Reusable Nonce Cryptoprocessor Scaling
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Cryptoprocessor hardware is limited in scaling to handle large numbers of network peers due to the need for unique nonces for each transaction, leading to inefficiencies in attestation processes.
Innovation Solution
A centralized Extensible Authentication Protocol (EAP) server generates a reusable nonce with an active time interval, allowing the same nonce to be used across multiple client devices within that interval, increasing scalability by eliminating the need for unique nonce generation for each transaction.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If unique nonces are generated for each transaction to ensure security, then security is improved, but the scaling capability deteriorates
Solution Approach 1:
The patent applies universality by allowing a single nonce to serve multiple transactions within its active time interval. Instead of requiring a unique nonce for each transaction, the same nonce can be reused across multiple attestation requests from different client devices or the same device, thereby improving scaling capability while maintaining security through the time-bound validity and cryptographic binding of the nonce to specific hardware state.
2Reliability
If unique nonces are generated for each transaction, then replay attacks are prevented, but processing overhead increases
Solution Approach 1:
The patent implements periodic action by establishing nonces with specific active time intervals rather than requiring continuous unique nonce generation. The nonce remains valid and reusable throughout its active period, eliminating the need for frequent unique nonce generation and verification. This time-based periodic validity reduces processing overhead while maintaining replay attack prevention through the time-bound constraint and cryptographic binding to hardware state.
3Reliability
If hardware-based cryptoprocessor authentication is implemented, then trustworthiness verification is improved, but the number of concurrent peers that can be authenticated is limited
Solution Approach 1:
The patent applies universality by enabling a single cryptoprocessor to handle multiple authentication requests concurrently using the same reusable nonce within its active time interval. The nonce is cryptographically bound to the hardware state and time, allowing it to verify trustworthiness across multiple peers without requiring separate unique nonces for each interaction, thereby increasing the number of concurrent peers that can be authenticated.
Solution Approach 2:
The patent changes the parameter of nonce validity from transaction-specific to time-interval-specific. By introducing an active time interval parameter, the nonce transitions from being valid only for a single transaction to being valid for multiple transactions within the time window. This parameter change allows the cryptoprocessor to efficiently verify trustworthiness across multiple concurrent peers without generating unique nonces for each interaction.
Data Source
AI summary
The present disclosure is directed to systems and methods to address cryptoprocessor hardware scaling limitations, the method including the steps of establishing a communication path between a centralized server and a client device; generating, by the centralized server, a nonce for transmission to the client device, wherein the nonce is associated with an active time interval and corresponds to one of an existing nonce or a new nonce; transmitting the nonce to the client device; receiving a signed attestation result that includes the nonce from the client device, wherein, the signed attestation result comprises a previously-generated signed attestation result if the nonce corresponds to the existing nonce previously received by the client device; and the signed attestation result comprises a new signed attestation result if the nonce corresponds to the existing nonce newly received by the client device or corresponds to the new nonce.