Cluster Key Update via Node Voting and Coexistence

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In distributed computing clusters, existing communication security methods face challenges in efficiently updating shared secret keys without disrupting data processing, as the transition from an old key to a new key requires coexistence and synchronized adoption across all nodes to maintain secure message communications.

Innovation Solution

A system and method that utilize a shared secret key and a new shared secret key for encryption, decryption, and authentication, with each node voting to replace the old key with the new key, ensuring seamless joint processing and indicating key usage in message headers to manage the transition.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a shared secret key is used for encryption and authentication across all nodes, then communication security is improved, but key updates disrupt data processing

Engineering Contradiction:
Improvecommunication securityVSAvoiddata processing continuity
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system performs preliminary key preparation by generating a new shared secret key before the old key expires or becomes compromised. The new key is distributed to all nodes in advance, and nodes vote on readiness to switch. This preliminary action ensures that key updates can occur smoothly without disrupting ongoing data processing, as the new key is already in place and ready for immediate activation across the cluster.

Inventive Principle:
Principle #10Preliminary action

2Stability of the object's composition

If nodes vote to replace the shared secret key, then key update synchronization is improved, but system complexity increases

Engineering Contradiction:
Improvekey update synchronizationVSAvoidsystem complexity
Core Design Contradiction:
Stability of the object's compositionVSDevice complexity

Solution Approach 1:

The system merges the key update decision-making process into the existing distributed consensus voting mechanism already present in the cluster. Instead of introducing a separate complex key management protocol, the invention leverages the existing voting infrastructure where nodes already participate in consensus decisions. This merging approach maintains key update synchronization while avoiding the overhead of a completely new system, as the voting mechanism is already integrated into the cluster's operational fabric.

Inventive Principle:
Principle #5Merging (Combining)

3Ease of operation

If the new shared secret key coexists with the old key, then seamless transition is achieved, but security vulnerability increases

Engineering Contradiction:
Improveseamless transitionVSAvoidsecurity vulnerability
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The system implements dynamic key management where the set of active shared secret keys changes over time based on node votes and readiness states. Initially, both the old and new keys coexist for seamless transition, allowing nodes to use either key for authentication. As nodes progressively adopt the new key through voting, the system dynamically adjusts the active key set. Eventually, the old key is retired completely, eliminating the security vulnerability of key coexistence while maintaining seamless operation throughout the transition period.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentEP2258093B1Secure communications in computer cluster systems
Publication Date: 2014.03.19 INTERNATIONAL BUSINESS MACHINE CORPORATION
  • EP2258093B1 patent drawingFigure 1
  • EP2258093B1 patent drawingFigure 2
  • EP2258093B1 patent drawingFigure 3

AI summary

A system to improve communication security in cluster machine processing may include interconnected computers that can jointly process data. The system may also include a shared secret key used by each of the interconnected computers to encrypt, decrypt, and/or authenticate data being sent,or received,from one of the interconnected computers to another of the interconnected computers. The system may further include a new shared secret key used by each of the interconnected computers to encrypt, decrypt, and/or authenticate data being sent,or received,from one of the interconnected computers to another of the interconnected computers. In addition,the new shared secret key may coexist with the shared secret key without adversely affecting the joint processing of data performed by the plurality of interconnected computers.