Service Processor Runtime Key Generation Without Storage

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Service processors in server management systems face security risks as encryption keys stored on them can be retrieved by hackers, compromising encrypted data.

Innovation Solution

A service processor generates a runtime encryption key based on unique device data and logic, without storing the key, using a key manager and encryption component to encrypt and decrypt data using established algorithms like AES.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the encryption key is stored on the management node, then the encryption operation can be performed, but the security is compromised as hackers can retrieve the key

Engineering Contradiction:

Improveencryption securityVSAvoidkey retrieval by hackers

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The encryption key is extracted from the storage device and generated dynamically at runtime based on unique device data and logic. The key is never stored on the management node, eliminating the harmful factor of key retrieval by hackers while maintaining encryption functionality.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

The encryption key is generated dynamically at runtime rather than being statically stored. The key is derived from unique device data and logic, ensuring it is different each time and cannot be retrieved from storage, thereby enhancing security while maintaining operational reliability.

Inventive Principle:

Principle #15Dynamics

2Reliability

If the encryption key is generated at runtime without storage, then security is enhanced, but the system complexity increases due to key generation logic

Engineering Contradiction:

Improveencryption securityVSAvoidkey generation mechanism

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The management node generates its own encryption key at runtime using its unique device data and internal logic. The system serves itself by deriving the key from inherent device characteristics, eliminating the need for external key management while maintaining security and avoiding excessive complexity.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The encryption key is generated by changing parameters based on unique device data and logic at runtime. This dynamic parameter generation ensures the key is different each time without requiring storage, balancing security enhancement with manageable system complexity.

Inventive Principle:

Principle #35Parameter changes

Data Source

PatentUS10425412B2Dynamic generation of key for encrypting data in management node

Publication Date: 2019.09.24 AMERICAN MEGATRENDS

AI summary

In an aspect of the disclosure, a method, a computer-readable medium, and an apparatus are provided. The apparatus may be a service processor. The service processor generates a first encryption key at runtime based on unique device data of the service processor and a first logic. The service processor refrains from storing the first encryption key in the storage device. The service processor further encrypts target data based on the encryption key and an encryption algorithm to obtain first encrypted data. The service processor then stores the first encrypted data in a storage device of the service processor.