SCP Authentication Attestation for Faster Secure Channel Setup

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Conventional secure communication systems between server devices require time-consuming and duplicative authentication operations between BMC subsystems, limiting efficiency.

Innovation Solution

A distributed secure communication system utilizing a System Control Processor (SCP) subsystem to authenticate and establish secure communication channels, allowing subsequent SCP subsystems to attest to each other's authentication without redundant operations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional secure communication systems perform authentication operations between BMC subsystems, then security is ensured, but time consumption and operational efficiency deteriorate due to duplicative authentication

Engineering Contradiction:

ImprovesecurityVSAvoidauthentication time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary authentication between the first SCP subsystem and second SCP subsystem before actual communication occurs. The second SCP subsystem stores authentication results and uses them for subsequent communications, avoiding repeated authentication operations and reducing time consumption while maintaining security.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The authentication result obtained by the second SCP subsystem from the first SCP subsystem is made universally applicable. The second SCP subsystem can use this single authentication result to establish secure communication channels with multiple third SCP subsystems, eliminating the need for each subsystem to perform separate authentication operations.

Inventive Principle:

Principle #6Universality (Multi-functionality)

2Reliability

If authentication operations are performed between all SCP subsystems, then security is maintained, but system complexity and operational overhead increase due to redundant operations

Engineering Contradiction:

ImprovesecurityVSAvoidauthentication operation complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts the authentication function from each individual SCP subsystem and centralizes it in the second SCP subsystem. Instead of every subsystem performing authentication independently, the second SCP subsystem acts as an intermediary that performs authentication once and distributes the results, simplifying the overall system architecture.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The second SCP subsystem serves as an intermediary between the first SCP subsystem and third SCP subsystems. It receives authentication results from the first subsystem and distributes them to third subsystems, eliminating the need for direct authentication operations between all pairs of subsystems and reducing operational complexity.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Reliability

If each SCP subsystem performs independent authentication, then security is ensured, but productivity decreases due to time-consuming authentication operations

Engineering Contradiction:

ImprovesecurityVSAvoidsecure network establishment speed

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The authentication result is copied and distributed by the second SCP subsystem to multiple third SCP subsystems. Instead of each third subsystem performing its own authentication with the first subsystem, they receive copied authentication results, significantly accelerating the establishment of secure communication channels.

Inventive Principle:

Principle #26Copying

Data Source

PatentEP4233274B1Distributed secure communication system

Publication Date: 2025.11.26 DELL PROD LP

Figure 1
Figure 2
Figure 3A

AI summary

A distributed secure communication system includes a first System Control Processor (SCP) subsystem coupled to second and third SCP subsystems via a network. The first SCP subsystem identifies the second SCP subsystem, signs a first SCP authentication communication with a first private key to provide a first signed SCP authentication communication that it transmits to the second SCP subsystem. The first SCP subsystem receives a second signed SCP authentication communication from the second SCP subsystem, authenticates the second signed SCP authentication communication using a second public key associated with the second SCP subsystem and, in response, establishes a first secure communication channel with the second SCP subsystem. The first SCP subsystem then receives an attestation of an authentication of the third SCP subsystem from the second SCP subsystem and, in response, establishes a second secure communication channel with the third SCP subsystem without the transmission of signed SCP authentication communications.