Topic Common Key Management for Publish-Subscribe Encryption

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The existing data distribution systems face increased processing loads due to the need for generating and distributing common keys for multiple terminals in publish-subscribe communication models, particularly as the number of data receivers increases.

Innovation Solution

A data distribution system where a first client provides and manages topic common keys for encryption and decryption, allowing multiple clients to communicate securely without the need for individual key preparation for each combination of data providers and receivers, using a topic common key manager and message manager to handle message encryption and decryption.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a common key is prepared for each combination of information processing apparatus and terminal, then encrypted communication security is improved, but processing load increases with more terminals

Engineering Contradiction:
Improveencrypted communication securityVSAvoidprocessing load
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent segments the key management approach by introducing topic-specific common keys that are shared among multiple terminals for the same topic, rather than creating unique keys for each terminal combination. This segmentation allows the system to maintain security through encryption while reducing the total number of keys that need to be managed and distributed.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent implements universality by creating topic common keys that serve multiple terminals simultaneously. A single topic common key can be used by any number of terminals subscribed to the same topic, making the key multi-functional and eliminating the need for individual keys for each terminal, thus reducing processing load while maintaining security.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Adaptability or versatility

If the number of subscribers increases in publish-subscribe communication, then system coverage is improved, but processing load for key generation and distribution increases

Engineering Contradiction:
Improvesystem coverageVSAvoidprocessing load for key generation and distribution
Core Design Contradiction:
Adaptability or versatilityVSProductivity

Solution Approach 1:

The patent enables unlimited system coverage by allowing any number of terminals to subscribe to topics using the same topic common key. The broker can distribute messages to any number of subscribers without requiring additional key generation or distribution, as all subscribers to the same topic share the same key, thus eliminating the processing load increase that would normally accompany expanded system coverage.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent uses copying by distributing the same topic common key to multiple terminals. Instead of creating unique keys for each terminal, the system copies the topic common key to all terminals subscribed to a particular topic, which simplifies key management and eliminates the need for additional key generation and distribution processing as the number of subscribers increases.

Inventive Principle:
Principle #26Copying

3Reliability

If individual keys are prepared for each data provider and receiver combination, then communication security is improved, but device complexity increases

Engineering Contradiction:
Improvecommunication securityVSAvoidkey management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments key management by organizing keys according to topics rather than by individual terminal pairs. This segmentation reduces device complexity by grouping keys into topic-based categories, making it easier to manage and distribute keys while maintaining communication security through the use of topic-specific common keys.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS11856091B2Data distribution system, data processing device, and program
Publication Date: 2023.12.26 MITSUBISHI ELECTRIC CORP
  • US11856091B2 patent drawing
  • US11856091B2 patent drawing
  • US11856091B2 patent drawing

AI summary

A plurality of clients including a platform (200) and at least one client (100) communicate with each other in accordance with a publish-subscribe model. A topic common key manager (260) of the platform (200) provides, to the client (100), a topic common key associated with a topic and being for encryption and decryption of a message directed to the topic. A message manager (270) transmits the message encrypted with the topic common key associated with the topic, and decrypts a received message with the topic common key associated with the topic. A topic common key storage (150) of the client (100) stores the topic common key provided from the platform (200) in association with identification information of the topic. A message manager (170) transmits the message encrypted with the topic common key, and decrypts a received message with the topic common key.