Secure DPA Broadcast Protocol Using Host-Managed Session Keys
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Data processing accelerators (DPAs) lack secure communication capabilities, making it difficult for them to collaborate securely and protect against unauthorized access or data theft during peer-to-peer communication.
Innovation Solution
A broadcast protocol is implemented to securely broadcast messages among DPAs using session keys, where a host device generates and distributes public keys, and DPAs encrypt and decrypt messages using these keys to ensure secure communication channels are established and maintained.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If DPAs communicate peer-to-peer to collaborate on data processing tasks, then productivity and coordination efficiency are improved, but security and protection against unauthorized access deteriorate
Solution Approach 1:
The patent introduces a host computing device as an intermediary that facilitates secure communication between DPAs. The host generates session keys and distributes them to DPAs, enabling encrypted peer-to-peer communication without requiring direct trust between DPAs. This mediator approach allows DPAs to collaborate efficiently while maintaining security through host-managed cryptographic keys.
Solution Approach 2:
The patent dynamically changes cryptographic parameters by generating unique session keys for each communication session between DPAs. Instead of using static encryption keys, the system creates temporary session-specific keys that are distributed through the host, allowing secure communication parameters to adapt to each interaction while maintaining high collaboration efficiency.
2Reliability
If DPAs establish secure communication channels using encryption keys, then security and data protection are improved, but device complexity and key management overhead increase
Solution Approach 1:
The patent extracts the complex key management functionality from individual DPAs and centralizes it in the host computing device. The host is responsible for generating session keys, distributing them to appropriate DPAs, and managing key lifecycles. This extraction reduces the complexity burden on DPAs while maintaining strong security through centralized cryptographic management.
Solution Approach 2:
The system implements self-service key distribution where the host automatically generates and distributes session keys to DPAs without manual intervention. The cryptographic management operates autonomously through programmed protocols, reducing operational complexity while ensuring security through consistent automated key provisioning.
Data Source
AI summary
According to one embodiment, a broadcast request is received from a host that hosts an application that initiated a broadcast message to be broadcast to one or more DP accelerators of a plurality of DP accelerators coupled to the host, where the broadcast request includes one or more DP accelerator identifiers (IDs) identifying the one or more DP accelerators. A broadcast session key for a broadcast communication session to broadcast the broadcast message is received from the host. For each of the one or more DP accelerator IDs, a public key of a security key pair corresponding to the DP accelerator ID is identified. The broadcast message is encrypted using the broadcast session key. The broadcast session key is encrypted using the public key. The encrypted broadcast message and the encrypted broadcast session key are transmitted to a DP accelerator identified by the DP accelerator ID.