IP Library › Granted Patent US 11,861,023
Granted Patent B2
US 11,861,023 · App. 17/411,383 · Granted Jan 2, 2024

Matching cryptographic computing resources to the predicted requirements for decrypting encrypted communications

Inventors: Heng Wang (Beijing, CN); Wan Yue Chen (Beijing, CN); Chen Guang Liu (Beijing, CN); Jing Li (Beijing, CN); Xiao Ling Chen (Beijing, CN); Peng Hui Jiang (Beijing, CN)
Assignee: International Business Machines Corporation
G06F21/602G06N20/00
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,861,023
App. No.
17/411,383
Granted
Jan 2, 2024
Kind
B2
Abstract

Embodiments of the invention include a computer-implemented method that uses a processor to access cryptographic-function constraints associated with an encrypted message. Based on a determination that the cryptographic-function constraints do not include mandatory cryptographic computing resource requirements, first resource-scaling operations are performed that include an analysis of cryptographic metrics associated with a processor. The cryptographic metrics include information associated with the encrypted message, along with performance measurements of cryptographic functions performed by the processor. The cryptographic-function constraints and results of the analysis of the cryptographic metrics are used to determine cryptographic processing requirements of the encrypted message; and match the cryptographic processing requirements to selected ones of a set of cryptographic computing resources to identify a customized set of cryptographic computing resources matched to cryptographic processing requirements of the encrypted message. The customized set of cryptographic computing resources is used to perform customized cryptographic functions on the encrypted message.

Claims (96)

1. A computer-implemented method for performing cryptographic operations, the computer-implemented method comprising:

receiving, using a processor system, resource-scaling (RS) data associated with an encrypted message

accessing, using the processor system, an operation policy (OP) of the RS data, wherein the OP defines cryptographic-operation constraints;

based at least in part on a determination that the cryptographic-operation constraints do not include mandatory cryptographic resource requirements, performing first resource-scaling operations comprising:

using the processor system to perform an analysis of cryptographic metrics associated with the processor system;

wherein the cryptographic metrics comprise:

information associated with the encrypted message; and

performance measurements of cryptographic operations performed by the processor system;

using the cryptographic-operation constraints and results of the analysis of the cryptographic metrics to:

determine cryptographic processing requirements of the encrypted message; and

match the cryptographic processing requirements to selected ones of a set of available cryptographic computing resources to identify a customized set of cryptographic computing resources that have been selected to match the cryptographic processing requirements of the encrypted message; and

using the customized set of cryptographic computing resources to perform customized cryptographic operations on the encrypted message.

2. The computer-implemented method of claim 1 further comprising:

based at least in part on a determination that the cryptographic-operation constraints include the mandatory cryptographic computing resource requirements, performing second resource-scaling operations comprising:

routing the encrypted message to a set of mandatory cryptographic computing resources identified by the mandatory cryptographic computing resource requirements; and

using the set of mandatory cryptographic computing resources to perform mandatory cryptographic operations on the encrypted message.

3. The computer-implemented method of claim 1 further comprising configuring open-source cryptographic software to:

receive a request to perform cryptographic operations on the encrypted message; and

route the request to the processor system instead of performing the request.

4. The computer-implemented method of claim 3 , wherein the open-source cryptographic software comprises open-source secure sockets layer (SSL) software.

5. The computer-implemented method of claim 1 , wherein:

the first resource-scaling operations further comprise capturing a first set of updated cryptographic metrics that result from using the customized set of cryptographic computing resources to perform the customized cryptographic operations on the encrypted message; and

updating the cryptographic metrics with the first set of updated cryptographic metrics.

6. The computer-implemented method of claim 2 , wherein:

the first resource-scaling operations further comprise:

capturing a first set of updated cryptographic metrics that result from using the customized set of cryptographic computing resources to perform the customized cryptographic operations on the encrypted message; and

updating the cryptographic metrics with the first set of updated cryptographic metrics; and

the second resource-scaling operations further comprise:

capturing a second set of updated cryptographic metrics that result from using the set of mandatory cryptographic computing resources to perform mandatory cryptographic operations on the encrypted message; and

updating the cryptographic metrics with the second set of updated cryptographic metrics.

7. The computer-implemented method of claim 1 , wherein: the processor system comprises a predictive model trained to utilize machine learning algorithms to determine the cryptographic processing requirements of the encrypted message

the information associated with the encrypted message includes cryptographic computing resource patterns comprising static data; and

the performance measurements include cryptographic metrics comprising dynamic data that changes.

8. A computer system comprising a memory communicatively coupled to a processor system, wherein the processor system is configured to perform processor system operations comprising:

receiving resource-scaling (RS) data associated with an encrypted message;

accessing an operation policy (OP) of the RS data, wherein the OP defines cryptographic-operation constraints;

based at least in part on a determination that the cryptographic-operation constraints do not include mandatory cryptographic computing resource requirements, performing first resource-scaling operations comprising:

an analysis of cryptographic metrics associated with the processor system;

wherein the cryptographic metrics comprise:

information associated with the encrypted message; and

performance measurements of cryptographic operations performed by the processor system;

using the cryptographic-operation constraints and results of the analysis of the cryptographic metrics to:

determine cryptographic processing requirements of the encrypted message; and

match the cryptographic processing requirements to selected ones of a set of available cryptographic computing resources to identify a customized set of cryptographic computing resources that have been selected to match the cryptographic processing requirements of the encrypted message; and

using the customized set of cryptographic computing resources to perform customized cryptographic operations on the encrypted message.

9. The computer system of claim 8 , wherein the processor system is configured to perform processor system operations further comprising:

based at least in part on a determination that the cryptographic-operation constraints include the mandatory cryptographic computing resource requirements, performing second resource-scaling operations comprising:

routing the encrypted message to a set of mandatory cryptographic computing resources identified by the mandatory cryptographic computing resource requirements; and

using the set of mandatory cryptographic computing resources to perform mandatory cryptographic operations on the encrypted message.

10. The computer system of claim 8 , wherein the processor system is configured to perform processor system operations further comprising configuring open-source cryptographic software to:

receive a request to perform cryptographic operations on the encrypted message; and

route the request to the processor system instead of performing the request.

11. The computer system of claim 10 , wherein the open-source cryptographic software comprises open-source secure sockets layer (SSL) software.

12. The computer system of claim 8 , wherein:

the first resource-scaling operations further comprise capturing a first set of updated cryptographic metrics that result from using the customized set of cryptographic computing resources to perform the customized cryptographic operations on the encrypted message; and

updating the cryptographic metrics with the first set of updated cryptographic metrics.

13. The computer system of claim 9 , wherein:

the first resource-scaling operations further comprise:

capturing a first set of updated cryptographic metrics that result from using the customized set of cryptographic computing resources to perform the customized cryptographic operations on the encrypted message; and

updating the cryptographic metrics with the first set of updated cryptographic metrics; and

the second resource-scaling operations further comprise:

capturing a second set of updated cryptographic metrics that result from using the set of mandatory cryptographic computing resources to perform mandatory cryptographic operations on the encrypted message; and

updating the cryptographic metrics with the second set of updated cryptographic metrics.

14. The computer system of claim 8 , wherein: the processor system comprises a predictive model trained to utilize machine learning algorithms to determine the cryptographic processing requirements of the encrypted message;

the information associated with the encrypted message includes cryptographic computing resource patterns comprising static data; and

the performance measurements include cryptographic metrics comprising dynamic data that changes.

15. A computer program product for performing cryptographic operations, the computer program product comprising a computer readable program stored on a computer readable storage medium, wherein the computer readable program, when executed on a processor system, causes the processor system to perform a processor system method comprising:

receiving resource-scaling (RS) data associated with an encrypted message;

accessing an operation policy (OP) of the RS data, wherein the OP defines cryptographic-operation constraints;

based at least in part on a determination that the cryptographic-operation constraints do not include mandatory cryptographic computing resource requirements, performing first resource-scaling operations comprising:

an analysis of cryptographic metrics associated with the processor system;

wherein the cryptographic metrics comprise:

information associated with the encrypted message; and

performance measurements of cryptographic operations performed by the processor system;

using the cryptographic-operation constraints and results of the analysis of the cryptographic metrics to:

determine cryptographic processing requirements of the encrypted message; and

match the cryptographic processing requirements to selected ones of a set of available cryptographic computing resources to identify a customized set of cryptographic computing resources that have been selected to match the cryptographic processing requirements of the encrypted message; and

using the customized set of cryptographic computing resources to perform customized cryptographic operations on the encrypted message.

16. The computer program product of claim 15 , wherein the processor system method further comprises:

based at least in part on a determination that the cryptographic-operation constraints include the mandatory cryptographic computing resource requirements, performing second resource-scaling operations comprising:

routing the encrypted message to a set of mandatory cryptographic computing resources identified by the mandatory cryptographic computing resource requirements; and

using the set of mandatory cryptographic computing resources to perform mandatory cryptographic operations on the encrypted message.

17. The computer program product of claim 15 , wherein the processor system method further comprises configuring open-source cryptographic software to:

receive a request to perform cryptographic operations on the encrypted message; and

route the request to the processor system instead of performing the request.

18. The computer program product of claim 17 , wherein the open-source cryptographic software comprises open-source secure sockets layer (SSL) software.

19. The computer program product of claim 16 , wherein:

the first resource-scaling operations further comprise:

capturing a first set of updated cryptographic metrics that result from using the customized set of cryptographic computing resources to perform the customized cryptographic operations on the encrypted message; and

updating the cryptographic metrics with the first set of updated cryptographic metrics; and

the second resource-scaling operations further comprise:

capturing a second set of updated cryptographic metrics that result from using the set of mandatory cryptographic computing resources to perform mandatory cryptographic operations on the encrypted message; and

updating the cryptographic metrics with the second set of updated cryptographic metrics.

20. The computer program product of claim 15 , wherein:

the processor system comprises a predictive model trained to utilize machine learning algorithms to determine the cryptographic processing requirements of the encrypted message; the information associated with the encrypted message includes cryptographic computing resource patterns comprising static data; and

the performance measurements include cryptographic metrics comprising dynamic data that changes.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 25, 2021
From: WANG, HENG; CHEN, WAN YUE; LIU, CHEN GUANG; LI, JING; CHEN, XIAO LING; JIANG, PENG HUI
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 057285/0444 →
Continuity (1)
Related Publication 20230068521A1 · Mar 2, 2023