RPC Client Authentication Using Hardware Key Verification

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing virtual processor systems face security issues in identifying legitimate clients and preventing unauthorized access to remote processing units via RPC channels, leading to potential data tampering and hijacking.

Innovation Solution

Implementing a key slot and key system within the multi-client system, where a unique key is required for each client to establish an RPC channel, managed by a key manager and verified by a verifier to ensure legitimate access, and a blocker controls communication based on key verification.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If a virtual processor allows multiple clients to access remote processing units via RPC channels, then system versatility and client accessibility are improved, but security vulnerability increases due to inability to verify legitimate clients

Engineering Contradiction:

Improveclient accessibilityVSAvoidsecurity

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent implements preliminary authentication by requiring clients to present credentials before establishing RPC channels. The key manager pre-issues unique keys to authorized clients, and the verifier checks these keys before allowing access. This preliminary verification action prevents unauthorized access while maintaining system versatility.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent introduces intermediary components (key manager and verifier) that mediate between clients and remote processing units. These intermediaries authenticate clients and manage security credentials, separating the authentication function from the RPC communication function, thereby enhancing security without compromising client accessibility.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If hardware-assisted authentication mechanisms are implemented, then security and client verification capability are improved, but device complexity increases

Engineering Contradiction:

ImprovesecurityVSAvoidsystem structure

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent replaces software-based authentication mechanisms with hardware-assisted authentication. The key manager and verifier are implemented as hardware modules that provide cryptographic operations and authentication functions, reducing the complexity of software security implementations while enhancing security reliability.

Inventive Principle:

Principle #28Mechanics substitution (Replace mechanical system)

Solution Approach 2:

The hardware authentication modules serve multiple functions: key generation, key distribution, credential verification, and access control. By making these components multi-functional, the patent reduces overall system complexity despite adding hardware elements, as single components perform multiple security-related tasks.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentEP4258150B1Hardware-assisted client authentication for security enhancement of virtual device

Publication Date: 2025.12.31 MEDIATEK INC

Figure 1A~1B
Figure 2A~2B
Figure 3

AI summary

A device can include a remote protocol communication (RPC) slot configured to receive a message package generated from an entity during an RPC process, a processing unit configured to process the message package and return a result via the RPC slot to the entity, a blocker configured to be enabled to block or disabled to allow communication between the RPC slot and the processing unit, a key slot corresponding to the RPC slot and configured to receive a key from the entity, a key pool configured to store key slot and key pairs, and a verifier configured to disable the blocker when the key matches a key contained in one of the key slot and key pairs that contains the key slot and enable the blocker when the key does not match the key contained in any one of the key slot and key pairs that contains the key slot.