M2M Authentication Protocol Session Resumption Indicator
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing machine-to-machine (M2M) communication protocols, such as TLS/DTLS, are computationally expensive and burdensome for low-end devices and bandwidth-constrained networks, requiring extensive message exchanges and storage for session resumption states, which can be inefficient as not all devices benefit from or require session resumption.
Innovation Solution
An authentication key exchange protocol that includes a session resumption indicator in the ClientHello message to determine whether session resumption is needed, allowing the server to allocate storage and processing only for devices that require it, thereby reducing computational load and storage requirements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If TLS/DTLS protocols are used for M2M communications, then security and authentication are improved, but computational load and processing overhead increase significantly for low-end devices
Solution Approach 1:
The patent implements partial action by introducing a session resumption indicator that allows the client to indicate whether it wants to perform a full handshake or resume a previous session. This enables the system to perform only the necessary authentication steps - either a complete TLS/DTLS handshake or a simplified resumption process - thereby reducing computational load while maintaining security for devices that need it.
2Productivity
If session resumption is enabled for all devices, then communication efficiency is improved, but storage requirements increase for devices that do not require it
Solution Approach 1:
The patent applies local quality by making session resumption capability device-specific rather than universal. The server selectively maintains session resumption states only for clients that indicate they want this feature through the session resumption indicator. This ensures that storage resources are allocated locally and efficiently - only for those devices that actually require session resumption - while avoiding unnecessary storage overhead for devices that perform full handshakes each time.
3Reliability
If full handshakes are performed for every communication session, then security is maintained, but communication overhead and message exchanges increase
Solution Approach 1:
The patent implements dynamics by making the authentication process adaptive based on client needs. The session resumption indicator allows the system to dynamically switch between two authentication modes: full handshake for security-critical or first-time connections, and abbreviated resumption for subsequent connections from the same client. This dynamic approach maintains security when needed while reducing communication overhead when appropriate.
4Adaptability or versatility
If session resumption states are stored for all clients, then resumption capability is improved, but server memory usage increases unnecessarily
Solution Approach 1:
The patent applies the extraction principle by removing the unnecessary burden of universal session state storage. Instead of storing resumption states for all clients, the server extracts and stores states only for those clients that explicitly indicate they want session resumption through the indicator in their initial message. This extraction approach maintains resumption capability for needed clients while eliminating wasteful memory usage for clients that don't require it.
Data Source
AI summary
A computer implemented method of initiating a communication session between a client device and a server using an authentication key exchange protocol comprising: including the steps of receiving at the server from the client device a first communication to initiate the communication session, the first communication comprising a first session resumption indicator to indicate whether or not session resumption is required to be used by the client device; and establishing, at the server, a session resumption state for the client device based on or in response to a value of the first session resumption indicator.