Proof-of-Work Mechanism for Network Load Management

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Systems accessible through networks, such as the Internet, are susceptible to overload due to concurrent access attempts, which can lead to unresponsiveness or complete system failure, often caused by sudden popularity or malicious denial of service (DoS) attacks, making it difficult to manage system load effectively.

Innovation Solution

Implementing a proof of work mechanism where clients must complete computationally challenging tasks, such as hash functions or prime factorization, before their requests are processed, making DoS attacks more difficult to sustain by requiring significant computing resources, and allowing the system to verify the completion of these tasks efficiently.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If the system allows concurrent access attempts without restrictions, then ease of operation is improved, but system reliability deteriorates due to overload and DoS attacks

Engineering Contradiction:
ImproveaccessibilityVSAvoidsystem stability
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The system performs preliminary actions by requiring clients to complete proof-of-work challenges before processing their requests. This preliminary computational task verifies client legitimacy in advance, preventing overload and DoS attacks before they can impact system stability while maintaining accessibility for legitimate users

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The proof-of-work mechanism acts as an intermediary between the client and the system. It introduces a verification layer that filters malicious requests while allowing legitimate ones through, resolving the contradiction between ease of access and system reliability by mediating the interaction through computational verification

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If the system requires proof of work from clients, then system reliability is improved by preventing DoS attacks, but device complexity increases due to the additional verification mechanism

Engineering Contradiction:
Improvesystem stabilityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system implements self-service by having clients perform their own proof-of-work computations and submit the results for verification. This shifts the computational burden from the server to the client, maintaining system reliability while minimizing the complexity of server-side verification infrastructure

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The proof-of-work challenges use inexpensive, easily generated computational puzzles that are discarded after verification. These temporary computational objects provide security without requiring complex, persistent infrastructure, thus improving reliability while limiting complexity growth

Inventive Principle:
Principle #27Cheap short-living objects (Disposable)

3Productivity

If the system processes all requests without filtering, then productivity is improved by handling more traffic, but loss of energy increases due to processing malicious requests

Engineering Contradiction:
Improverequest handling capacityVSAvoidcomputational energy
Core Design Contradiction:
ProductivityVSLoss of energy

Solution Approach 1:

The system extracts and filters out malicious requests through the proof-of-work verification mechanism before they can consume system resources. By separating legitimate from malicious traffic at the entry point, the system maintains productivity for valid requests while eliminating energy waste on attack traffic

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS9906552B1Managing system load
Publication Date: 2018.02.27 AMAZON TECH INC
  • US9906552B1 patent drawing
  • US9906552B1 patent drawing
  • US9906552B1 patent drawing

AI summary

System load, such as load caused by a denial of service attack, is managed by requiring those requesting access to the system to provide proof of work. A system receives, from a requestor, a request for access to the system. Before the request can be processed, the system provides a challenge to the requestor. The requestor obtains a solution to the challenge and provides proof of having obtained the solution. The system verifies the correctness of the solution and, if the correct solution is verified, the system services the request.