Floating PV Service for Secure Mesh Message Transfer
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mesh networks face challenges in securely passing messages due to potential attack vectors introduced by network calls, making it difficult to handle provable security for cryptographic key loading and other sensitive operations.
Innovation Solution
The implementation of a Persistent Volume (PV) system within a mesh network, where a Floating PV Service (FPVS) allocates and attaches PVs to nodes, enabling secure message passing by utilizing simple encryption mechanisms and avoiding network traffic.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If network calls or point to point calls are used for message passing in mesh networks, then message delivery capability is improved, but security is worsened due to potential attack vectors
Solution Approach 1:
The patent extracts the message passing function from the network call mechanism and implements it through direct node-to-node communication using attached storage devices. Messages are written directly to the storage device attached to the target node, eliminating the need for network transmission and thereby removing the attack vectors associated with network calls.
Solution Approach 2:
The patent introduces a storage device as an intermediary between sender and receiver nodes. The storage device serves as a secure medium that receives messages from the sender node and makes them available to the receiver node without requiring direct network communication, thus providing security while maintaining message delivery capability.
2Adaptability or versatility
If cryptographic keys are loaded through network calls, then key distribution is improved, but provable security is worsened
Solution Approach 1:
The patent extracts cryptographic key distribution from the network call mechanism and implements it through direct attachment of storage devices containing cryptographic materials. Keys are loaded directly from the attached storage device to the node's memory, eliminating network transmission and providing provable security while maintaining key distribution capability.
3Adaptability or versatility
If messages are passed through network traffic, then message passing flexibility is improved, but interception risk is worsened
Solution Approach 1:
The patent extracts message passing from network traffic and implements it through direct storage device attachment. Messages are transferred directly to the storage device attached to the target node without being transmitted over the network, thereby maintaining flexibility while eliminating interception risk.
Solution Approach 2:
The patent uses the concept of directly attached storage devices as a protective barrier between the sender and receiver. The storage device acts as a secure container that holds messages and makes them available to the target node without exposing them to network transmission, thus providing protection against interception.
Data Source
AI summary
Embodiments of the present disclosure provide a method, a system and a non-transitory computer-readable medium to securely pass a message. The method includes executing, by a processing device, a floating persistent volumes service (FPVS) to allocate and attach persistent volume (PV) to a first node in a mesh network to pass a payload in the PV to the first node; and sending a first message to the first node to inform the first node to read data from the payload in the PV.