Cooperative Session Orchestration via Puzzle-Based Token Authentication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current IoT network environments face challenges in establishing secure and reliable sessions between resourceful and resourceless devices without dedicated trustee nodes, particularly in heterogeneous networks where trust among devices is not inherently blind, and existing methods fail to efficiently allocate resources for tasks based on real-time availability and minimal computational cost.

Innovation Solution

A computer-implemented method that pre-distributes unique tokens to network nodes, creates individual puzzles for potential supplier nodes, and identifies candidate suppliers based on their solutions to these puzzles, enabling secure and efficient session establishment between delegate and supplier nodes with minimal computational overhead, leveraging cryptographic techniques to authenticate and verify node trust without relying on dedicated trustee nodes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If existing IoT orchestrations use network communication to establish sessions between resourceful and resourceless devices, then session establishment is possible, but security and reliability are compromised in heterogeneous networks without dedicated trustee nodes

Engineering Contradiction:
Improvesession establishment reliabilityVSAvoidnetwork architecture complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements self-service through autonomous puzzle-solving at supplier nodes. Each supplier node independently solves cryptographic puzzles using pre-distributed tokens without requiring centralized verification or trustee nodes. This self-service mechanism establishes secure sessions while reducing network architecture complexity by eliminating the need for dedicated trustee infrastructure.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The patent introduces cryptographic puzzles as an intermediary mechanism between delegate and supplier nodes. These puzzles serve as a trust-mediated exchange where the puzzle solution acts as proof of resource availability and authenticity, enabling secure session establishment without direct trust relationships or complex trustee architectures.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If traditional session establishment methods are used in heterogeneous IoT networks, then communication between diverse devices is possible, but computational overhead and resource consumption increase

Engineering Contradiction:
Improvedevice compatibilityVSAvoidcomputational energy consumption
Core Design Contradiction:
Adaptability or versatilityVSUse of energy by moving object

Solution Approach 1:

The patent applies partial action by requiring only minimal cryptographic puzzle-solving at supplier nodes rather than full authentication protocols. The pre-distributed tokens enable suppliers to perform lightweight puzzle solutions instead of computationally intensive traditional authentication, reducing energy consumption while maintaining device compatibility across heterogeneous IoT networks.

Inventive Principle:
Principle #16Partial or excessive action

3Productivity

If resource allocation is based on real-time availability in dynamic IoT networks, then task completion efficiency improves, but session establishment time and complexity increase

Engineering Contradiction:
Improvetask completion efficiencyVSAvoidsession establishment time
Core Design Contradiction:
ProductivityVSLoss of time

Solution Approach 1:

The patent implements preliminary action through pre-distribution of cryptographic tokens to supplier nodes before task execution. This pre-positioning of authentication credentials allows suppliers to immediately solve puzzles and establish sessions when tasks are assigned, eliminating lengthy authentication delays and enabling real-time resource allocation based on availability.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS11962703B2Cooperative session orchestration
Publication Date: 2024.04.16 INTERNATIONAL BUSINESS MACHINE CORPORATION
  • US11962703B2 patent drawing
  • US11962703B2 patent drawing
  • US11962703B2 patent drawing

AI summary

Cooperative session orchestration includes devising a crypt for pre-distribution of tokens, distributing the tokens to member nodes of the network, based on a request from a delegate node of the network for brokerage of a session between the delegate node and a supplier node of the network, creating and sending, for each of a plurality of potential supplier nodes of the network, a respective individual puzzle, receiving, from each of one or more potential supplier nodes of the plurality of potential supplier nodes, a respective result obtained by the potential supplier node from solving the individual puzzle using the token distributed to the potential supplier, identifying, based on the receiving, candidate supplier node(s) of the one or more potential supplier nodes as a potential supplier for the session with the delegate node, and identifying to the delegate node the candidate supplier node(s) for the session with the delegate node.