Back to results
US 11,768,746 B2Granted
Maintaining secure session state with failover during endpoint provisioning
AssigneeCryptography Research, Inc.
InventorDenis Alexandrovich Pochuev
Life of this patent
Estimating the term…
Abstract
The embodiments described herein describe technologies to maintaining a secure session state with failover during endpoint provisioning. A cluster of hardware devices can be used for provisioning endpoint devices with secrecy, integrity, access controller, high availability, minimal transaction time, and interactive transactions with multiple requests and response within a session. The embodiments are directed to a first computing device being elected as a leader and sharing context information of a session with other computing devices as followers in the cluster such that a follower can resume the session if the leader fails.
Claims14
A provisioning cluster of hardware devices for provisioning endpoint devices, the provisioning cluster comprising:
- a first computing device, wherein the first computing device is elected as a leader, by the provisioning cluster, for a session with an endpoint device;
- and
- a second computing device, wherein the second computing device is designated as a follower for the session, wherein the first computing device is to:
- receive, in the session, a first message from the endpoint device;
- perform a first operation in connection with the first message to obtain a first result;
- generate a response with the first result;
- determine context information of the session based on at least some information in the first message, wherein the context information comprises the first result;
- share the context information of the session with the second computing device using a consensus protocol such that the second computing device replicates the context information of the session and resumes the session if the leader fails;
- and
- send, in the session, a second message to the endpoint device, the second message comprising the response.
7 more elements
A provisioning cluster of hardware devices for provisioning endpoint devices, the provisioning cluster comprising:
- a first computing device, wherein the first computing device is elected as a leader, by the provisioning cluster, for a session with an endpoint device;
- and
- a second computing device, wherein the second computing device is designated as a follower for the session, wherein the first computing device is to send a first identifier and a first address of the first computing device to the endpoint device and share context information of the session with the second computing device such that the second computing device resumes the session if the leader fails, wherein:
- the second computing device is to:
- detect that the first computing device has failed;
- initiate a leader election to elect a new leader of the provisioning cluster;
- change from the follower to the new leader;
- and
- send a second identifier and a second address of the second computing device to the endpoint device, responsive to the second computing device changing from the follower to the new leader.
6 more elements
A method comprising:
- electing, by a provisioning cluster of hardware devices, a first computing device as a leader for a session with an endpoint device for provisioning the endpoint device;
- designating, by the provisioning cluster of hardware devices, a second computing device as a follower for the session;
- receiving, in the session, a first message from the endpoint device;
- performing a first operation in connection with the first message to obtain a first result;
- generating a response with the first result;
- determining context information of the session based on at least some information in the first message, wherein the context information comprises the first result;
- sharing, by the first computing device, the context information of the session with the second computing device using a consensus protocol such that the second computing device replicates the context information of the session and resumes the session if the leader fails;
- and
- sending, in the session, a second message to the endpoint device, the second message comprising the response.
6 more elements
A method comprising:
- electing, by a provisioning cluster of hardware devices, a first computing device as a leader for a session with an endpoint device for provisioning the endpoint device;
- designating, by the provisioning cluster of hardware devices, a second computing device as a follower for the session;
- sharing, by the first computing device, context information of the session with the second computing device such that the second computing device resumes the session if the leader fails;
- sending a first identifier and a first address of the first computing device to the endpoint device;
- detecting that the first computing device has failed;
- initiating a leader election to elect a new leader of the provisioning cluster;
- changing the second computing device from the follower to the new leader;
- and
- sending a second identifier and a second address of the second computing device to the endpoint device, responsive to changing the second computing device from the follower to the new leader.
6 more elements
A first computing device of a provisioning cluster of hardware device, the first computing device comprising:
- a memory device to store instructions;
- and
- a processing device operatively coupled to the memory device, wherein the processing device and the memory device are located within a physical security perimeter, wherein the first computing device is elected, by the provisioning cluster, as a leader for a session with an endpoint device for provisioning the endpoint device, wherein the processing device is to execute the instructions to perform operations comprising:
- receiving, in the session, a first message from the endpoint device;
- performing a first operation in connection with the first message to obtain a first result;
- generating a response with the first result;
- determining context information of the session based on at least some information in the first message, wherein the context information comprises the first result;
- sharing the context information of the session with a second computing device of the provisioning cluster using a consensus protocol such that the second computing device replicates the context information of the session and resumes the session if the leader fails;
- and
- sending, in the session, a second message to the endpoint device, the second message comprising the response.
7 more elements
Dependencies are inferred from the claim text.