RPC Key Slot Authentication With Blocker-Gated Client Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing remote procedure call (RPC) processes in multi-client systems face security issues, such as clients sending message packages to incorrect remote machines or impostors, and servers accepting packages from illegitimate clients, leading to data tampering and hijacking.
Innovation Solution
Implementing a key slot and key management system within the multi-client system, where a key is inserted into a key slot for verification, and a blocker is enabled or disabled based on key matching, ensuring only legitimate clients can access processing units.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a key verification system is implemented to prevent unauthorized access, then security is improved, but device complexity increases
Solution Approach 1:
The patent introduces a key slot as an intermediary component between the RPC slot and processing unit. This key slot receives and verifies authentication keys before allowing message packages to pass through, thereby improving security without significantly complicating the overall system architecture. The key slot acts as a dedicated mediator that handles authentication separately from the main processing path.
Solution Approach 2:
The system is segmented into distinct functional components: RPC slot for message reception, key slot for authentication, blocker for access control, and processing unit for message handling. This segmentation allows each component to perform its specific function independently, improving security through specialized authentication while maintaining manageable system complexity through modular design.
2Reliability
If a blocker is introduced to control access between RPC slot and processing unit, then security is improved, but device complexity increases
Solution Approach 1:
The blocker is configured to be enabled or disabled based on key verification results before messages are processed. This preliminary action of pre-verifying authentication status and controlling access in advance prevents unauthorized messages from reaching the processing unit, improving security while keeping the blocker's control logic simple and straightforward.
3Reliability
If key verification is performed for each message package, then data integrity is improved, but processing time increases
Solution Approach 1:
Authentication keys are verified in advance before messages are processed, and the blocker is configured accordingly. This preliminary authentication action ensures that only authorized communication channels are activated, maintaining data integrity while avoiding repeated verification overhead for each subsequent message on authenticated channels.
Data Source
AI summary
A device can include a remote protocol communication (RPC) slot configured to receive a message package generated from an entity during an RPC process, a processing unit configured to process the message package and return a result via the RPC slot to the entity, a blocker configured to be enabled to block or disabled to allow communication between the RPC slot and the processing unit, a key slot corresponding to the RPC slot and configured to receive a key from the entity, a key pool configured to store key slot and key pairs, and a verifier configured to disable the blocker when the key matches a key contained in one of the key slot and key pairs that contains the key slot and enable the blocker when the key does not match the key contained in any one of the key slot and key pairs that contains the key slot.