Cryptographic Operation Distribution Across Heterogeneous Processing Hardware
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges in optimally distributing cryptographic operations across different types of processing hardware, such as specialized cryptographic processors and general CPUs, to efficiently manage cryptographic demands in network communications.
Innovation Solution
A method and system that determine and assign cryptographic operations based on factors like processor utilization, data size, and incoming rate, allowing for optimal distribution across different types of processing hardware, including x86 processors and cryptographic acceleration devices, to execute cryptographic functions like SSL/TLS handshakes efficiently.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If cryptographic operations are performed on specialized cryptographic processors, then processing speed and efficiency are improved, but device complexity increases
Solution Approach 1:
The patent segments cryptographic operations into different types (asymmetric, symmetric, hashing) and assigns them to different processing hardware based on their specific requirements. Specialized cryptographic processors handle operations where they provide significant acceleration, while general-purpose CPUs handle operations where the overhead of specialized hardware would not be justified.
Solution Approach 2:
The system dynamically determines and adjusts the distribution of cryptographic operations between specialized processors and general-purpose CPUs based on real-time factors such as operation type, data size, processor utilization, and incoming data rate. This dynamic allocation optimizes processing efficiency while adapting to varying workload conditions.
2Productivity
If cryptographic operations are distributed across multiple processors, then processing efficiency is improved, but determination complexity increases
Solution Approach 1:
The system employs automated determination mechanisms that monitor processor utilization, operation characteristics, and workload conditions to autonomously decide which processor should handle each cryptographic operation. This self-service approach eliminates the need for manual configuration and complex external control systems.
Solution Approach 2:
The system continuously monitors processor utilization levels and performance metrics, using this feedback to dynamically adjust the distribution of cryptographic operations. This feedback loop ensures that operations are always assigned to the most appropriate processor based on current system conditions, optimizing throughput without requiring complex predetermined rules.
3Device complexity
If general-purpose CPUs are used for cryptographic operations, then device complexity is reduced, but processing speed decreases
Solution Approach 1:
The system design allows general-purpose CPUs to handle a broad range of cryptographic operations, particularly those with smaller data sizes or operations where specialized hardware would not provide significant acceleration. This universal capability reduces the need for specialized hardware while maintaining acceptable processing speeds for many common cryptographic tasks.
Data Source
Figure 1A
Figure 1B
Figure 1C
AI summary
The present disclosure is directed towards systems and methods for executing cryptographic operations across different types of processing hardware. An intermediary device may identify a cryptographic function to be performed at the device, according to a message from a client or a server. The device may identify a sequence of cryptographic operations to be executed for performing the cryptographic function. The device may determine subsets of the cryptographic operations to be executed on across different types of processing hardware. The different types of processing hardware may reside on the device. Each of the types of processing hardware may execute, responsive to the determination, the respective subset of the cryptographic operations, according to the sequence of the cryptographic operations.