Security Coprocessor Handshake for Fewer Crypto API Calls
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional systems require multiple API calls to specialized hardware for authentication and encryption key generation during secure communication sessions, leading to inefficient handshake and encryption processes.
Innovation Solution
A security module that integrates hardware crypto accelerators to perform authentication and key generation with one or two API calls, utilizing dedicated hardware components for encryption and decryption operations.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple API calls are made to specialized hardware for authentication and encryption key generation, then security functionality is achieved, but system efficiency and processing speed deteriorate
Solution Approach 1:
The patent combines authentication and encryption key generation operations into a single integrated hardware module (security coprocessor). This merging eliminates the need for multiple separate API calls to different hardware components, reducing communication overhead and improving overall processing efficiency while maintaining security functionality.
Solution Approach 2:
The security coprocessor is designed as a universal hardware component that can perform multiple cryptographic functions including authentication, key generation, and encryption operations. This multi-functional design allows a single API call to trigger a sequence of operations that would otherwise require multiple separate hardware interactions, thereby improving productivity without compromising security.
2Reliability
If multiple API calls are made to specialized hardware, then comprehensive security operations are performed, but the number of processing steps and system complexity increase
Solution Approach 1:
The patent merges authentication and key generation functions into a single hardware security module, reducing the number of API calls from multiple separate interactions to a unified process. This consolidation simplifies the system architecture by eliminating redundant communication interfaces while maintaining comprehensive security operations within the integrated module.
3Reliability
If conventional handshake protocols are used with multiple API calls, then security is established, but communication establishment time increases
Solution Approach 1:
The security coprocessor performs authentication and key generation operations in parallel and pre-coordinates these tasks through a unified interface. By preparing security credentials and establishing cryptographic parameters through a single integrated call rather than sequential operations, the system reduces handshake establishment time while ensuring security requirements are met.
Solution Approach 2:
The integrated security module enables continuous processing of authentication and encryption operations without interruption or context switching between multiple hardware components. This continuous action eliminates the time losses associated with multiple API call overheads and inter-component communication delays, accelerating secure session establishment.
Data Source
AI summary
Methods and systems for executing a communication protocol are provided. One method includes receiving, by a security module of a first computing device, an API call to authenticate a certificate received from a second computing device to establish a communication session between the computing devices; selecting, by the security module, an authentication module to authenticate the certificate; generating, by an encryption module of the security module, a shared secret key for the communication session based on a private key of the first computing device and a public key of the second computing device; encrypting, by the encryption module, the shared secret key using an algorithm negotiated between the first computing device and the second computing device; generating, by the security module, an encrypted message for the second computing device; and transmitting, by the first computing device, the encrypted shared secret key and message to the second computing device.