Data verification in a distributed data processing system
A verification device operates to evaluate consistency of input values from a client device used by a server to execute a task. In an example the task may be installation of software into the client device, and the consistency evaluation of the input values may involve evaluating whether identifiers used to obtain attribute values of components of the client device for the installation apply to the same client device. To initiate execution of the task, the client device commands a plurality of data source servers to supply the attribute values. The data source servers return response messages defining the attribute values associated with the identifiers supplied by the client device. The client device supplies the response messages to the server for use in the execution of the task. Before executing the task, the server supplies information from the response messages to a verification device, the information defining a combination of the identifiers of the response messages, as well as the combination of data source servers that have defined attribute values associated with the identifiers. The verification device performing a consistency evaluation on said combination of identifiers, dependent on whether said combination of identifiers is consistent or inconsistent with previously stored combinations of identifiers for said combination of data source servers stored for previously executed tasks and/or whether values of a corresponding further attribute associated with the identifiers in the data source servers in the combination of data source servers are consistent. The server selecting between executing the task or not dependent on a result of the consistency evaluation.
1 . A method of verifying an attribute values received by a server from a client device for use in executing a task for an object, the method comprising:
receiving one or more verification messages from the server, the verification messages comprising an object identifier, which identifies the object or a component of the object, and needed data types for use in execution of the task, whereby the object identifier is provided by a data-providing data source server from a plurality of data source servers;
analyzing the one or more verification messages by searching information stored from previous transactions to detect whether the same object identifier(s) was used by the data-providing data source server regarding one or more previous tasks for the object; and
computing a score indicative of consistency of the object identifier provided by the data-providing data source server for the tack with the object identifier(s) used by the data-providing data source server regarding one or more previous tasks for the object.
2 . The method of claim 1 , wherein the verification messages further comprise an association of the data-providing data source server from the plurality of data source servers from which the object identifier was requested.
3 . The method of claim 1 wherein the analyzing, by the verification device, the one or more verification messages further comprises searching information stored from previous transactions to detect whether the same object identifier was used for the data-providing data source server.
4 . The method of claim 3 , wherein the searching information stored from previous transactions is repeated for each data source server from the plurality of data source servers that was used in the task.
5 . The method of claim 4 , wherein based on the detecting whether the same object identifier was used for the data-providing data source server from the plurality of data source servers, a process of the verification device computes a score.
6 . The method of claim 5 , wherein the executing the task is based on the score surpassing a threshold and wherein the threshold is dependent on the sensitivity of the task.
7 . The method of claim 5 wherein the score is incremented when the same object identifier was used for the data-providing data source server from the plurality of data source servers as in previous transactions and wherein the score is decremented when a different object identifier was used for the data-providing data source server from the plurality of data source servers as in previous transactions.
8 . The method of claim 1 , wherein the attribute values from the plurality of data source servers received by the client device are electronically signed.
9 . The method of claim 1 , wherein the object identifier from the attribute values transmitted by the client device to the server are electronically signed.
10 . The method of claim 1 , wherein the attribute values received from the plurality of data source servers by the client device are encrypted with a homomorphic encryption.
11 . The method of claim 10 , wherein when analyzing, by the verification device, the one or more verification messages, the one or more verification messages are compared without decryption.
12 . A verification device for verifying attribute values received by a server from a client device for use in execution of a task for the client device, wherein the verification device comprises:
a network interface for communicating with the server;
a storage device for storing previous transactions; and
a processor configured to:
receive one or more verification messages from the client device, the verification messages comprising an object identifier, which identifies the client device or a component of the client device, and needed data types for use in execution of the task for the client device, wherein the object identifier is provided by a data-providing data source server from a plurality of data source servers;
analyze the one or more verification messages by searching information from previous transactions stored on the storage device to detect whether the same object identifier(s) was used by the data-providing data source server regarding one or more previous tasks for the client device; and
compute a score indicative of consistency of the object identifier provided by the data-providing data source server for the tack with the object identifier(s) used by the data-providing data source server regarding one or more previous tasks for the client device.
13 . The verification device of claim 12 , wherein the verification messages further comprise an association of the data-providing data source server from the plurality of data source servers from which the object identifier was requested.
14 . The verification device of claim 12 , wherein searching the previous transactions stored on the storage device is repeated for each data source server from the plurality of data source servers that were used in execution of the task.
15 . The verification device of claim 14 , wherein based on the detecting whether the same object identifier was used for the data-providing data source server from the plurality of data source servers, the verification device computes a score.
16 . The verification device of claim 15 , wherein the result that is transmitted is a determination of whether the score surpasses a threshold and wherein the threshold is dependent on the sensitivity of the task.
17 . The verification device of claim 15 wherein the score is incremented when the same object identifier was used for the data-providing data source server from the plurality of data source servers as in previous transactions and decremented when a different object identifier was used for the data-providing data source server from the plurality of data source servers as in previous transactions.
18 . The verification device of claim 12 , wherein the object identifiers and the needed data types in the one or more verification messages are homomorphically encrypted.
19 . The verification device of claim 18 , wherein the analysis of the one or more verification messages is performed without decryption.
20 . The verification device of claim 12 , wherein the one or more verification message from the server are stored on the storage device.