Decoupling Security Session State from Transport Mechanisms
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security protocols, such as TLS, are resource-intensive and require re-negotiation upon network failures or transport mechanism changes, leading to performance degradation in distributed environments with numerous long-running sessions.
Innovation Solution
Decoupling security protocol session state information from underlying transport mechanisms allows for seamless transition between different transport mechanisms, such as TCP and UDP, without re-negotiating cryptographic keys, thereby maintaining secure communication and reducing computational overhead.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security protocol sessions are tightly coupled to transport mechanisms, then security is maintained through dedicated negotiation, but performance degrades due to resource-intensive re-negotiation during network failures
Solution Approach 1:
The patent segments the security protocol state information from the transport mechanism state information by storing them in separate data structures. This allows the security session to be maintained independently of the transport mechanism, enabling re-negotiation-free switching between transport mechanisms during network failures, thus improving performance while maintaining security.
Solution Approach 2:
The patent implements dynamic switching between transport mechanisms (TCP and UDP) by decoupling the security session from the underlying transport. The system can dynamically select alternative transport mechanisms without re-negotiating security parameters, adapting to network conditions in real-time while maintaining secure communication.
2Reliability
If re-negotiation is performed upon transport mechanism changes, then security is maintained, but computational overhead increases
Solution Approach 1:
The patent performs preliminary action by establishing the security protocol session independently of the transport mechanism during the initial connection phase. The security state information is stored separately and can be reused across different transport mechanisms, eliminating the need for resource-intensive re-negotiation when switching transport mechanisms during network failures.
3Adaptability or versatility
If security protocol state information is stored separately from transport mechanism state information, then transition between transport mechanisms is enabled, but data structure complexity increases
Solution Approach 1:
The patent extracts the security protocol state information from the transport mechanism state information by storing them in separate data structures. This extraction enables independent management of security sessions and transport mechanisms, allowing seamless transitions between different transport mechanisms without compromising security, while the separate storage actually simplifies the overall data structure management.
Data Source
AI summary
A first communicating entity determines session state parameters of a security protocol session between itself and a second communicating entity. The first entity uses the session state parameters to transmit a first set of messages of the session to the second entity via a first communication mechanism. The first entity also uses the session state parameters to transmit a second set of messages of the session to the second entity via a second communication mechanism.