Cryptographic Communication Timeout Control for Connection Efficiency
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In cryptographic communication between a server and a client, if the server does not support cryptographic communication, the client must suspend processing until a response times out, leading to inefficiencies in connection establishment.
Innovation Solution
An information processing apparatus with a first cryptographic communication control unit issuing an encrypted connection request and a second unit issuing a plain-text request concurrently, along with a timeout control unit that adjusts the timeout period based on responses from the server, allowing for flexible control over the communication process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the client issues a connection request by cryptographic communication only, then security is improved, but the connection establishment time increases due to timeout waiting when the server does not support cryptographic communication
Solution Approach 1:
The client performs preliminary actions by issuing both cryptographic connection requests and plain-text connection requests concurrently before knowing server compatibility. This allows the system to have connection attempts already in progress, eliminating the need to wait for timeouts when the server doesn't support cryptographic communication.
Solution Approach 2:
The system dynamically adjusts the timeout period for cryptographic connection requests based on whether a plain-text connection has been successfully established. If plain-text connection succeeds, the timeout for cryptographic requests is reduced or cancelled, optimizing resource usage and connection establishment time based on real-time conditions.
2Reliability
If the client waits for a timeout before trying plain-text communication, then cryptographic communication priority is maintained, but productivity decreases due to suspended processing
Solution Approach 1:
The client issues plain-text connection requests in advance alongside cryptographic connection requests, so that when cryptographic communication fails or times out, the plain-text connection is already established or can be quickly established, avoiding processing suspension.
Solution Approach 2:
The system uses feedback from the successful establishment of plain-text connection to adjust the timeout behavior of cryptographic connection requests. When plain-text connection is successful, the system reduces or cancels the timeout waiting for cryptographic requests, allowing parallel processing to continue efficiently.
3Reliability
If the timeout period is kept long to ensure cryptographic communication establishment, then reliability is improved, but the loss of time increases when plain-text communication is the only option
Solution Approach 1:
The timeout period for cryptographic connection requests is made dynamic rather than fixed. It is adjusted based on the outcome of plain-text connection attempts. When plain-text connection succeeds, the cryptographic request timeout is reduced or cancelled, optimizing the balance between reliability and time efficiency based on actual server capabilities.
Data Source
AI summary
An information processing apparatus includes a first cryptographic communication control unit, a second cryptographic communication control unit, and a timeout control unit. The first cryptographic communication control unit issues an encrypted connection request to a communication destination node and performs cryptographic communication. The second cryptographic communication control unit issues, concurrently with the connection request by the first cryptographic communication control unit, a connection request by plain text to the communication destination node, establishes connection, and then performs cryptographic communication. The timeout control unit changes a period for a timeout set in advance for the connection request by the first cryptographic communication control unit in a case where a response to the connection request by the second cryptographic communication control unit is received from the communication destination node before a response to the connection request by the first cryptographic communication control unit is received from the communication destination node.