Pre-generating Diffie-Hellman Key Pairs for Storage Systems
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
High-latency issues arise in data storage systems due to the time-consuming generation of Diffie-Hellman key pairs when establishing secure communication channels, particularly in high-end systems with numerous simultaneous requests, leading to performance degradation.
Innovation Solution
Pre-generate Diffie-Hellman key pairs independently of request times and store them in a table for later use, reducing the latency associated with key pair generation and improving system performance by retrieving pre-generated keys during IKE sessions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If Diffie-Hellman key pairs are generated in real-time during IKE sessions, then security credentials are freshly created, but system latency increases and performance degrades
Solution Approach 1:
The patent pre-generates Diffie-Hellman key pairs and stores them in a table before they are actually needed. When an IKE session is initiated, the system retrieves pre-generated key pairs from the table instead of generating them in real-time, thereby eliminating the time-consuming key generation step while still providing secure credentials for the communication channel establishment.
2Speed
If Diffie-Hellman key pairs are pre-generated and stored in a table, then key retrieval speed increases, but system complexity increases
Solution Approach 1:
The system pre-generates and stores Diffie-Hellman key pairs in a dedicated table structure during system initialization or idle periods. This table organizes key pairs for quick retrieval by index or identifier, allowing the IKE session process to simply query and use pre-existing credentials rather than performing complex cryptographic key generation during active communication setup.
3Productivity
If pre-generated key pairs are used, then request queueing is eliminated, but key pair management overhead increases
Solution Approach 1:
The patent implements a pre-generation mechanism that creates multiple Diffie-Hellman key pairs in advance and stores them in an organized table structure. This allows the system to serve multiple IKE session requests simultaneously by retrieving pre-existing key pairs from the table without queuing, thereby improving throughput while the management overhead is confined to the initial generation and periodic replenishment of the key pool.
Data Source
AI summary
Secure credentials (e.g., Diffie Helman (DH) key pairs) may be generated independently of requests to establish communication channels between storage system ports (SSPs) and remote ports, such that secure credentials are pre-generated relative to the requests for which they are utilized to establish secure communication channels. For example, DH key pairs may be pre-generated, and each DH key pair stored in an entry of a DH key table. The number of DH keys to generate and store may be determined based on user input and/or the number of potential communication channels for the storage system. In response to a request to establish a communication channel, an IKE session may be executed, during which a pre-generated DH key pair may be obtained from the DH key table, from which symmetric for secure communication between the SSP and the remote port may be derived.