Nested Request Protocol for Distributed Application Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing distributed computing systems face challenges in securing application-specific instructions and authenticating intermediaries in hierarchical management environments, leading to potential security breaches and inefficiencies due to inadequate protocols for multi-stage processing and dynamic entity discovery.

Innovation Solution

A secure application-level protocol is implemented, where each processing manager digitally signs and augments application-specific instructions, creating a nested set of requests with digital signatures to authenticate entities and validate integrity, while also enabling delegation of access rights through a chain of intermediaries.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If a hierarchical job management system is used to optimize resource allocation, then productivity and resource optimization are improved, but security and authentication of application information deteriorate due to multiple intermediaries

Engineering Contradiction:
Improveresource optimizationVSAvoidsecurity
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The patent implements nested request structures where each job manager encapsulates the previous request within a new request container. This nesting mechanism allows multiple levels of job managers to authenticate and validate each other's requests while maintaining the hierarchical structure. The inner request contains authentication information from the outer request, creating a chain of trust that resolves the security issue in hierarchical systems.

Inventive Principle:
Principle #7Nested doll (Nesting)

Solution Approach 2:

The patent introduces digital signatures as an intermediary authentication mechanism between job managers. Each job manager signs the request with its private key, and the next job manager validates this signature using the corresponding public key. This intermediary authentication layer ensures that each intermediary in the hierarchy can be trusted to forward requests securely, resolving the security deterioration caused by multiple intermediaries.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If dynamic determination of job manager sequence is implemented, then adaptability to distributed environment state is improved, but authentication and integrity validation of application information deteriorate

Engineering Contradiction:
Improvedynamic environment adaptationVSAvoidauthentication
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The patent performs preliminary authentication actions by having each job manager sign the request before forwarding it to the next intermediary. This preliminary signing action ensures that when the request reaches the final destination, the entire chain of intermediaries can be authenticated. The authentication is prepared in advance at each stage, allowing dynamic routing while maintaining trust.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent implements feedback mechanisms where each job manager validates the authentication information from the previous request before processing. This feedback loop ensures that each intermediary confirms the authenticity of the request chain. The validation feedback at each stage builds cumulative trust, enabling dynamic determination of job manager sequences while maintaining authentication reliability.

Inventive Principle:
Principle #23Feedback

3Adaptability or versatility

If application-specific instructions are added by each intermediary, then functionality and processing capability are improved, but information loss and corruption risks increase

Engineering Contradiction:
Improveprocessing capabilityVSAvoidinformation integrity
Core Design Contradiction:
Adaptability or versatilityVSLoss of information

Solution Approach 1:

The patent nests each intermediary's application-specific instructions within the request structure while maintaining the outer request's integrity. The inner request contains both the original application instructions and the intermediary's additional instructions, properly delimited and authenticated. This nesting prevents instruction mixing and ensures that each layer's modifications are tracked and validated, preventing information loss.

Inventive Principle:
Principle #7Nested doll (Nesting)

Solution Approach 2:

The patent uses digital signatures as an intermediary validation mechanism that verifies the integrity of application-specific instructions at each stage. Each intermediary signs its added instructions, and the next intermediary validates these signatures. This intermediary validation layer ensures that instructions added at any stage are authentic and have not been corrupted, preventing information loss while allowing enhanced processing capability.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS8555335B2Securing distributed application information delivery
Publication Date: 2013.10.08 MICROSOFT TECHNOLOGY LICENSING LLC
  • US8555335B2 patent drawing
  • US8555335B2 patent drawing
  • US8555335B2 patent drawing

AI summary

In an example implementation, a data structure comports with a secure application instruction protocol. The data structure includes a first application-level request and a second application-level request. The first application-level request has application-specific instructions from a requestor and a requestor signature over the application-specific instructions from the requestor. The second application-level request has application-specific instructions from an intermediary and an intermediary signature over at least the application-specific instructions from the intermediary.