Gateway WAN Optimization Using Fully Homomorphic Encryption
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Modern enterprise applications spanning large geographical distances face significant cost and performance penalties due to data duplication and synchronization over multiple cloud regions, with existing solutions being inflexible, slow, and expensive.
Innovation Solution
Implementing a WAN optimization method using gateway routers to aggregate and compress data streams, employing traffic redundancy elimination and fully homomorphic encryption to optimize encrypted data transmission across wide area networks, reducing redundancy and enhancing privacy.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If data is moved to centralized data centers and duplicated across cloud regions, then data availability and access are improved, but cost and bandwidth usage increase significantly
Solution Approach 1:
The patent merges multiple data streams from different sources into a single optimized stream by eliminating redundant data. The gateway router combines data from multiple edge routers, removing duplicates and synchronizing information, thereby reducing bandwidth consumption while maintaining data availability across distributed locations.
Solution Approach 2:
The patent extracts and removes redundant data segments from data streams before transmission. The gateway router identifies and eliminates duplicate information, keeping only essential data for transmission across the WAN, thus reducing bandwidth usage while preserving data access capability.
2Reliability
If data is encrypted to enhance privacy, then security is improved, but WAN optimization operations become more difficult
Solution Approach 1:
The patent introduces fully homomorphic encryption as an intermediary that enables optimization operations on encrypted data without decryption. The FHE scheme acts as a mediator between the need for privacy (encrypted data) and the need for optimization (data processing), allowing the gateway router to perform redundancy elimination and other optimizations on ciphertext without compromising security.
Solution Approach 2:
The patent changes the state of data from plaintext to encrypted form while maintaining the ability to perform optimization operations. By using FHE, the system transforms data into a different parameter state (encrypted) that still allows for mathematical operations, enabling WAN optimization on secure data through algebraic manipulations of ciphertext.
3Adaptability or versatility
If multiple data streams are transmitted individually from multiple routers, then data source diversity is maintained, but bandwidth efficiency decreases
Solution Approach 1:
The patent merges multiple data streams from different routers into a single aggregated stream at the gateway router. This consolidation maintains the diversity of data sources while improving bandwidth efficiency by eliminating redundant transmissions and optimizing the combined stream for WAN transmission to the centralized data center.
Data Source
AI summary
Some embodiments of the invention provide a method for WAN (wide area network) optimization for a WAN that connects multiple sites, each of which has at least one router. At a gateway router deployed to a public cloud, the method receives from at least two routers at least two sites, multiple data streams destined for a particular centralized datacenter. The method performs a WAN optimization operation to aggregate the multiple streams into one outbound stream that is WAN optimized for forwarding to the particular centralized datacenter. The method then forwards the WAN-optimized data stream to the particular centralized datacenter.