Secure DPA Broadcast via Switch-Mediated Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Data processing accelerators (DPAs) lack secure communication capabilities, making it difficult for them to cooperate and coordinate securely for data processing tasks, as they cannot ensure the integrity and confidentiality of their communications with each other.
Innovation Solution
A system and method are implemented to securely broadcast messages among DPAs using a communication switch, where a broadcast instruction is received, a broadcast session key is determined, and the message is encrypted using public keys associated with each DPA, ensuring secure communication between DPAs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If DPAs communicate peer-to-peer for data processing tasks, then cooperation and coordination between DPAs are improved, but security and confidentiality of communications deteriorate
Solution Approach 1:
The patent introduces a switch as an intermediary device between DPAs to enable secure peer-to-peer communication. The switch receives encrypted broadcast messages from one DPA and selectively forwards decrypted versions to authorized recipient DPAs, thereby mediating the communication to maintain both cooperation capability and security. This resolves the contradiction by adding a trusted intermediary that enables DPA collaboration while protecting communication confidentiality.
Solution Approach 2:
The patent segments the communication channel into encrypted segments using broadcast encryption. Each DPA has its own decryption key, allowing the system to divide the broadcast message into encrypted portions that only authorized recipients can decrypt. This segmentation approach enables multiple DPAs to cooperate securely by receiving and processing different segments of the overall communication task while maintaining individual security boundaries.
2Reliability
If broadcast encryption is used to secure messages to multiple DPAs, then confidentiality is improved, but computational overhead and complexity increase
Solution Approach 1:
The patent merges multiple individual encryption operations into a single broadcast encryption operation. Instead of encrypting separate messages for each DPA individually, the system performs one broadcast encryption that simultaneously secures the message for multiple authorized DPAs. This combining approach maintains confidentiality for all recipients while reducing the overall computational overhead compared to performing separate encryptions for each DPA.
Data Source
AI summary
According to one embodiment, a broadcast request is received from a host via a communication switch to broadcast a broadcast message to one or more DP accelerators, where the host hosts an application that initiated the broadcast request. The broadcast request includes a list of one or more public keys associated with one or more DP accelerators of a plurality of DP accelerators coupled to the communication switch. For each of the one or more DP accelerators associated with the public keys of the list, a session key for a broadcast session corresponding to the broadcast message is encrypted using one of the public key associated with the DP accelerator. The broadcast message is encrypted using the broadcast session key. The encrypted broadcast messages and the encrypted broadcast session keys are broadcast to the DP accelerators.