Shared-Key Calculation Result Distribution for Multiple Destinations
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In a cloud-based FPGA service, securely distributing calculation results to multiple destination devices while managing multiple common keys for encryption increases processing load and complexity.
Innovation Solution
A calculation result distribution device that generates a common key shared by multiple destination devices, encrypts this key for each device using their public key, and distributes it. The device then encrypts the calculation result using the common key and distributes it to the destination devices for secure and efficient delivery.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If multiple common keys are prepared for multiple destination devices, then security is improved, but processing load and device complexity increase
Solution Approach 1:
The patent merges multiple destination devices into a single logical group and uses a single common key for encryption. The management server distributes this single common key to multiple destination devices, eliminating the need to manage separate keys for each device while maintaining security.
Solution Approach 2:
The common key serves multiple functions simultaneously: it encrypts calculation results for distribution to multiple destination devices, and each destination device uses it to decrypt and verify results. This universal key replaces multiple device-specific keys.
2Reliability
If multiple common keys are prepared for multiple destination devices, then individual security verification is improved, but processing efficiency deteriorates
Solution Approach 1:
The patent combines multiple signature verification operations into a single verification process. The management server verifies the signature of the common key once, and this verification result is reused for all destination devices, eliminating redundant verification operations.
Solution Approach 2:
The management server performs signature verification of the common key in advance, before distributing it to multiple destination devices. This preliminary verification avoids the need for each destination device to independently verify the signature, reducing overall processing load.
3Reliability
If encryption is performed separately for each destination device, then data security is improved, but processing load on FPGA increases
Solution Approach 1:
The patent extracts the encryption operation from the FPGA and relocates it to the management server. The FPGA only performs the core calculation task, while the management server handles key management and encryption, reducing the FPGA's processing load.
Solution Approach 2:
The management server acts as an intermediary between the FPGA and destination devices. It receives calculation results from the FPGA, encrypts them using the common key, and distributes them to destination devices, shielding the FPGA from complex key management and encryption operations.
Data Source
AI summary
A management server (100) includes a common key distribution unit (113) that generates a common key shared by a plurality of output destination servers (201), generates first encrypted data obtained by encrypting the common key for each output destination server (201) by using a public key paired with a secret key individually possessed by each output destination server (201), and distributes the generated first encrypted data to each output destination server (201), thereby causing each output destination server (201) to decrypt the common key; and a data output unit (114) that distributes second encrypted data obtained by encrypting an output value by using the common key to each output destination server (201), thereby causing each output destination server (201) to decrypt the output value.