Multicast Session Key Synchronization via Redundant Controllers

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing mechanisms for securing multicast traffic in network-connected devices face challenges in ensuring session key availability, particularly during synchronization needs for multiple group members, and introduce complex processes for handling node joining and removal, especially in scenarios involving single controller failures or reboots.

Innovation Solution

The system employs redundant central controllers and automatic synchronization of encrypted session keys through push and pull mechanisms, as well as out-of-band communication paths, to enhance session key viability and simplify distribution, ensuring seamless transitions and secure communication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Device complexity

If a single central controller is used to distribute session keys, then the distribution mechanism is simple, but the system reliability deteriorates due to single controller failures

Engineering Contradiction:
Improvekey distribution mechanism complexityVSAvoidsession key availability
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The patent introduces multiple central controllers with differentiated roles (primary and secondary) rather than a single uniform controller. Each controller has specific functional characteristics - the primary controller handles normal key distribution while the secondary controller provides backup capability. This local differentiation resolves the contradiction by maintaining simple operation during normal conditions while ensuring reliability through redundant controllers.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The system pre-configures secondary controllers as backup before failures occur. These controllers remain in standby mode with synchronized session keys, ready to take over immediately if the primary controller fails. This beforehand preparation resolves the contradiction by adding reliability through redundant controllers without requiring complex dynamic reconfiguration during operation.

Inventive Principle:
Principle #11Beforehand cushioning (Prior cushioning)

2Adaptability or versatility

If complex mechanisms are introduced to handle node joining and removal dynamically, then the system adaptability improves, but the device complexity increases

Engineering Contradiction:
Improvenode joining and removal handlingVSAvoidkey management mechanism complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent enables nodes to automatically synchronize session keys with controllers and other nodes without requiring complex manual configuration or intervention. When nodes join or leave the network, they autonomously update their session keys through established synchronization mechanisms. This self-service capability provides adaptability while keeping the overall system complexity manageable by eliminating the need for complex external management procedures.

Inventive Principle:
Principle #25Self-service

3Reliability

If session keys are synchronized through multiple paths (controller and peer-to-peer), then the session key availability improves, but the mechanism complexity increases

Engineering Contradiction:
Improvesession key availabilityVSAvoidsynchronization mechanism complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent uses central controllers as intermediary nodes that facilitate session key distribution and synchronization. Controllers act as mediators between nodes, managing key distribution centrally while nodes can also perform peer-to-peer synchronization. This intermediary approach improves reliability by providing multiple synchronized paths without requiring every node to directly communicate with every other node, thus managing complexity through hierarchical organization.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS11792034B2System for communication on a network
Publication Date: 2023.10.17 HONEYWELL INTERNATIONAL INC
  • US11792034B2 patent drawing
  • US11792034B2 patent drawing
  • US11792034B2 patent drawing

AI summary

Systems for communicating over a network and between two or more network connected devices. In particular, the disclosure reveals systems which may utilize multicast communication protocols to facilitate secure communication among one or more network connected devices. A system for secured messaging may include a network system including a first server, a second server and a first node. Further, the first server is configured to authenticate the first node for secure multicast messaging, and the second server is configured to authenticate the first node for secure multicast messaging.