarking algorithm of the trusted party making each modification. The secured container is unsealed by re-applying each of the watermarking algorithms in reverse order. The integrity of the secured container, and each modification, is thus validated.
1. A method for recording and validating modifications to a secured container, the method comprising:
generating a reference signature based on a state of the secured container prior to a first modification to the secured container and a second modification to the secured container;
logging the first modification to the secured container by a first trusted party and the second modification to the secured container by a second trusted party, wherein the first logged modification identifies a first timestamp of the first modification and further identifies a first digital watermark assigned to the first trusted party, and wherein the second logged modification identifies a second timestamp of the second modification and further identifies a second digital watermark assigned to the second trusted party;
sealing the secured container by imprinting the first digital watermark and the first timestamp at locations in the secured container specified by a first watermarking algorithm assigned to the first trusted party and subsequently imprinting the second digital watermark and the second timestamp at locations in the secured container specified by a second watermarking algorithm assigned to the second trusted party;
unsealing the secured container by removing the imprint of the second digital watermark and the second timestamp at the locations in the secured container specified by the second watermarking algorithm and subsequently removing the imprint of the first digital watermark and the first timestamp at locations in the secured container specified by the first watermarking algorithm;
generating an updated signature based on a state of the unsealed secured container; and
validating the integrity of the secured container by comparing the updated signature to the reference signature.
2. The method of claim 1 , wherein the first watermarking algorithm specifies an initialization point to begin imprinting the first digital watermark.
3. The method of claim 2 , wherein the first watermarking algorithm specifies a frequency for imprinting the first digital watermark.
4. The method of claim 1 , wherein the first digital watermark is imprinted via an XOR operation at the locations in the secured container specified by the first watermarking algorithm.
5. The method of claim 4 , wherein the imprinting of the first digital watermark is reversed via the XOR operation at the locations in the sealed secured container specified by the first watermarking algorithm.
6. The method of claim 1 , wherein the log is stored to a secured memory of the IHS.
7. An Information Handling System (IHS), comprising:
one or more processors;
a system memory coupled to the one or more processors, the system memory including program instructions stored thereon that, upon execution by the one or more processors, cause the IHS to:
generate a reference signature based on a state of a secured container prior to a first modification to the secured container and a second modification to the secured container;
log the first modification to a secured container by a first trusted party and the second modification to the secured container by a second trusted party, wherein the first logged modification identifies a first timestamp of the first modification and further identifies a first digital watermark assigned to the first trusted party, and wherein the second logged modification identifies a second timestamp of the second modification and further identifies a second digital watermark assigned to the second trusted party;
seal the secured container by imprinting the first digital watermark and the first timestamp at locations in the secured container specified by a first watermarking algorithm assigned to the first trusted party and subsequently imprinting the second digital watermark and the second timestamp at locations in the secured container specified by a second watermarking algorithm assigned to the second trusted party;
unseal the secured container by removing the imprint of the second digital watermark and the second timestamp at the locations in the secured container specified by the second watermarking algorithm and subsequently removing the imprint of the first digital watermark and the first timestamp at locations in the secured container specified by the first watermarking algorithm;
generate an updated signature based on a state of the unsealed secured container; and
validate the integrity of the secured container by comparing the updated signature to the reference signature.
8. The IHS of claim 7 , wherein the log is stored to a secured memory of the IHS.
9. The IHS of claim 7 , wherein the first watermarking algorithm specifies an initialization point to begin imprinting the first digital watermark.
10. The IHS of claim 9 , wherein the first watermarking algorithm specifies a frequency for imprinting the first digital watermark.
11. The IHS of claim 7 , wherein the first digital watermark is imprinted via an XOR operation at the locations in the secured container specified by the first watermarking algorithm.
12. The IHS of claim 11 , wherein the imprinting of the first digital watermark is reversed via the XOR operation at the locations in the sealed secured container specified by the first watermarking algorithm.
13. A computer-readable storage device having program instructions stored thereon for recording and validating modifications to a secured container, upon execution by one or more processors of the IHS, the program instructions cause the one or more processors to:
generate a reference signature based on a state of the secured container prior to the first modification to the secured container and the second modification to the secured container;
log a first modification to the secured container by a first trusted party and the second modification to the secured container by a second trusted party, wherein the first logged modification identifies a first timestamp of the first modification and further identifies a first digital watermark assigned to the first trusted party, and wherein the second logged modification identifies a second timestamp of the second modification and further identifies a second digital watermark assigned to the second trusted party;
seal the secured container by imprinting the first digital watermark and the first timestamp at locations in the secured container specified by a first watermarking algorithm assigned to the first trusted party and subsequently imprinting the second digital watermark and the second timestamp at locations in the secured container specified by a second watermarking algorithm assigned to the second trusted party;
unseal the secured container by removing the imprint of the second digital watermark and the second timestamp at the locations in the secured container specified by the second watermarking algorithm and subsequently removing the imprint of the first digital watermark and the first timestamp at locations in the secured container specified by the first watermarking algorithm;
generate an updated signature based on a state of the unsealed secured container; and
validate the integrity of the secured container by comparing the updated signature to the reference signature.
14. The computer-readable storage device of claim 13 , wherein the first watermarking algorithm specifies an initialization point to begin imprinting the first digital watermark.
15. The computer-readable storage device of claim 13 , wherein the first watermarking algorithm specifies a frequency for imprinting the first digital watermark.
16. The computer-readable storage device of claim 13 , wherein the first digital watermark is imprinted via an XOR operation at the locations in the secured container specified by the first watermarking algorithm.
17. The computer-readable storage device of claim 13 , wherein the imprinting of the first digital watermark is reversed via the XOR operation at the locations in the sealed secured container specified by the first watermarking algorithm.
18. The computer-readable storage device of claim 13 , wherein the log is stored to a secured memory of the IHS.