Edge Configuration Approval Using Quorum Secret Sharing

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Edge devices in distributed environments are vulnerable to physical attacks and compromise, allowing attackers to apply unauthorized configuration changes that violate enterprise policies.

Innovation Solution

Implement Shamir Secret Sharing (SSS) to distribute sensitive authentication material among multiple edge devices, requiring a quorum agreement before applying configuration changes, ensuring cryptographically secure policy compliance.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If authentication keys are stored on a single edge device, then configuration changes can be applied quickly and efficiently, but the device becomes vulnerable to compromise and unauthorized changes

Engineering Contradiction:

Improvesecurity against unauthorized configuration changesVSAvoiddistribution of authentication material

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The authentication key is divided into multiple secret shares using Shamir Secret Sharing and distributed across multiple edge devices. Each device holds only a portion of the key material, and a quorum of devices must cooperate to reconstruct the full authentication key, preventing single-point compromise while maintaining security

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

A quorum of edge devices acts as an intermediary between the configuration change request and the authentication key. The quorum mechanism ensures that multiple devices must agree on the configuration change before the authentication key can be reconstructed and applied, adding a layer of collective verification

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If a quorum of peer devices must approve configuration changes, then unauthorized changes are prevented, but the configuration process becomes more complex and time-consuming

Engineering Contradiction:

Improvepolicy complianceVSAvoidconfiguration change process

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

Each edge device in the quorum autonomously evaluates the configuration change against stored policy rules and independently decides whether to contribute its secret share. This self-service approach eliminates the need for centralized policy enforcement while maintaining policy compliance through distributed decision-making

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The system changes the parameter of authentication key reconstruction by requiring a quorum threshold to be met. Instead of needing all devices or a single administrator, the threshold parameter allows flexible configuration where a majority or specified number of devices can authorize changes, balancing security with operational efficiency

Inventive Principle:

Principle #35Parameter changes

3Reliability

If authentication material is distributed among multiple devices, then security resilience is improved, but the complexity of key reconstruction increases

Engineering Contradiction:

Improveresilience to device compromiseVSAvoidkey reconstruction process

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

Each edge device stores only the specific secret share relevant to its role in the quorum, rather than maintaining complete authentication material. This local quality approach minimizes the data footprint on each device while enabling secure reconstruction when the required quorum assembles its shares

Inventive Principle:

Principle #3Local quality

Solution Approach 2:

The complex mechanical process of manually coordinating key reconstruction is replaced with automated cryptographic operations. The Shamir Secret Sharing algorithm automatically handles the mathematical reconstruction process, eliminating manual intervention and simplifying the key recovery mechanism while maintaining distributed security

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS20250343820A1Secure Configuration Change Approvals with Shamir Secret Sharing

Publication Date: 2025.11.06 DELL PROD LP

AI summary

Embodiments are directed to secure configuration change at an edge device. A method includes receiving configuration change data at a device, the configuration change data associated with an encrypted authentication key; sending the configuration change data to a plurality of peer devices; receiving secret shares from a quorum of the peer devices, wherein each of the quorum of peer devices sends its respective secret share if it determines that the configuration change data complies with a configuration policy; constructing an decryption key using a quorum of the secret shares; decrypting the authentication key using the decryption key; and applying the authentication key to install the configuration change on the device. The method may further comprise determining, by the device, whether the configuration change data complies with the configuration policy; and constructing the encryption key using the quorum of the secret shares and a secret share stored on the device.