Client Key Sharding via Relay Cluster for Secure Message Processing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The leakage of client keys exposes service resources to significant security risks, as the client keys are often stored and managed by clients, making them vulnerable to malicious attacks.
Innovation Solution
A method involving a first client obtaining shard information of a client key distributed across N shard processing devices, using a relay cluster for secure communication and generating configuration messages based on message topics configured by each shard processing device to ensure secure distribution and processing of the client key.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the client key is stored and managed by the client, then the ease of operation is improved, but the security of the client key deteriorates
Solution Approach 1:
The patent divides the client key into N pieces of shard information and distributes them across N different shard processing devices. No single device holds the complete key, so even if one device is compromised, the entire key cannot be reconstructed. This segmentation resolves the contradiction by maintaining operational ease through automated distributed management while significantly improving security through physical and logical distribution.
Solution Approach 2:
The patent introduces a relay cluster as an intermediary component that facilitates secure communication between the first client and the N shard processing devices. The relay cluster manages the distribution of configuration messages containing shard information without exposing the complete client key, thereby enabling ease of operation through centralized coordination while maintaining security through indirect, encrypted communication channels.
2Reliability
If the client key is distributed across N shard processing devices, then the security of the client key is improved, but the device complexity increases
Solution Approach 1:
The relay cluster serves multiple functions: it acts as a communication intermediary, manages configuration message distribution, coordinates shard information delivery, and enables the first client to interact with multiple shard processing devices. By consolidating these diverse functions into a single multi-functional component, the system achieves improved security through distribution while avoiding proportional increases in overall system complexity.
Solution Approach 2:
The shard processing devices autonomously process their respective shard information and independently generate configuration messages when needed. Each device manages its own shard data without requiring constant external coordination, reducing the management overhead and complexity that would otherwise accompany distributed key management. The devices self-organize around the relay cluster, which simplifies the overall system architecture.
3Reliability
If N configuration messages are transmitted to the relay cluster, then the secure distribution of shard information is ensured, but the loss of time increases
Solution Approach 1:
The relay cluster pre-configures message topics and establishes communication channels with all N shard processing devices before actual shard information needs to be distributed. Configuration messages are prepared in advance with proper encryption and routing information, so when shard information needs to be transmitted, the relay cluster can immediately forward the pre-prepared messages without delay. This preliminary setup ensures secure distribution while minimizing transmission time.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Disclosed in the present application are a message processing method, an apparatus, a product, a device and a medium. The method can be applied to a first client, and comprises : acquiring N pieces of sharding information of a client key of a second client, each piece of the sharding information being processed by a corresponding sharding processing device; acquiring a message topic configured at a relay cluster for each sharding processing device, the relay cluster being used for performing an open-source relay service operation between a first client and any sharding processing device that has a relay connection relationship with same; according to the sharding information corresponding to each sharding processing device and the message topic configured for each sharding processing device, generating a configuration message of each sharding processing device; and sending N generated configuration messages to the relay cluster, so as to enable each sharding processing device to acquire a respective configuration message from the relay cluster and process the corresponding sharding information. The present application can improve the reliability and safety for processing private keys of clients.