Cluster Key Update via Node Voting and Coexistence
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In distributed computing clusters, existing communication security methods face challenges in efficiently updating shared secret keys without disrupting data processing, as the transition from an old key to a new key requires coexistence and synchronized adoption across all nodes to maintain secure message communications.
Innovation Solution
A system and method that utilize a shared secret key and a new shared secret key for encryption, decryption, and authentication, with each node voting to replace the old key with the new key, ensuring seamless joint processing and indicating key usage in message headers to manage the transition.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a shared secret key is used for encryption and authentication across all nodes, then communication security is improved, but key updates disrupt data processing
Solution Approach 1:
The system performs preliminary key preparation by generating a new shared secret key before the old key expires or becomes compromised. The new key is distributed to all nodes in advance, and nodes vote on readiness to switch. This preliminary action ensures that key updates can occur smoothly without disrupting ongoing data processing, as the new key is already in place and ready for immediate activation across the cluster.
2Stability of the object's composition
If nodes vote to replace the shared secret key, then key update synchronization is improved, but system complexity increases
Solution Approach 1:
The system merges the key update decision-making process into the existing distributed consensus voting mechanism already present in the cluster. Instead of introducing a separate complex key management protocol, the invention leverages the existing voting infrastructure where nodes already participate in consensus decisions. This merging approach maintains key update synchronization while avoiding the overhead of a completely new system, as the voting mechanism is already integrated into the cluster's operational fabric.
3Ease of operation
If the new shared secret key coexists with the old key, then seamless transition is achieved, but security vulnerability increases
Solution Approach 1:
The system implements dynamic key management where the set of active shared secret keys changes over time based on node votes and readiness states. Initially, both the old and new keys coexist for seamless transition, allowing nodes to use either key for authentication. As nodes progressively adopt the new key through voting, the system dynamically adjusts the active key set. Eventually, the old key is retired completely, eliminating the security vulnerability of key coexistence while maintaining seamless operation throughout the transition period.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A system to improve communication security in cluster machine processing may include interconnected computers that can jointly process data. The system may also include a shared secret key used by each of the interconnected computers to encrypt, decrypt, and/or authenticate data being sent,or received,from one of the interconnected computers to another of the interconnected computers. The system may further include a new shared secret key used by each of the interconnected computers to encrypt, decrypt, and/or authenticate data being sent,or received,from one of the interconnected computers to another of the interconnected computers. In addition,the new shared secret key may coexist with the shared secret key without adversely affecting the joint processing of data performed by the plurality of interconnected computers.