HIP Security Channel Multiplexing for Traditional Hosts

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The existing host identity protocol (HIP) security channel architecture requires multiple security channels to be established between HIP hosts and traditional hosts, leading to increased maintenance loads and inefficiencies.

Innovation Solution

A method and apparatus for multiplexing HIP security channels by detecting established channels and transmitting control signaling to request data transmission, reducing the number of security channels and maintaining loads through efficient channel utilization.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If multiple HIP security channels are established for each traditional host-HIP host communication pair, then communication security is ensured, but the quantity of security channels increases and maintenance loads increase

Engineering Contradiction:
Improvecommunication securityVSAvoidquantity of security channels
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent merges multiple traditional hosts' data transmissions into a single HIP security channel by establishing one security channel between the HIP proxy and HIP host, then multiplexing data from multiple traditional hosts through this shared channel, thereby reducing the total number of security channels while maintaining security

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The HIP security channel is designed to serve multiple traditional hosts simultaneously, making it a universal channel that handles communications for multiple clients rather than being dedicated to a single host, thus reducing overall channel quantity

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Reliability

If multiple HIP security channels are established for each traditional host-HIP host communication pair, then individual security is maintained, but maintenance loads increase

Engineering Contradiction:
Improveindividual securityVSAvoidmaintenance loads
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The HIP proxy acts as an intermediary that centralizes the management of security channels, handling the establishment and maintenance of a single shared security channel between itself and the HIP host, thereby reducing the maintenance burden compared to managing multiple individual channels

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If a HIP proxy establishes multiple HIP security channels with the same HIP host for different traditional hosts, then security requirements are met, but channel utilization efficiency decreases

Engineering Contradiction:
Improvesecurity requirementsVSAvoidchannel utilization efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

Multiple data streams from different traditional hosts are merged into a single HIP security channel through the HIP proxy, which multiplexes the data transmissions, thereby improving channel utilization efficiency while still meeting security requirements through the shared encrypted channel

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentUS8923272B2Method and apparatus for multiplexing a host identity protocol security channel
Publication Date: 2014.12.30 HUAWEI TECH CO LTD
  • US8923272B2 patent drawing
  • US8923272B2 patent drawing
  • US8923272B2 patent drawing

AI summary

Embodiments of the present invention relate to the field of security channel multiplexing, and disclose a method and an apparatus for multiplexing a HIP security channel. A method includes: receiving a message for requesting to transmit data; detecting whether a HIP security channel is established with the HIP host; if true, transmitting control signaling to the HIP host, where the control signaling is used to request to multiplex the HIP security channel to transmit data of the traditional host; if a response message returned from the HIP host is received, transmitting the data of the traditional host to the HIP host through the HIP security channel. With embodiments of the present invention, the quantity of HIP security channels established between the HIP proxy and the HIP host and the loads of maintaining the security channel can be reduced, and the utilization of the HIP security channel is increased.