Pseudo-Random Number Generation Using Server Entropy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Traditional pseudo-random number generation methods are vulnerable to attacks due to their deterministic nature and reliance on reproducible methods, especially with increased computing power and data availability, making them susceptible to exploitation.
Innovation Solution
The method involves transforming or convoluting independent server parameters, such as processor core temperature and DRAM voltage, to generate a unique seed for pseudo-random numbers, requiring access to multiple protected server parameters and transformation steps, thereby enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional pseudo-random number generation methods are used, then the generation process is simple and deterministic, but the security is vulnerable to attacks due to increased computing power and data availability
Solution Approach 1:
The patent segments the random number generation process into multiple independent components: collecting multiple entropy sources (server parameters like CPU temperature, fan speed, memory usage), transforming each parameter independently through cryptographic functions, and combining the transformed values. This segmentation ensures that compromising one parameter does not reveal the final random number, thereby improving security while maintaining a structured generation process.
Solution Approach 2:
The patent creates a composite security mechanism by combining multiple server parameters (CPU temperature, fan speed, memory usage, etc.) through cryptographic transformation. Each parameter acts as a distinct component, and their combination through XOR operations and hashing creates a composite entropy source that is significantly more secure than any single parameter alone, resolving the contradiction between security and complexity.
2Reliability
If multiple server parameters are collected and transformed, then the security is enhanced, but the generation time and computational resources increase
Solution Approach 1:
The patent implements preliminary action by continuously collecting and buffering server parameters in entropy pools before they are needed for random number generation. The system maintains pre-computed transformed values of multiple parameters, so when random numbers are required, the transformation and combination operations can be performed quickly using pre-prepared data, reducing generation time while maintaining enhanced security through multiple parameters.
Data Source
AI summary
A method, apparatus, and computer program product for improved pseudo-random number generation are provided. An example method includes receiving, by a computing device, a request for a pseudo-random number, selecting, by extraction circuitry of the computing device, a first parameter from a server parameter dataset, and obtaining a first value for the first parameter. The method further includes selecting, by the extraction circuitry, a second parameter, and obtaining a second value for the second parameter. The method includes generating, by transformation circuitry, the pseudo-random number based on the first value and the second value.