Encryption Key Pool Allocation for Information Centric Computing

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

In information centric in-network computing, existing methods face challenges in providing efficient data encryption due to the need for key distribution procedures, dynamic operation location determination, and the requirement for minimizing latency in a request-response environment.

Innovation Solution

A method and system that prepare an encryption key pool and synchronization key pool to allocate a security key for data encryption, allowing for secure data exchange with minimal latency by prepping encryption before the user's request and supporting parallel encryption/decryption operations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Speed

If symmetric encryption technology is used for data encryption in INC service, then encryption speed is improved, but key distribution problem arises requiring separate handshake procedures

Engineering Contradiction:

Improveencryption speedVSAvoidkey distribution procedure complexity

Core Design Contradiction:

SpeedVSDevice complexity

Solution Approach 1:

The patent pre-establishes encryption key pools at computing nodes before INC service execution. When a container is created, the system automatically selects and allocates appropriate encryption keys from pre-prepared pools, eliminating the need for real-time key generation and distribution handshakes. This preliminary preparation enables fast symmetric encryption while avoiding complex key exchange procedures.

Inventive Principle:

Principle #10Preliminary action

2Reliability

If asymmetric encryption technology is used to solve key distribution problem, then key distribution security is improved, but encryption/decryption time becomes significantly long

Engineering Contradiction:

Improvekey distribution securityVSAvoidencryption/decryption time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent segments the encryption process into two parts: asymmetric encryption for key exchange and symmetric encryption for data encryption. The asymmetric keys are used only for establishing secure communication and exchanging session keys, while the actual data encryption uses fast symmetric keys. This segmentation maintains security while minimizing time loss from asymmetric encryption operations.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The system pre-establishes asymmetric key pairs at computing nodes before service execution. When encryption is needed, the system quickly selects pre-prepared session keys from pools and exchanges them using the pre-established asymmetric key infrastructure, avoiding time-consuming asymmetric encryption for every data packet.

Inventive Principle:

Principle #10Preliminary action

3Reliability

If traditional key distribution procedures are implemented in INC service, then encryption security is improved, but processing latency increases due to additional packet exchange

Engineering Contradiction:

Improveencryption securityVSAvoidprocessing latency

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent implements preliminary key pool establishment at computing nodes during system initialization or container creation. Encryption keys are pre-selected and stored in association with container identifiers, enabling immediate encryption without additional key distribution packet exchanges. This eliminates latency while maintaining security.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent merges key management operations with container creation operations. When a container is instantiated, the system simultaneously creates the container environment and allocates encryption keys from pre-prepared pools, combining what would traditionally be separate sequential operations into a single atomic process, thereby eliminating additional latency.

Inventive Principle:

Principle #5Merging (Combining)

4Adaptability or versatility

If dynamic operation location determination is implemented in INC service, then service flexibility is improved, but encryption setup time is delayed until operation location is determined

Engineering Contradiction:

Improveoperation location flexibilityVSAvoidencryption setup time

Core Design Contradiction:

Adaptability or versatilityVSLoss of time

Solution Approach 1:

The patent pre-establishes encryption key pools at multiple computing nodes before dynamic operation location determination occurs. When the system dynamically selects an operation location, encryption keys are already ready to be immediately allocated and applied, eliminating the delay that would occur if key setup waited for location determination.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS12192341B2Method for protecting data for information centric in-network computing and system using the same

Publication Date: 2025.01.07 ELECTRONICS & TELECOMM RES INST

AI summary

Disclosed herein are a method for protecting data for information centric in-network computing and a system using the same. The method includes: preparing, at a computing node, a an encryption key pool that includes a security key for sharing a symmetric key used for encrypting result data according to a user's request and matching information; preparing, at an INC agent receiving the user's request, a synchronization key pool for sharing the security key through the matching information; and creating, by the computing node, a processor for executing output processing of the result data and allocating a security key to the processor based on the matching information of the encryption key pool when a security key exists. The security key is allocated to the computing node which is determined to perform the request in the INC agent.