Oblivious Encryption for Privacy-Preserving Service Migration

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

As end user devices, such as mobile devices, move away from edge compute nodes, performance and user experience degrade due to increased latency and decreased throughput, and existing solutions compromise user privacy by tracking location information for service migration.

Innovation Solution

Implementing oblivious encryption to encrypt user and location information, allowing third-party service providers to process candidate edge and cloud compute devices without decrypting the data, thus preserving user privacy while facilitating service migration to closer nodes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If location information is tracked to enable service migration to closer edge compute nodes, then service execution performance is improved, but user privacy is compromised

Engineering Contradiction:
Improveservice execution performanceVSAvoiduser privacy
Core Design Contradiction:
ProductivityVSLoss of information

Solution Approach 1:

The patent introduces an intermediary encryption mechanism that mediates between location tracking requirements and privacy protection. The encryption scheme acts as a mediator that allows the system to process location information for service migration while preventing direct access to raw location data, thus resolving the contradiction between performance improvement and privacy preservation.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent transforms location information from its original readable form into encrypted form through parameter change. By changing the state of location data from plaintext to ciphertext, the system enables processing of location information for service migration while simultaneously protecting user privacy, as the encrypted data cannot be directly interpreted without the decryption key.

Inventive Principle:
Principle #35Parameter changes

2Adaptability or versatility

If end user devices move away from edge compute nodes, then user mobility is improved, but service quality deteriorates due to increased latency

Engineering Contradiction:
Improveuser mobilityVSAvoidlatency
Core Design Contradiction:
Adaptability or versatilityVSLoss of time

Solution Approach 1:

The patent implements a dynamic service migration mechanism that automatically adapts to user movement. When users move away from edge compute nodes, the system dynamically identifies and migrates services to closer edge nodes based on real-time location information, thereby maintaining low latency while preserving user mobility. This dynamic adjustment resolves the contradiction between mobility and service quality.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent employs feedback mechanisms that continuously monitor user location and service performance metrics. Based on this feedback, the system determines when migration is necessary and executes migration to optimal edge compute nodes, thereby maintaining low latency despite user movement. The feedback loop enables the system to respond to changing conditions and resolve the latency issue while preserving mobility.

Inventive Principle:
Principle #23Feedback

Data Source

PatentUS20230344804A1Methods and apparatus to increase privacy for follow-me services
Publication Date: 2023.10.26 INTEL CORP
  • US20230344804A1 patent drawing
  • US20230344804A1 patent drawing
  • US20230344804A1 patent drawing

AI summary

Methods, apparatus, systems, and articles of manufacture to migrate cloud-based workloads are disclosed. An example instructions cause programmable circuitry to at least cause transmission of anonymized information corresponding to a user device to a network device; and cause migration of a virtual execution environment from a first compute device to a second compute device based on a response from the network device, the virtual execution environment to execute at least a portion of a workload for an end user device.