Cryptographic Device Driver Resource Allocation

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Cryptographic devices face difficulties in handling high concurrency and data processing demands in big data applications due to limitations in business concurrency capacity and data processing capacity.

Innovation Solution

A method for high-speed cryptographic computation based on software-hardware collaboration, where a host machine SDK performs compliance checks and pre-processing on data packets, and a cryptographic device driver allocates resources using load balancing principles to optimize cryptographic operations, including grouping and concurrent scheduling of data packets for efficient processing.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If cryptographic devices are used for data processing, then data security is ensured, but business concurrency capacity and data processing capacity are limited

Engineering Contradiction:

Improvedata processing capacityVSAvoidsecurity reliability

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The patent segments the data processing task into two distinct parts: pre-processing handled by the host machine SDK and cryptographic computation handled by the cryptographic device. The pre-processing includes compliance checks, packet splitting/recombining, and encoding format conversion, while the cryptographic device performs the actual cryptographic operations. This segmentation allows the cryptographic device to focus on security-critical operations while the host handles preparatory tasks, thereby improving overall processing capacity without compromising security reliability.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent introduces a cryptographic device driver as an intermediary component between the host machine SDK and the cryptographic device. The driver receives reference data packets from the SDK, determines target resources based on load balancing principles, and schedules cryptographic algorithms for execution. This intermediary layer coordinates the interaction between software and hardware components, optimizing resource allocation and improving system throughput while maintaining security guarantees.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Speed

If cryptographic algorithms are executed sequentially, then security is maintained, but processing speed is reduced

Engineering Contradiction:

Improveprocessing speedVSAvoidconcurrent execution complexity

Core Design Contradiction:

SpeedVSDevice complexity

Solution Approach 1:

The patent implements dynamic resource allocation and scheduling mechanisms that adapt to varying processing conditions. The cryptographic device driver dynamically determines target resources based on current system state and load balancing principles. The host machine SDK dynamically adjusts packet processing strategies based on compliance check results and optimal packet size requirements. This dynamic approach enables efficient concurrent execution of cryptographic algorithms while managing system complexity through adaptive control.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The patent performs preliminary actions before cryptographic computation by conducting compliance checks on data packets and preparing reference data packets through splitting, recombining, or encoding format conversion. These preliminary actions are performed by the host machine SDK before data is sent to the cryptographic device, ensuring that the cryptographic device receives optimally formatted data and reducing the complexity of concurrent execution during the actual cryptographic operations.

Inventive Principle:

Principle #10Preliminary action

3Productivity

If packet sizes are not optimized, then processing simplicity is maintained, but processing efficiency is reduced

Engineering Contradiction:

Improveprocessing efficiencyVSAvoidpacket processing complexity

Core Design Contradiction:

ProductivityVSDevice complexity

Solution Approach 1:

The patent applies parameter changes by dynamically adjusting packet size parameters based on optimal packet size requirements corresponding to different request types. The host machine SDK modifies packet characteristics (splitting large packets into smaller ones or recombining small packets) to match the optimal size for efficient cryptographic processing. This parameter optimization improves processing efficiency while the systematic approach to packet manipulation keeps the added complexity manageable through standardized processing rules.

Inventive Principle:

Principle #35Parameter changes

Data Source

PatentUS12255981B2Methods and apparatuses for implementing high-speed cryptographic computation based on software-hardware collaboration, and electronic devices

Publication Date: 2025.03.18 HANGZHOU HIKVISION DIGITAL TECHNOLOGY CO LTD

AI summary

The present disclosure provides methods and apparatuses for implementing high-speed cryptographic operations based on software-hardware collaboration, and electronic devices. In the embodiments of the present disclosure, by analyzing software and hardware computing resources in real-time, the cryptographic device driver allocates the one or more target resources for cryptographic computation to the reference data packets. When the one or more target resources include the target cryptographic device, the cryptographic device executes, according to the characteristics of the target cryptographic algorithm used to perform cryptographic computation on the reference data packet, the acceleration operation corresponding to the target cryptographic algorithm for the cryptographic computation on the reference data packets, such as grouping the reference data packets, to improve a concurrent execution rate of an algorithm and cope with situations with a large amount of service concurrency and data processing.