Secure P2P Cache Sharing via Hash Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current solutions for maximizing WAN utilization are expensive and require administrative support, and they do not operate effectively in environments where end-to-end security is necessary.
Innovation Solution
A method for secure peer-to-peer cache sharing that utilizes a cache manager program operating below the network stack, which securely caches data by obtaining hash values and broadcasting requests to peer computers, allowing data retrieval from caching peers or the server while ensuring access rights, without the need for costly appliances or additional administrative support.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of energy
If network appliances are deployed at each branch office to maximize WAN utilization, then WAN link costs are reduced, but device cost and administrative complexity increase
Solution Approach 1:
The system enables peer computers to automatically perform caching operations without requiring administrative supervision. The cache manager program executes autonomously, managing cache operations, hash value verification, and data retrieval processes without human intervention, thereby eliminating the need for administrative support while reducing WAN costs
Solution Approach 2:
Instead of deploying expensive network appliances at each branch office, the invention creates software-based cache manager programs that replicate caching functionality across peer computers. This software copy approach eliminates hardware costs and reduces administrative complexity while achieving the same WAN optimization goals
2Productivity
If current caching solutions are implemented, then WAN utilization is improved, but security requirements cannot be met in end-to-end secure environments
Solution Approach 1:
The cache manager program acts as an intermediary between application protocols and the network stack, intercepting data requests and routing them through secure hash value verification processes. This intermediary layer ensures that caching operations maintain end-to-end security by verifying data integrity through hash values before allowing cache operations, thereby achieving both WAN utilization improvement and security compliance
Solution Approach 2:
The system changes the operational parameters of caching by operating below the application layer in the network stack rather than at the application layer. This parameter change in operational level allows the caching mechanism to function securely without requiring application program modifications, enabling WAN utilization improvement while maintaining security in end-to-end secure environments
3Productivity
If caching is performed at the application layer, then data can be cached, but costly network appliances and application program modifications are required
Solution Approach 1:
The invention moves the caching operation from the application layer dimension to the network stack dimension, specifically operating below the application layer. This dimensional shift allows caching to be performed using standard network infrastructure without requiring expensive network appliances or application program modifications, achieving caching capability while reducing hardware and software requirements
Data Source
Figure 1
Figure 2
Figure 3A
AI summary
A system, apparatus, method, and computer-readable medium are provided for secure P2P caching. In one method, a requesting peer obtains a hash of requested data from a server. The requesting peer then transmits request for the data to other peers. The request proves that the requesting peer has the hash. If a caching peer has the data, it generates a reply to the request that proves that it has the requested data. If the requesting peer receives a reply from a caching peer, the requesting peer establishes a connection to the caching peer and retrieves the data from the caching peer. If the requesting peer does not receive a reply to the request from any other peer, the requesting peer establishes a connection to the server and retrieves the data from the server. The requesting peer stores the data for use in responding to requests from other peers.