Local Protocol Server Forwarding for SASE Secure Networking
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional secure networking systems lack comprehensive computing logic and infrastructure to provide secure network communications that are SASE compatible, leading to inefficiencies and security risks in cloud server-based implementations.
Innovation Solution
A local protocol server associated with a secure networking engine performs client-side forwarding operations, including IP assignment, OS routing, and destination network address translation to support secure network communications, intercepting and processing data traffic at the client device.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If cloud server-based secure networking implementations are used, then network security functionality is provided, but computing efficiency deteriorates and security risks increase
Solution Approach 1:
The patent inverts the conventional cloud server-based architecture by implementing secure networking functionality directly on the client device. The secure networking engine operates as a client-side system that intercepts and processes network traffic locally, eliminating the need for cloud server-based processing and thereby improving computing efficiency while maintaining security functionality.
Solution Approach 2:
The patent extracts secure networking functionality from the cloud server and implements it locally on the client device. The secure networking engine captures network traffic, performs security operations, and manages connections directly on the client, removing the dependency on cloud servers and improving computing efficiency by processing data locally rather than remotely.
2Reliability
If cloud server-based secure networking implementations are used, then network security functionality is provided, but security risks increase
Solution Approach 1:
The patent extracts network traffic and security operations from the cloud server environment and processes them locally on the client device. By implementing the secure networking engine as a client-side system that captures and processes traffic locally, the patent eliminates the security risks associated with transmitting sensitive data to and processing it on remote cloud servers.
Solution Approach 2:
The secure networking engine acts as an intermediary between the client application and the network. It intercepts network traffic locally, performs security operations, and manages connections before traffic reaches external destinations, thereby providing security functionality while eliminating the need to expose client data to cloud server processing.
3Ease of manufacture
If IP-based network processing is used, then conventional VPN solutions are implemented, but SASE compatibility and computing resource efficiency deteriorate
Solution Approach 1:
The patent changes the fundamental parameter of network processing from IP-based to connection-based. Instead of processing traffic at the IP packet level as in conventional VPN solutions, the secure networking engine operates at the connection level, creating and managing secure connections that are compatible with SASE architecture while maintaining computing resource efficiency.
Solution Approach 2:
The secure networking engine provides universal functionality that supports both conventional VPN operations and SASE-compatible secure network communications. By implementing a connection-based architecture that can handle various traffic types and security requirements, the system achieves multi-functionality and SASE compatibility while improving computing resource efficiency.
Data Source
Figure 1A
Figure 1B
Figure 2A
AI summary
Methods, systems, and computer storage media for providing a local protocol server associated with a secure networking engine that provides client-side forwarding in a secure networking system. The local protocol server (e.g., local TCP/UDP server) - on a client device - operates based on client-side forwarding operations that include: IP assignment, operating system (OS) routing, destination network address translation, and original destination retrieval to support accessing a network resource (e.g., socket connection) on the client device and support communications between client applications on the client device and the local protocol server on the same client device. In this way, the local protocol server supports communications of a diverse set of data traffic or network traffic (e.g., different types of cross-platform communications), where the diverse set of network traffic is initially communicated from a client application and processed for network security operations at the local protocol sever of within the same client device.