VM Cluster Security via Embedded Secrets and PKI
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In a non-secure environment, dynamically creating and deploying virtual machines (VMs) securely in a virtual scale-out (VSO) cluster is challenging due to the need for secure encryption key exchange over an unprotected network, requiring user intervention to establish trust and secure communications.
Innovation Solution
Embedding a shared secret key in the VM image allows for initial secure communication between the master node and new VMs, enabling automatic generation of digital identity certificates without user intervention, using a public key infrastructure (PKI) to establish a secure channel over a non-secure network.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If VMs are dynamically deployed in a VSO cluster over a non-secure network, then productivity and adaptability are improved, but security and reliability deteriorate due to inability to securely exchange encryption keys
Solution Approach 1:
The master node generates and stores encryption keys and digital certificates in advance, before dynamic VM deployment. When a new VM is deployed, the master node can immediately provide it with the necessary security credentials through the established secure channel, enabling automatic secure deployment without real-time key exchange negotiations
Solution Approach 2:
The patent introduces a certificate authority (CA) and digital certificate system as an intermediary mechanism. Instead of directly exchanging sensitive encryption keys over the non-secure network, the system uses certificates signed by the CA to verify identities and establish secure channels, mediating the trust relationship between master node and dynamically deployed VMs
2Reliability
If encryption keys are exchanged over a non-secure network to enable secure VM communications, then security can be improved, but the system becomes vulnerable to key interception and compromise
Solution Approach 1:
The patent extracts the sensitive key exchange process from the non-secure network environment. The master node generates encryption keys locally and stores them securely, then uses asymmetric encryption and digital certificates to transmit only public key components over the network, keeping private keys isolated and never transmitted, thereby eliminating the vulnerability to key interception
Solution Approach 2:
Security credentials including encryption keys and digital certificates are generated and prepared in advance by the master node before any dynamic VM deployment occurs. This preliminary preparation ensures that when VMs are deployed dynamically, they can immediately establish secure communications without requiring real-time key generation or exchange over the non-secure network
3Reliability
If user intervention is required to establish trust and secure communications for dynamically deployed VMs, then security can be improved, but ease of operation and automation deteriorate
Solution Approach 1:
The system implements automated trust establishment where the master node automatically generates digital certificates, verifies VM identities, and sets up secure communication channels without requiring user intervention. The VMs self-register with the master node upon deployment, and the master node automatically provisions them with necessary security credentials, making the entire process autonomous and eliminating manual user involvement
Solution Approach 2:
The system implements automated feedback mechanisms where the master node monitors VM deployment status and automatically initiates trust establishment procedures. When a new VM is detected, the master node automatically requests its identity information, verifies it against the configured policies, and provisions security credentials, creating a closed-loop automated process that eliminates manual user intervention while maintaining security
Data Source
AI summary
Secure communications are established in a non-secure environment between virtual machines configured as nodes of a virtual machine cluster having a virtual scale-out architecture without user intervention. When a new virtual cluster node is automatically and dynamically created and deployed by a virtual cluster master node, the master node embeds in a common image from which the new node is created an initial secret key for establishing initial trusted communications between the new node and the master node. The master node then passes a permanent secret key to the new node, opens an OpenSSL connection for creating a public key infrastructure, and signs the new node's CSR with its own public and private keys and sends the signed certificate to the new node.