Edge Device Software Updates with Signed Lockbox Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional messaging protocols in IT environments face challenges such as excessive bandwidth usage, resource inefficiency, security vulnerabilities, and insufficient reliability, making them unsuitable for efficient data delivery in data intake and query systems.
Innovation Solution
Implementing a topic-based publish-subscribe protocol at edge devices with a message broker that manages subscriptions, retains messages, and facilitates secure, reliable data delivery to a data intake and query system.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of energy
If conventional messaging protocols are used for data delivery in data intake systems, then basic communication functionality is provided, but bandwidth usage becomes excessive and resource efficiency deteriorates
Solution Approach 1:
The patent segments data delivery by implementing topic-based subscriptions where the data intake system divides its data collection needs into specific topics (e.g., server metrics, application logs). Edge devices then publish data only to relevant topics, preventing unnecessary data transmission and reducing bandwidth consumption while maintaining efficient data delivery for subscribed topics.
Solution Approach 2:
The patent introduces a message broker as an intermediary component that manages the communication between edge devices and the data intake system. The broker handles topic routing, message distribution, and subscription management, enabling efficient many-to-many communication patterns that reduce overall system bandwidth usage compared to conventional point-to-point protocols.
2Reliability
If conventional messaging protocols are used, then basic data transmission is achieved, but resource consumption increases and reliability decreases
Solution Approach 1:
The patent implements preliminary action by requiring edge devices to authenticate and subscribe to topics before publishing data. The message broker pre-establishes subscription relationships and routing rules, ensuring that data is delivered reliably to the correct consumers without requiring retransmissions or error handling, thus improving reliability while optimizing resource usage.
Solution Approach 2:
The patent incorporates feedback mechanisms where the message broker acknowledges message reception and delivery status to publishers. This feedback loop ensures reliable data delivery by confirming successful transmission, while the selective acknowledgment approach (acknowledging only relevant messages) prevents excessive resource consumption from processing unnecessary confirmations.
3Object-affected harmful factors
If conventional messaging protocols are implemented, then simple communication is maintained, but security vulnerabilities increase
Solution Approach 1:
The patent applies preliminary action by implementing authentication and authorization checks before allowing any data publication or subscription. The message broker verifies credentials and permissions in advance, blocking potentially harmful communications before they can affect the system. This proactive security approach reduces vulnerabilities while maintaining manageable complexity through centralized security policy enforcement.
Data Source
AI summary
Described herein is a technique to update an edge device deployed in a secure computing network. A repository connected to a public network stores build contents configured to update software installed on the edge device; the public network is inaccessible to devices within the secure computing environment. A second device connected to the public network acquires the build contents in a signed lockbox file. An edge device management service generates a lockbox file containing the build contents and a trusted signer outside the secure computing network signs the lockbox file. The second device connects to secure computing network and establishes communications with the edge device. The edge device verifies the signed lockbox file provided by the second device. Upon verification, the edge device extracts the contents of the signed lockbox file and updates the software installed on the edge device.