Proxy Key Mapping for Multi-Vendor Hardware Security Servers

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Hardware security servers from different vendors have varying capabilities and application programming interfaces (APIs, requiring custom libraries for each, which complicates management and integration.

Innovation Solution

A network traffic manager apparatus acts as a proxy, using virtual key tables to map to different back-end keys for multiple hardware security servers, providing a unified interface and managing connections efficiently.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If custom libraries are installed for each hardware security server to support different vendor APIs, then compatibility with various hardware security servers is improved, but device complexity and ease of operation deteriorate

Engineering Contradiction:

Improvecompatibility with various hardware security serversVSAvoidcomplexity of managing multiple custom libraries

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent introduces a proxy library as an intermediary component between the client application and multiple hardware security servers. This proxy library maintains a unified interface and internally manages connections to different vendor-specific hardware security servers, eliminating the need for clients to directly install and manage multiple custom libraries while preserving compatibility with various servers

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The proxy library is designed with universal functionality to handle multiple hardware security server vendors through a single unified interface. It implements adapter patterns that allow one library to serve multiple purposes by translating between the unified interface and various vendor-specific APIs, reducing the number of libraries needed

Inventive Principle:

Principle #6Universality (Multi-functionality)

2Adaptability or versatility

Engineering Contradiction:

Improvecompatibility with various hardware security serversVSAvoidease of managing and integrating hardware security servers

Core Design Contradiction:

Adaptability or versatilityVSEase of operation

Solution Approach 1:

The proxy library serves as an intermediary that abstracts away the complexity of managing multiple vendor-specific libraries. Users interact with a single unified interface while the proxy handles the complexity of routing requests to appropriate hardware security servers, significantly improving ease of operation

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The proxy library creates a simplified copy or abstraction of the hardware security server interface that users interact with. This copy presents a unified, vendor-agnostic API while the actual vendor-specific implementations remain hidden, making the system easier to operate

Inventive Principle:

Principle #26Copying

Data Source

PatentUS12512969B2Methods for managing hardware security servers and devices thereof

Publication Date: 2025.12.30 F5 NETWORKS INC

AI summary

Methods, non-transitory computer readable media, network traffic manager apparatuses, and systems that assist with managing hardware security servers includes receiving a request from a client. The request can comprise of a unique numerical handle and a command for a hardware security server. The unique numerical handle can be generated as a response to a previous request from the client. It can further include searching for a key handle mapped to the unique numerical handle and hardware security server in memory. The method can also include sending the request to the hardware security server with the key handle when the key handle is retrieved from memory during the search and sending a response received from the hardware security server to the client. The response can be received as a result of sending the request to the hardware security server.