Dedicated VPN Processor for Persistent Data Access

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

VPN connections are typically broken when a computer enters low-power states like suspend or hibernation, requiring users to re-establish the connection upon powering back on, which discourages prolonged access to VPN-derived data.

Innovation Solution

A system with a dedicated VPN processor and memory that stores credentials and data, allowing for persistent VPN connections and unattended data retrieval, enabling access to VPN-derived data even in low-power states without re-establishing the VPN connection.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Loss of energy

If the computer enters low-power states (suspend or hibernation), then energy consumption is reduced, but the VPN connection is broken requiring re-authentication

Engineering Contradiction:

Improveenergy consumptionVSAvoidVPN connection continuity

Core Design Contradiction:

Loss of energyVSReliability

Solution Approach 1:

The system separates VPN credentials and data into a dedicated secure memory space that is independent of the main system power state. The credentialing process is segmented into initial authentication (performed when system is on) and data access (performed after resume), allowing the connection state to be preserved across power transitions.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The system performs preliminary credential verification and data staging before the computer enters low-power mode. VPN credentials are stored in secure memory, and data is pre-retrieved or pre-processed during the powered-on state, enabling rapid resumption without full re-authentication after resume.

Inventive Principle:

Principle #10Preliminary action

2Duration of action of moving object

If the VPN connection is maintained across power states, then data access continuity is improved, but security risk increases due to potential unauthorized access

Engineering Contradiction:

Improvedata access continuityVSAvoidsecurity risk

Core Design Contradiction:

Duration of action of moving objectVSObject-affected harmful factors

Solution Approach 1:

A secure dedicated memory space acts as an intermediary between the VPN credentials and the main system. This secure memory requires separate authentication mechanisms and controls access to VPN data, providing a security layer that maintains connection continuity while preventing unauthorized access during low-power states.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

Different security measures are applied to different parts of the system. The dedicated secure memory has enhanced security properties (protected from standard power management operations, requires specific authentication) compared to regular system memory, allowing continuity in one area while maintaining high security in another.

Inventive Principle:

Principle #3Local quality

3Reliability

If full re-authentication is required after each power state change, then security is maintained, but user convenience and productivity decrease

Engineering Contradiction:

ImprovesecurityVSAvoiduser convenience

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

Instead of requiring complete re-authentication after every power state change, the system performs partial authentication - verifying credentials in the secure memory and validating data integrity - which is sufficient to maintain security while significantly reducing the time and effort required compared to full re-authentication sequences.

Inventive Principle:

Principle #16Partial or excessive action

Data Source

PatentUS9401903B2Facilitating access to data from virtual private networks

Publication Date: 2016.07.26 LENOVO SWITZERLAND INTERNATIONAL GMBH

AI summary

Arrangements and methods for facilitating access to VPN-derived data regardless of computing platform power state.