Split Counter Epoch Tracking for Low-Latency Replay Protection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure memory access technologies face processing bottlenecks due to sporadic, avalanche-type computations caused by epoch changes in split counters, leading to increased latency in memory operations.
Innovation Solution
Implement dynamic epoch tracking with split counters, where counters associated with different epochs are updated uniformly over time, reducing the frequency and impact of epoch changes by advancing a pointer through the sequence of counters based on specific rules to minimize recomputation and re-encryption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If epoch changes are implemented in split counters for cryptographic protection, then security against replay attacks is improved, but processing latency increases due to sporadic avalanche-type computations
Solution Approach 1:
The patent implements dynamic epoch tracking where the system adapts the epoch change behavior based on operational conditions. The counter system dynamically adjusts between maintaining strict epoch boundaries for security and allowing more flexible transitions to reduce computational overhead, optimizing the balance between security and performance
Solution Approach 2:
The system performs preliminary checks and preparations before epoch changes occur by tracking counter values and predicting when epoch transitions will be necessary. This allows the system to pre-compute or pre-prepare cryptographic operations, reducing the sudden computational burden that causes avalanche-type latency spikes
2Reliability
If split counters are used with epoch tracking, then cryptographic security is improved, but system complexity increases due to pointer management and epoch tracking mechanisms
Solution Approach 1:
The counter system is segmented into multiple independent counter instances, each capable of operating within its own epoch boundaries. This segmentation allows the complex epoch tracking logic to be distributed across multiple simple counter units rather than centralized in one complex structure, reducing overall system complexity while maintaining security
Solution Approach 2:
The patent introduces an intermediary epoch tracker component that mediates between the simple counter increments and the complex cryptographic operations. This intermediary layer abstracts the complexity of epoch management, presenting a simple interface to counter operations while handling the sophisticated epoch boundary logic internally
Data Source
AI summary
Aspects and implementations include systems and techniques for efficient protection of secret data against replay attacks, including updating a unit of data of a plurality of units of data, updating an individual portion of a counter for the unit of data, the counter including an individual portion and a common portion, accessing a pointer value that distinguishes counters corresponding to a first epoch from counters corresponding to a second epoch, selecting, based on at least the pointer value and a value of the individual portion of the counter, an update value, and modifying the pointer value using the update value.


