Multi-Processor Secure Data Communication via Processor ID Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional data communication protocols, such as SSL/TLS, are insufficient for secure communication between computers with multiple processors, as they rely on a single processor representative, failing to ensure mutual authentication and secure data exchange in multi-processor systems.

Innovation Solution

A data communication method where a computer with multiple processors identifies and authenticates specific processors using processor IDs and public key certificates, enabling secure data processing and transmission by restricting processing based on the content of the public key certificates.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional SSL/TLS protocol is used for data communication, then communication between single-processor computers is secure, but secure communication cannot be achieved in multi-processor systems

Engineering Contradiction:
Improvecommunication securityVSAvoidcompatibility with multi-processor systems
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent segments the communication authentication process by introducing processor-specific identification. Each processor within a multi-processor system is uniquely identified and authenticated individually, allowing the system to adapt to both single-processor and multi-processor configurations while maintaining security

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent adds a new dimension to the communication protocol by incorporating processor identification layers. This dimensional extension allows the protocol to handle hierarchical structures (multiple processors within a computer) while maintaining compatibility with existing communication frameworks

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

2Device complexity

If one processor serves as representative for the whole computer, then communication protocol is simple, but security and reliability are insufficient in multi-processor systems

Engineering Contradiction:
Improvecommunication protocol complexityVSAvoidauthentication reliability
Core Design Contradiction:
Device complexityVSReliability

Solution Approach 1:

The authentication process is segmented into processor-level and computer-level components. Each processor is individually authenticated while the computer作为一个整体 is also authenticated, creating a hierarchical authentication structure that enhances reliability without excessive complexity

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The communication protocol is designed to be universal, working for both single-processor and multi-processor systems. The same protocol framework handles both cases, with the processor identification mechanism automatically adapting to the system configuration

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS8732471B2Data communication method, computer and information storing medium
Publication Date: 2014.05.20 SONY INTERACTIVE ENTERTAINMENT LLC
  • US8732471B2 patent drawing
  • US8732471B2 patent drawing
  • US8732471B2 patent drawing

AI summary

A computer including at least two processors is used to preferably perform a secure data communication. Data containing a processor ID identifying one of the at least two processors provided for a first computer (computer 31) is transmitted from the first computer to a second computer (a node at the other party) (S91, S92). The second computer returns data containing the processor ID contained in the data transmitted in S91 and S92 and a public key certificate relating to the second computer. The first computer receives the data returned from the second computer, acquires, from the received data, the processor ID contained therein, and causes a processor (SPE1), which is identified by the processor ID, to process the received data. At this moment, the processing of the data is restricted according to a content of the public key certificate contained in the received data.