Network Connectivity Layer Authentication and Protocol Selection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network communication technologies, such as TCP/IP, lack the ability to securely open network connections and require application updates for changes in network transmission protocols, leading to inefficiencies and security vulnerabilities.
Innovation Solution
A network API that creates a message-based connectivity layer capable of choosing a transport protocol, performing authentication services, and encrypting data, thereby isolating these functions from the application and allowing secure communication without the need for application updates.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If TCP/IP protocol stack is used for network communication, then network connectivity and data transmission are achieved, but authentication services cannot be performed before connection opening and security vulnerabilities exist
Solution Approach 1:
The patent implements authentication services in the connectivity layer before the TCP/IP connection is established. The connectivity layer performs credential verification and authentication exchanges prior to opening the network connection, ensuring that only authenticated applications can establish connections. This preliminary authentication action resolves the security vulnerability where TCP/IP allows connections before authentication.
Solution Approach 2:
The patent introduces a connectivity layer as an intermediary between the application layer and the TCP/IP protocol stack. This intermediate layer handles authentication services, encryption, and connection management, allowing the application to communicate securely without directly managing the complex TCP/IP handshake and authentication processes. The connectivity layer mediates between application requirements and network protocol complexities.
2Adaptability or versatility
If network protocol changes are needed for better security or performance, then communication capabilities can be improved, but application software updates are required
Solution Approach 1:
The patent extracts protocol selection and management functionality from the application layer and places it in the connectivity layer. The connectivity layer maintains a registry of available network protocols and can dynamically select appropriate protocols based on connection requirements without requiring application software updates. This extraction allows protocol changes to be made independently of application software.
Solution Approach 2:
The patent creates a universal connectivity layer that can work with multiple different network protocols (TCP/IP, UDP, custom protocols) through a unified interface. The connectivity layer abstracts protocol-specific details and provides consistent authentication and connection management across different protocols, allowing the system to adapt to different protocols without requiring separate application implementations for each protocol.
3Reliability
If authentication services are performed at the application layer, then security can be implemented, but connection must be opened before authentication which creates security vulnerabilities
Solution Approach 1:
The patent moves authentication services to the connectivity layer and performs authentication exchanges before the TCP/IP connection is fully established. The connectivity layer handles credential verification, challenge-response authentication, and security credential exchange prior to connection opening, ensuring that authentication security is maintained while preventing unauthenticated connections from being established.
Data Source
AI summary
Systems and methods enable a method including: providing a first system; generating data to be sent over a network link; determining a transport protocol that will be used to transmit data over the network communication link; negotiating connection services to be performed on data that will transmitted over the network communication link; sending a request to open a network communication link; sending a request to the connectivity services of the second system for credentials of the second system; receiving the credentials from the connectivity services module of the second system; verifying that the credentials match an authenticated computer system; opening a network connection between the first system and the second system when the second system's credentials have been verified by the connectivity services module of the first system; and transmitting the data to the second system according to the determining network protocol and negotiated connection services.