Derived RPC Keys for Secure Low-Overhead Connectionless Protocols
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network protocols inefficiently use limited packet space due to separate implementation of integrity protection, encryption, and authentication, leading to increased encoding and processing overhead.
Innovation Solution
A method and system that generate derived keys using a region key, process ID, and network address to provide combined integrity protection, encryption, and authentication for remote memory access, ensuring secure and efficient data transfer.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If integrity protection, encryption, and authentication are implemented as separate validation steps, then each validation step can be performed independently, but encoding and processing overhead increases and packet space efficiency decreases
Solution Approach 1:
The patent combines integrity protection, encryption, and authentication into a single validation step by deriving a unified key from the shared secret and exchange hash. This merged approach processes all three security functions simultaneously, eliminating redundant overhead while maintaining independent security validation capabilities.
2Reliability
If separate validation steps are used for integrity protection, encryption, and authentication, then each step can be validated independently, but packet space utilization becomes inefficient
Solution Approach 1:
The patent merges integrity protection, encryption, and authentication into a single key derivation and validation process. By using one derived key for all three functions, the system maintains reliable independent validation while significantly improving packet space efficiency through consolidated encoding.
3Reliability
If a shared secret is used for key exchange, then authentication can be established, but derived keys must be unique for each connection to prevent unauthorized access
Solution Approach 1:
The patent applies local quality by incorporating connection-specific parameters (local and remote port numbers, exchange hash) into the key derivation process. This ensures that each connection receives a unique derived key tailored to its specific context, preventing unauthorized access while maintaining authentication reliability.
Solution Approach 2:
The patent changes parameters in the key derivation function by incorporating connection-specific values (port numbers, exchange hash) alongside the shared secret. This parameter variation ensures unique derived keys for each connection without complicating the overall authentication mechanism.
Data Source
Figure 1
Figure 2A
Figure 2B
AI summary
Aspects of the disclosure relate to providing derived keys for connectionless network protocols. The derived key may be provided by receiving, at a host, a remote procedure call (RPC) sent by a remote host in response a request by an application executing on the remote host. The host may generate a derived key from a region key, the region key being associated with an application-specific memory region on the host. The host may transmit the derived key to the remote host.