Distributed Authentication Re-establishment Using Historical Telemetry
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Re-establishing a root of trust between a network core and data processing systems in a distributed environment is computationally expensive and time-consuming, often requiring user intervention.
Innovation Solution
Utilizing shared knowledge from historical telemetry data to generate a security questionnaire that data processing systems can respond to without user intervention, thereby re-establishing the root of trust efficiently.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional root of trust re-establishment methods are used, then security authentication is achieved, but computing resources are excessively consumed and time is lost
Solution Approach 1:
The system performs preliminary actions by continuously collecting and storing telemetry data from data processing systems during normal operation. This historical data is prepared in advance and can be quickly retrieved when authentication is needed, eliminating the need for computationally expensive real-time verification processes.
Solution Approach 2:
The patent creates a copy of the authentication process by using telemetry data to generate security questions that replicate the essence of traditional authentication without requiring the full computational overhead. The system answers these questions based on stored telemetry data, providing an efficient alternative to traditional root of trust re-establishment.
2Reliability
If traditional root of trust re-establishment methods are used, then security authentication is achieved, but user intervention is required
Solution Approach 1:
The system implements self-service by automatically generating security questions from stored telemetry data and providing answers without requiring user intervention. The data processing system itself serves as the source of authentication information, eliminating the need for users to manually verify identity or provide credentials during re-authentication.
3Reliability
If root of trust is continuously maintained, then security is ensured, but computing resources are wasted
Solution Approach 1:
The system uses periodic action by collecting telemetry data at regular intervals during normal operation and storing it for future authentication needs. This allows the system to maintain security readiness without continuous computational effort, as the data is already captured and stored when needed.
Solution Approach 2:
The patent changes the parameter of authentication from requiring active computational verification to using pre-captured telemetry data. This parameter change transforms the authentication process from a resource-intensive operation to a data retrieval operation, significantly reducing computing resource consumption while maintaining security reliability.
Data Source
AI summary
Methods and systems for authenticating data processing systems throughout a distributed environment without user intervention are disclosed. To authenticate data processing systems without user intervention, a system may include a network core and one or more data processing systems. A previously established root of trust between the network core and a data processing system may be lost and the network core may attempt to re-authenticate the data processing system using historical telemetry data. The historical telemetry data may be previously provided to the network core by the data processing system prior to the loss of the root of trust. The network core may provide the data processing system with a security questionnaire based on the telemetry data and the data processing system may use similar telemetry data to respond to the security questionnaire. If the answers to the security questions are considered accurate, the data processing system may be re-authenticated.