Conduit Entity for Cryptographic Material Sharing

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Distributed computing entities in networks often lack direct trust relationships or connectivity, making it difficult to share cryptographic material securely across them.

Innovation Solution

A mechanism where entities share cryptographic material through a common 'conduit' entity with which they have a trusted connection, using a synchronization protocol to ensure all entities have the same cryptographic material, generated by a designated leader entity and distributed via a conduit entity.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If cryptographic material is shared directly between computing entities, then security and trust are maintained, but direct trust relationships and connectivity are required between all entities

Engineering Contradiction:
Improvecryptographic material securityVSAvoidentity connectivity requirement
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent introduces a conduit entity that acts as an intermediary between computing entities. The conduit stores cryptographic material generated by a leader entity and distributes it to follower entities that need it. This allows entities to share cryptographic material without requiring direct trust relationships or connectivity between them, while still maintaining security through the trusted conduit mechanism.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If a conduit entity is introduced to share cryptographic material, then entity connectivity requirements are reduced, but system complexity increases

Engineering Contradiction:
Improveentity connectivity requirementVSAvoidsystem architecture
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The conduit entity serves multiple functions: it stores cryptographic material, manages synchronization state, receives requests from follower entities, and coordinates with the leader entity. By consolidating these functions in a single multi-functional component, the patent reduces overall system complexity compared to implementing equivalent functionality at each individual entity.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Reliability

If cryptographic material is synchronized across all entities, then security is maintained, but communication overhead and synchronization time increase

Engineering Contradiction:
Improvecryptographic material synchronizationVSAvoidsynchronization time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The conduit entity stores cryptographic material in advance and maintains synchronization state information. When follower entities need cryptographic material, they can quickly retrieve it from the conduit without waiting for real-time generation or direct communication with the leader entity, significantly reducing synchronization time.

Inventive Principle:
Principle #10Preliminary action

4Reliability

If cryptographic material is generated by a leader entity and distributed via conduit, then security is improved, but the system requires leader election and material distribution protocols

Engineering Contradiction:
Improvecryptographic material securityVSAvoidprotocol complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The conduit entity simplifies the distribution protocol by acting as an intermediary. Instead of implementing complex peer-to-peer distribution protocols between all entities, the system uses a simpler request-response model where follower entities request material from the conduit, which retrieves it from the leader and delivers it to the follower.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS11831768B2Cryptographic material sharing among entities with no direct trust relationship or connectivity
Publication Date: 2023.11.28 AKAMAI TECHNOLOGIES INC
  • US11831768B2 patent drawing
  • US11831768B2 patent drawing
  • US11831768B2 patent drawing

AI summary

A mechanism to share cryptographic material across entities that may not have a direct trust relationship between or among each other, or no network connectivity, or some combination thereof, but where participating entities do share a trust relationship (or trusted connection(s)) with a common entity, sometimes referred to herein as a “conduit” entity. This technique enables such entities to leverage their trust relationship with a common “conduit” entity to share cryptographic material between or among themselves.