Unikernel Key Distribution via Encoding

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

The distribution of public/private key pairs in network-capable computing devices, particularly edge/IoT devices, poses a significant security risk due to insecure network links and device security vulnerabilities, with conventional methods providing additional attack vectors and high computing resource utilization.

Innovation Solution

The implementation of unikernels for key distribution, where a public key is stored in a public unikernel and the corresponding private key in a private unikernel, with an encoding generated to identify the private unikernel to the server computing system, eliminating the need for remote access and reducing computing resource utilization.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If conventional methods are used for key distribution, then key pairs can be distributed, but security risks increase due to insecure network links and device vulnerabilities

Engineering Contradiction:

ImprovesecurityVSAvoidattack surface

Core Design Contradiction:

ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The system segments key distribution into two separate unikernels: a public unikernel containing the public key and a private unikernel containing the private key. This segmentation isolates the private key within a restricted environment, reducing the attack surface while maintaining distribution capability.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent introduces an encoding mechanism as an intermediary that indirectly identifies the private unikernel without exposing it directly. The encoding is generated from the public unikernel identifier and serves as a secure mediator that allows the server to retrieve the correct private key without direct exposure of key storage locations.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Productivity

If conventional key distribution methods are used, then keys can be distributed, but computing resource utilization increases

Engineering Contradiction:

Improvekey distribution efficiencyVSAvoidcomputing resource utilization

Core Design Contradiction:

ProductivityVSUse of energy by moving object

Solution Approach 1:

The patent extracts only the essential identification information (encoding derived from public unikernel ID) needed for key retrieval, eliminating unnecessary data transmission and processing. This extraction approach reduces computing resource utilization while maintaining distribution efficiency.

Inventive Principle:

Principle #2Taking out (Extraction)

Solution Approach 2:

Instead of transmitting or storing the actual private key, the system uses a lightweight encoding copy that references the private unikernel. This copying mechanism significantly reduces computing resources required for key distribution while maintaining the ability to efficiently retrieve keys when needed.

Inventive Principle:

Principle #26Copying

Data Source

PatentUS20240072994A1Unikernels for private/public key distribution

Publication Date: 2024.02.29 RED HAT INC

AI summary

An identifier for a public unikernel of a plurality of public unikernels is provided to a client computing system, the public unikernel storing a first key paired to a second key stored within a private unikernel of a plurality of private unikernels accessible to a server computing system that serves the client computing system. An encoding based on the identifier for the public unikernel is generated, the encoding being configured to identify, to the server computing system, the private unikernel that stores the second key. The encoding is provided to the server computing system.