Cryptographic Key Rotation in Publish-Subscribe Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Publish-subscribe systems face challenges in rotating cryptographic keys without interrupting service, as key rotation typically requires suspending the system during re-encryption, which is not feasible in continuously available messaging systems.
Innovation Solution
Implementing a method for cryptographic key rotation in publish-subscribe systems that involves re-encrypting messages using a replacement key while continuing to route and receive messages, using an encryption module as a background process, and managing key rotation through topic aliases or a re-encryption service to maintain service continuity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cryptographic key rotation is performed by suspending the system during re-encryption, then security is improved, but service availability deteriorates
Solution Approach 1:
The patent applies preliminary action by creating a new topic with a new cryptographic key before rotating the key. The new topic is prepared in advance with all necessary encryption infrastructure, allowing the system to switch to it without interruption. This resolves the contradiction by preparing the security upgrade beforehand rather than during operation.
Solution Approach 2:
The patent uses a new topic as an intermediary during key rotation. Instead of directly replacing the old topic and interrupting service, the system introduces a new topic with the new cryptographic key as a mediator. Messages are gradually migrated from the old topic to the new topic, allowing key rotation without service suspension.
2Ease of manufacture
If the system is suspended for key rotation, then re-encryption can be completed, but message routing is interrupted
Solution Approach 1:
The patent segments the message routing process into two parallel paths: one for the old topic with the old cryptographic key and one for the new topic with the new cryptographic key. During transition, some messages are routed through the old topic while others are routed through the new topic. This segmentation allows re-encryption to proceed without interrupting overall message routing.
Solution Approach 2:
The patent maintains continuity of useful action by ensuring that message routing continues uninterrupted during key rotation. The broker service keeps routing messages to both old and new topics simultaneously during the transition period, ensuring that the useful action of message delivery continues without interruption while the cryptographic infrastructure is being updated.
3Productivity
If re-encryption is performed as a background process, then service continuity is maintained, but system complexity increases
Solution Approach 1:
The patent uses copying by creating a new topic that replicates the structure and functionality of the old topic. The new topic is essentially a copy with updated cryptographic credentials. This copying approach maintains service continuity because the new topic can immediately start receiving and routing messages, while the old topic continues to operate in parallel during the transition.
Solution Approach 2:
The patent applies dynamics by making the topic configuration dynamic during key rotation. The system can flexibly route messages to different topics based on the rotation progress, and can adjust the proportion of traffic directed to old versus new topics. This dynamic routing capability maintains service continuity while managing the complexity of the transition process.
Data Source
AI summary
The present disclosure relates to a method for a cryptographic key rotation in a publish-subscribe system providing a broker service for routing stored encrypted messages to one or more subscribers of the topic to which the routed messages are assigned. The routing comprises decrypting the stored encrypted messages. The cryptographic key rotation comprises a re-encryption of the stored messages using a cryptographic replacement key. The re-encryption is executed by an encryption module of the publish-subscribe system as a background process, while the broker service is continued.