Security Token Data Compression for Faster Certificate Initialization

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Tokens used for storing security information, such as digital certificates and keys, face slow access times and limited memory capacity, making efficient data management and initialization challenging.

Innovation Solution

A system that compresses aggregated data objects onto a token, reducing storage space requirements and improving initialization efficiency by writing and reading data in contiguous blocks, rather than individually compressing each object.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Quantity of substance

If data objects are stored individually on a token, then data integrity is maintained, but memory capacity is quickly exhausted and access time increases

Engineering Contradiction:
Improvememory capacityVSAvoidaccess time
Core Design Contradiction:
Quantity of substanceVSLoss of time

Solution Approach 1:

The patent aggregates multiple data objects into a single compressed data structure stored on the token. This merging approach reduces the total storage space required while maintaining the ability to retrieve individual data objects through decompression and extraction, thereby resolving the contradiction between limited memory capacity and data integrity requirements.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The patent implements a nested structure where individual data objects are embedded within a compressed aggregate data structure. This allows the system to store multiple data objects in a compact form factor while enabling selective access to individual nested objects, effectively addressing both memory capacity constraints and access time requirements.

Inventive Principle:
Principle #7Nested doll (Nesting)

2Reliability

If more security information is stored on a token, then security capability is enhanced, but memory capacity is exceeded

Engineering Contradiction:
Improvesecurity capabilityVSAvoidmemory capacity
Core Design Contradiction:
ReliabilityVSQuantity of substance

Solution Approach 1:

The patent applies data compression techniques that transform the physical state of stored data from uncompressed to compressed form. This parameter change in data representation allows significantly more security information to be stored within the same memory capacity, thereby enhancing security capability without exceeding storage limits.

Inventive Principle:
Principle #35Parameter changes

3Quantity of substance

If data is compressed and stored on a token, then storage efficiency is improved, but data access complexity increases

Engineering Contradiction:
Improvestorage efficiencyVSAvoiddata access complexity
Core Design Contradiction:
Quantity of substanceVSDevice complexity

Solution Approach 1:

The patent performs data compression and aggregation in advance during the initialization phase, before the token is put into service. This preliminary action eliminates the need for complex real-time compression operations during data access, thereby maintaining storage efficiency while reducing access complexity to simple decompression and extraction operations.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS8762350B2Methods and systems for providing data objects on a token
Publication Date: 2014.06.24 RED HAT INC
  • US8762350B2 patent drawing
  • US8762350B2 patent drawing
  • US8762350B2 patent drawing

AI summary

A computer system, method and/or computer-readable medium provide independent data objects to a token in compressed form. The independent data objects are representative of security information associated with the token. The system includes an interface operable to communicate with a token, and a processor cooperatively operable with the interface. The processor is configured to determine a set of independent data objects that are associated with the token, and to aggregate the set of independent data objects associated with the token into a group. Also, the processor is configured for compressing the group into a unit of contiguous data, and writing the unit of contiguous data to the token via the interface.