Multi-Node Secret Key Storage with Dynamic Migration

Solution Overview

Problem

Existing secret-key managing systems face safety hazards when secret keys are stored in internal memory, as they can be vulnerable to attacks that exploit their storage position.

Innovation Solution

A multi-node secret-key storing system is constructed, where secret-key data is stored in a random node and migrates among nodes according to a predetermined migration rule, making it difficult for attackers to determine the storage position of the secret-key data.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If the secret key is stored in the internal memory of the operating system for software-based encryption-decryption, then the ease of operation is improved, but the safety of the secret key deteriorates due to vulnerability to attacks

Engineering Contradiction:

Improveease of operationVSAvoidsafety of the secret key

Core Design Contradiction:

Ease of operationVSReliability

Solution Approach 1:

The patent divides the internal memory into multiple nodes (first node, second node, third node, etc.) and stores secret keys in different nodes based on their usage frequency. Frequently used keys are stored in the first node, while less frequently used keys are stored in subsequent nodes. This segmentation prevents attackers from accessing all keys at once and reduces the risk to individual keys stored in less secure nodes.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent implements dynamic migration of secret keys between memory nodes based on changing usage patterns. When a key's usage frequency changes, the system automatically migrates the key to a different node. This dynamic adjustment ensures that keys maintain appropriate security levels according to their operational context, balancing accessibility and protection.

Inventive Principle:

Principle #15Dynamics

2Speed

If the secret key is stored in a fixed location in the internal memory, then the speed of access is improved, but the safety of the secret key deteriorates due to predictability of storage position

Engineering Contradiction:

Improvespeed of accessVSAvoidsafety of the secret key

Core Design Contradiction:

SpeedVSReliability

Solution Approach 1:

The patent implements dynamic migration of secret keys between memory nodes based on changing usage patterns. When a key's usage frequency changes, the system automatically migrates the key to a different node. This dynamic adjustment ensures that keys maintain appropriate security levels according to their operational context, balancing accessibility and protection.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The patent changes the storage parameter from a fixed location to a variable location based on usage frequency. Keys are assigned to different nodes according to their access patterns, transforming the static storage address into a dynamic one. This parameter change maintains fast access for frequently used keys while obscuring storage positions of less frequently used keys.

Inventive Principle:

Principle #35Parameter changes

3Productivity

If the internal memory is used for storing secret keys, then the productivity is improved, but the safety of the secret key deteriorates due to low usage frequency protection

Engineering Contradiction:

ImproveproductivityVSAvoidsafety of the secret key

Core Design Contradiction:

ProductivityVSReliability

Solution Approach 1:

The patent divides the internal memory into multiple nodes (first node, second node, third node, etc.) and stores secret keys in different nodes based on their usage frequency. Frequently used keys are stored in the first node, while less frequently used keys are stored in subsequent nodes. This segmentation prevents attackers from accessing all keys at once and reduces the risk to individual keys stored in less secure nodes.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent applies different security qualities to different parts of the memory system. The first node provides high-speed access with standard security, while subsequent nodes provide progressively stronger security for less frequently used keys. This local quality differentiation allows the system to optimize both performance and security according to the specific needs of different keys.

Inventive Principle:

Principle #3Local quality

Data Source

PatentUS12289407B2Key management method, key management device and storage medium

Publication Date: 2025.04.29 INSPUR SUZHOU INTELLIGENT TECH CO LTD

AI summary

A secret-key managing method includes: constructing a multi-node secret-key storing system, in response to secret-key data required by an encryption-decryption service program being not in an operating state, storing the secret-key data into a random node in the multi-node secret-key storing system, and controlling the secret-key data to migrate among nodes in the multi-node secret-key storing system according to a predetermined migration rule, rather than directly storing in the internal memory corresponding to the encryption-decryption service program, the attacker cannot know the storage position of the secret-key data, and thus has difficulty in stealing the secret-key data with conventional attacking means. Moreover, when a secret-key invoking request based on the encryption-decryption service program is received, the storage position of the secret-key data at the current moment can be determined based on the predetermined migration rule, to feed back the secret-key invoking request.