Edge Server Encryption Key Sharing for Connection Latency
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In edge computing, the time required for a terminal to establish encryption communication with a new edge server is prolonged due to the need for certificate verification and key exchange, which undermines the benefit of deploying edge servers closer to the terminal, reducing service efficiency.
Innovation Solution
Implementing a distributed storage system that shares SSL/TLS session information between edge servers and cloud servers, allowing the reuse of encryption key information for subsequent connections, thereby skipping the key exchange process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If SSL/TLS encryption procedure is performed with a new edge server, then communication security is ensured, but connection establishment time is prolonged
Solution Approach 1:
The patent applies preliminary action by pre-establishing encryption communication between the terminal and the cloud server before the terminal moves to a new edge server. The cloud server stores the encryption keys generated in advance, so when the terminal connects to a new edge server, the pre-generated keys can be directly used without performing the full SSL/TLS key exchange procedure again, thus reducing connection establishment time while maintaining security
Solution Approach 2:
The cloud server acts as an intermediary that stores and manages encryption keys between the terminal and multiple edge servers. When the terminal needs to connect to a new edge server, the cloud server mediates by providing the pre-stored encryption keys, eliminating the need for the terminal and new edge server to perform complete certificate verification and key exchange, thereby solving the contradiction between security and connection time
2Speed
If edge server is disposed closer to terminal, then transmission delay is shortened, but encryption procedure time becomes significant portion of total communication time
Solution Approach 1:
The patent performs the encryption procedure in advance when the terminal first connects to any edge server or when the cloud server has an established connection. The encryption keys are generated and stored beforehand in the cloud server. When the terminal moves and connects to a new edge server, the pre-generated keys are directly applied, making the actual data transmission immediately fast without being burdened by encryption setup time, thus preserving the speed advantage of edge computing
Data Source
Figure 1
Figure 2A~2B
Figure 3
AI summary
An edge server disposed on an edge of a cloud network, includes: a processor, wherein when encryption key information relating to a terminal which requests a connection to the edge server and the encryption key information generated before the request, is included in shared information shared between a cloud server and another edge server in the cloud network, the processor is configured to start encryption communication with the terminal using the encryption key information of the shared information.