Distributed Node Attestation for Secure Heterogeneous Clusters

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

In heterogenous computing clusters, existing attestation methods rely on a single point of trust, leading to significant processing overhead and a single point of failure, with trust established only between the attestation service and a single device, limiting efficient cluster maintenance and secure communication.

Innovation Solution

Implementing distributed attestation through a decentralized protocol, such as blockchain, where each processing node can attest to other nodes, enabling peer-to-peer verification and secure communication using cryptographic keys.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If a single point of trust is used for attestation, then trust establishment is simplified, but processing overhead increases and single point of failure occurs

Engineering Contradiction:

Improvetrust establishmentVSAvoidprocessing overhead

Core Design Contradiction:

Ease of operationVSProductivity

Solution Approach 1:

The patent segments the centralized attestation service into multiple distributed attestation nodes. Each node independently performs attestation on assigned devices, eliminating the single point of trust and reducing processing overhead by distributing the workload across multiple nodes rather than concentrating it at one service provider.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent introduces a blockchain as an intermediary layer between attestation nodes and the attestation service. The blockchain records attestation results in a decentralized manner, enabling trust establishment without requiring a single centralized authority. This intermediary mechanism allows multiple nodes to verify device integrity independently while maintaining system-wide trust.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Device complexity

If a single point of trust is used for attestation, then system complexity is reduced, but reliability decreases due to single point of failure

Engineering Contradiction:

Improvesystem complexityVSAvoidsingle point of failure

Core Design Contradiction:

Device complexityVSReliability

Solution Approach 1:

The patent divides the attestation system into multiple independent attestation nodes that operate autonomously. Each node can perform attestation on devices assigned to it without requiring coordination with other nodes or a centralized service, thereby eliminating single point of failure while maintaining manageable system complexity through modular architecture.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent changes the fundamental parameter of trust from centralized to decentralized. By implementing distributed attestation where multiple nodes can independently verify device integrity and record results on a blockchain, the system achieves high reliability without requiring complex centralized coordination mechanisms.

Inventive Principle:

Principle #35Parameter changes

3Ease of operation

If centralized attestation service is used, then trust establishment is simplified, but cluster maintenance efficiency decreases

Engineering Contradiction:

Improvetrust establishmentVSAvoidcluster maintenance efficiency

Core Design Contradiction:

Ease of operationVSProductivity

Solution Approach 1:

The patent segments the cluster maintenance function across multiple attestation nodes, each responsible for monitoring and verifying specific devices or device groups. This segmentation enables parallel processing of maintenance tasks, significantly improving cluster maintenance efficiency while maintaining simplified trust establishment through the blockchain-based verification mechanism.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent implements continuous attestation where distributed nodes continuously monitor device integrity and report findings to the blockchain. This continuous action eliminates downtime and interruptions in cluster maintenance operations, as multiple nodes can simultaneously verify different devices without requiring centralized coordination or causing system-wide pauses.

Inventive Principle:

Principle #20Continuity of useful action

4Productivity

If distributed attestation is implemented, then processing overhead is reduced and reliability improves, but device complexity increases

Engineering Contradiction:

Improveprocessing overheadVSAvoiddevice complexity

Core Design Contradiction:

ProductivityVSDevice complexity

Solution Approach 1:

The patent introduces the blockchain as an intermediary that simplifies device complexity in distributed attestation. Instead of requiring devices to directly communicate with multiple attestation nodes and manage complex verification protocols, the blockchain serves as a centralized record-keeping mechanism that automatically stores and verifies attestation results, reducing the computational burden on individual devices while maintaining the benefits of distributed processing.

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS20250373449A1Distributed attestation in heterogenous computing clusters

Publication Date: 2025.12.04 ALTERA CORP

AI summary

A method comprises receiving, from a first processing node of a distributed processing cluster, an indication of an attestation result and supporting data for a second processing node of the distributed processing cluster, transmitting the indication of attestation result and supporting data for the second processing node of the distributed processing cluster to at least one additional processing node of the processing cluster, and in response to a determination that the indication of an attestation result for the second processing node of the distributed processing cluster indicated that the second processing node of the distributed processing device is secure, establishing a secure communication connection with the second processing node of the distributed processing cluster using the supporting data.