Extensible SQL Table for Cryptographic Object Storage
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In complex computer systems, managing cryptographic objects in a way that reduces code maintenance, supports multiple standards, and ensures efficient storage and access while maintaining compliance with standards like FIPS is challenging due to the need for frequent updates and audits.
Innovation Solution
A storage table organized using standard query language (SQL) with columns corresponding to attributes, allowing for extensibility to accommodate new attributes and standards, and a translator to convert PKCS#11 commands into SQL commands for efficient storage and retrieval of cryptographic objects.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If cryptographic objects are stored in a proprietary data structure, then storage access speed is improved, but adaptability to new cryptographic standards deteriorates
Solution Approach 1:
The patent introduces a translator as an intermediary component that converts PKCS#11 commands into SQL queries. This mediator layer allows the system to maintain fast native PKCS#11 access while adapting to new cryptographic standards through standard SQL, resolving the contradiction between access speed and adaptability.
Solution Approach 2:
The patent uses SQL as a universal language to store and query cryptographic objects. By standardizing the storage interface through SQL, the system becomes adaptable to multiple cryptographic standards without sacrificing access performance, as SQL provides both speed and versatility.
2Device complexity
If a proprietary storage interface is used, then device complexity is reduced, but ease of operation deteriorates due to frequent code modifications
Solution Approach 1:
The translator serves as a mediator between the simple PKCS#11 interface and the SQL storage layer. This intermediary absorbs the complexity of standard compliance, allowing operators to work with a simple interface while the system maintains ease of operation through standardized SQL queries.
Solution Approach 2:
The patent changes the storage parameters from proprietary formats to standardized SQL parameters. This parameter transformation maintains operational simplicity by using universal SQL syntax while accommodating evolving cryptographic standards through parameter updates in the SQL schema.
3Adaptability or versatility
If cryptographic objects are stored with all possible attributes, then adaptability to new attributes is improved, but volume of storage increases
Solution Approach 1:
The patent segments the storage of cryptographic objects by separating object data from attribute definitions. Objects are stored with only their current attributes in SQL rows, while the schema structure provides extensibility for new attributes. This segmentation allows adaptability without requiring all possible attributes to be stored for every object.
Solution Approach 2:
The patent implements a dynamic storage schema where the SQL table structure can evolve to accommodate new cryptographic attributes without requiring changes to existing object storage. The schema dynamically adapts to new standards while maintaining efficient storage of current object data, avoiding volume inflation from storing unused attributes.
Data Source
AI summary
Embodiments of the present invention provide a method and apparatus, including a client and security token, for managing cryptographic objects, such as public key cryptography standard (PKCS)#11 objects, in a computer system. A storage table for the cryptographic objects is established including rows for the cryptographic objects and columns corresponding to available attributes capable of being associated with the cryptographic objects. Actual attributes of the cryptographic objects are stored in ones of the plurality of columns corresponding to respective ones of the available attributes. The storage table is extensible such that additional columns are added corresponding to new attributes capable of being associated with the cryptographic objects.