VM Authentication via Composite Encrypted Secrets
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In a cloud environment, there is a challenge in authenticating the origin of requests to execute processes that access cached data, particularly when confidential data is involved, as third-party operators may attempt to clone virtual machines to gain unauthorized access to sensitive information.
Innovation Solution
The solution involves generating a composite encrypted value comprising an encrypted secret and a secure hash value, which is decrypted using a cryptographic key based on unique properties of the virtual machine, ensuring that only authorized processes can access and execute using the secret data by matching the hash values.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If virtual machines are cloned to provide virtual environment resources, then productivity and service capacity are improved, but security and data privacy are worsened due to potential unauthorized access to cached confidential data
Solution Approach 1:
The patent applies local quality by making security credentials (encrypted secrets and cryptographic keys) unique to each virtual machine instance. When a VM is cloned, the cryptographic key is regenerated based on the new VM's unique properties, while the encrypted secret remains unchanged. This creates a local security characteristic where each VM instance has its own authentication credentials, preventing unauthorized access to cached confidential data while allowing the VM to be cloned for productivity purposes.
2Speed
If cached data is stored locally for faster access, then speed and efficiency are improved, but security and data privacy are worsened due to exposure risks
Solution Approach 1:
The patent applies preliminary action by pre-encrypting secrets with a cryptographic key before storing them in the composite encrypted value. This encryption is performed in advance, so when data is cached locally for fast access, it remains protected. The encryption is set up beforehand, allowing the system to maintain both fast local access and security simultaneously.
Solution Approach 2:
The patent uses an intermediary approach by introducing a composite encrypted value that acts as a mediator between the cached data and the secret. The composite encrypted value contains both the encrypted secret and a hash value, serving as an intermediary layer that protects the actual secret while enabling verification. This intermediary structure allows local caching to be both fast and secure.
3Reliability
If composite encrypted values are verified through decryption and hash comparison, then security and data privacy are improved, but device complexity and processing overhead are worsened
Solution Approach 1:
The patent applies segmentation by dividing the verification process into two separate operations: decryption of the encrypted secret and comparison of hash values. The composite encrypted value is segmented into distinct components (encrypted secret and hash value), allowing each to be verified independently. This segmentation makes the verification process more manageable and less complex while maintaining high reliability.
Data Source
AI summary
Methods, systems, and computer-readable storage media for authorizing execution of processes that access cached data of an application running in a virtualized cloud environment. A first composite encrypted value comprising a first encrypted secret and a first secure hash value of a first secret is retrieved at a first virtual machine. The first encrypted secret is decrypted using a cryptographic key to determine a second secret to be used for initiating a first process (pα) on the first virtual machine. A second secure hash value of the second secret is generated. The second secure hash value is compared with the first secure hash value to determine whether to authorize execution of the first process on the first virtual machine using the first secret. In response to determining that the second secure hash value and the first secure hash value match, the first process is initiated at the first virtual machine.