Encrypted Password Distribution Across Data Store Processing Nodes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In the context of database access security, existing technologies face challenges in managing multiple encrypted connections efficiently, particularly when complex analytics are performed in parallel, as most databases allow only a single connection once inside the database, necessitating secure and efficient distribution of encrypted database passwords across processing nodes.
Innovation Solution
A system and method where a data store system with multiple processing nodes receives, decrypts, and authenticates an encrypted password, providing it to other nodes for secure access, enabling multiple connections for parallel processing while maintaining encryption and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If multiple processing nodes are used for parallel execution, then productivity is improved, but device complexity increases due to managing multiple encrypted connections
Solution Approach 1:
The patent creates a master encrypted connection and copies its credentials to multiple processing nodes, enabling parallel execution without manually configuring each connection. This copying approach maintains security while simplifying the management of multiple connections across nodes.
2Ease of operation
If encrypted passwords are distributed to multiple nodes, then ease of operation is improved, but security is worsened due to potential exposure
Solution Approach 1:
The patent introduces a security module as an intermediary that manages password distribution and authentication. This mediator controls how credentials are shared across nodes, ensuring secure distribution while maintaining ease of operation through centralized management.
Solution Approach 2:
The system performs preliminary authentication and password distribution through a security module before actual processing begins. This preliminary action ensures that all nodes are properly authenticated and secured before parallel execution starts, preventing security issues during operation.
3Loss of energy
If complex analytics are executed in-database, then loss of energy is reduced, but device complexity increases due to parallel connection requirements
Solution Approach 1:
The patent merges the connection management functionality into a centralized security module that handles authentication for multiple nodes. This consolidation reduces the overall system complexity while enabling in-database parallel analytics execution, maintaining energy efficiency without proportionally increasing management overhead.
Data Source
AI summary
A system may include a server and a data store system. The server may include at least one storage device and at least one processor. The server may execute an application and may store an encrypted password. The data store system may include at least one persistent storage device configured to store a data store. The data store system may further include a plurality of processing nodes configured to operate on the data store. The data store system may receive the encrypted password from the application with one of the plurality of processing nodes and may decrypt the encrypted password with the one of the plurality of processing nodes. The data store system may authenticate the decrypted password with the one of the processing nodes and provide the decrypted password to other processing nodes. Each processing node that has the decrypted password may be accessible to the application to operate on the data store. A method and computer-readable medium may also be implemented.