Service Chain Token Verification for Atomicity
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing service-oriented architectures face challenges in adapting service chains dynamically and ensuring the atomicity of transactions across services with varying security levels, as current solutions do not allow for real-time verification of data passage through specific devices and compliance with uniform security rules.
Innovation Solution
A method that involves receiving a routing token, verifying legitimacy, implementing a service function, generating a chaining token, and transmitting it to the next service in the chain, ensuring that any alteration in the service chain results in service stopping or denial, thus maintaining transaction atomicity and security across services with different security levels.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traffic engineering solutions such as segment routing or service function chaining are implemented to ensure reliable data traffic forwarding, then the reliability of data transmission is improved, but the ability to adapt the service chain dynamically (adding, replacing, or modifying services) deteriorates
Solution Approach 1:
The patent implements dynamic service chain adaptation by allowing services to be added, removed, or modified during runtime through service chain update messages. The network device maintains both original and updated service chain configurations, enabling flexible reconfiguration while preserving transaction reliability through controlled transition mechanisms.
2Reliability
If existing service chain approaches are used to ensure data transmission reliability, then the forwarding reliability is improved, but the ability to provide evidence that traffic actually passed through a given device and service deteriorates
Solution Approach 1:
The patent implements feedback mechanisms through chaining tokens that contain cryptographic evidence of service passage. Each service in the chain generates and passes along chaining tokens that verify the actual execution of services, providing auditable proof of traffic flow through the service chain while maintaining forwarding reliability.
3Adaptability or versatility
If services are managed by different actors with varying security rules, then the flexibility of service management is improved, but the complexity of ensuring uniform security compliance and monitoring deteriorates
Solution Approach 1:
The patent implements a universal security framework using cryptographic tokens (routing tokens and chaining tokens) that work across services managed by different actors. The token-based authentication and verification mechanism provides uniform security compliance while allowing diverse service providers to maintain their own security policies, reducing the complexity of cross-actor security coordination.
4Reliability
If a service chain is implemented with strict security verification at each step, then the security and atomicity of transactions are improved, but the complexity of coordinating cooperation between multiple actors deteriorates
Solution Approach 1:
The patent implements preliminary action by establishing security credentials and routing tokens before service execution. The routing token contains pre-configured security information and service chain metadata that enable automatic verification at each service step, reducing the need for complex real-time coordination between multiple actors while maintaining transaction atomicity.
Data Source
AI summary
A method is described for implementing a current service of a chain of n services, the method including receiving, from the service preceding the current service in the chain, a first routing token comprising message routing data between the services in the chain, and verifying that the current service is a legitimate recipient of the first routing token. After implementing a function of the current service, the method also includes generating a current chaining token from a data of evidence of a passage through the current service, and transmitting, to the service following the current service in the chain, the current chaining token and a second routing token determined from the first routing token.