Secure Multi-Tenant Message Routing via Encrypted ID Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In multi-tenant systems, secure message routing is challenging due to the risk of customer ID manipulation and encryption key compromise, which can lead to legal risks and data breaches, especially in industries like healthcare and anti-trust sectors.
Innovation Solution
A method using public key encryption to securely route messages by encrypting tenant IDs with a public key and corresponding private key, storing the encrypted ID and public key on both devices and servers, and verifying message directionality by comparing pre-calculated data, thereby preventing intermediate decryption and ensuring message confidentiality.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If message routing is performed through shared data entry points with content inspection, then correct customer data routing is achieved, but message security and confidentiality are compromised
Solution Approach 1:
The patent extracts the routing verification function from the message content inspection process. Instead of inspecting message contents to verify routing, the system uses extracted routing information (customer ID, tenant ID) that is separately verified through cryptographic comparison at the data store level, eliminating the need for content inspection while maintaining routing accuracy
Solution Approach 2:
The patent introduces cryptographic hash values as an intermediary mechanism. The routing verification is performed by comparing hash values of routing information rather than directly inspecting message contents. This intermediary approach allows accurate routing verification while maintaining message confidentiality and security
2Object-affected harmful factors
If encryption is used throughout message transmission, then message confidentiality is maintained, but computational intensity increases
Solution Approach 1:
The patent applies different cryptographic operations at different locations in the system. Hash functions are applied locally at the message routing level for verification, while full encryption is only applied to the message payload. This local differentiation reduces overall computational load while maintaining security where needed
Solution Approach 2:
The patent performs preliminary cryptographic preparation by pre-computing and storing hash values of routing information and encryption keys in a lookup table. This preliminary action allows for efficient O(1) verification during message routing without repeating computationally intensive operations, significantly reducing real-time computational load
3Use of energy by moving object
If symmetric encryption is used for message encryption, then computational efficiency is improved, but encryption key compromise risk increases
Solution Approach 1:
The patent introduces asymmetry into the cryptographic system by using different cryptographic mechanisms for different purposes: symmetric encryption (AES) for message payload encryption where efficiency is needed, and cryptographic hash functions for routing verification where security against key compromise is critical. This asymmetric approach allows the system to avoid the key compromise vulnerability of symmetric encryption in the routing verification path
Data Source
AI summary
A method for message routing in a multi-tenant system includes encrypting an ID of a tenant with a public key that is generated for the tenant together with a corresponding private key; storing a set of the encrypted ID and the public key in both a device and a server of the multi-tenant system; transmitting from the device to the server a message comprising the set of the encrypted ID and the public key stored in the device; and detecting whether the message is directed toward a data store for the tenant by comparing the set comprised in the message and the set stored in the server.