On-Demand Resource Access Channels for Secure Roaming
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing NAT traversal techniques for accessing roaming resources result in resource occupation and increased security risks due to continuously open access channels.
Innovation Solution
A method involving a resource access server that registers resources, confirms valid resource identifiers, and establishes access channels only upon receiving a valid access request, using randomized connection messages to create isolated channels.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If the access channel is established by the server upon a request of the client and kept open, then the client can continuously access roaming resources, but the access channel occupies a large number of resources and increases security risk
Solution Approach 1:
The patent implements periodic channel establishment by triggering channel creation only when access requests are detected, rather than maintaining continuous open channels. The server periodically monitors for access requests and establishes channels on-demand, converting continuous resource occupation into periodic, event-driven resource allocation.
Solution Approach 2:
The access channel state transitions from static (permanently open) to dynamic (established and closed based on access needs). The channel is dynamically created when a access request arrives and dynamically closed after a predetermined time period without access, allowing the system to adapt resource allocation to actual usage patterns.
2Speed
If the access channel is kept open for roaming resource access, then access speed is improved, but security risk of the target resource increases
Solution Approach 1:
The system periodically evaluates whether to maintain access channels based on actual access activity. Channels are re-established periodically when needed and closed periodically when not in use, reducing the window of vulnerability while maintaining access speed during active periods.
Solution Approach 2:
The access channel availability transitions from static (always open) to dynamic (conditionally open), where the channel state changes based on access request detection and time-out conditions. This dynamic approach maintains fast access during active sessions while minimizing security exposure during inactive periods.
3Reliability
If access channels are established for each resource access request, then security is improved by reducing resource occupation, but access latency increases due to channel establishment overhead
Solution Approach 1:
The patent introduces a predetermined time period (timeout mechanism) that keeps the channel open temporarily after establishment. If no access request occurs within this period, the channel is closed. This dynamic time-based approach balances security (closing idle channels) with efficiency (maintaining channels briefly to avoid repeated establishment overhead).
Solution Approach 2:
The server preliminarily establishes the access channel upon detecting a access request, and the channel remains open for a predetermined time period to accommodate subsequent access operations. This preliminary channel establishment avoids the need to create a new channel for every single access operation, reducing latency while maintaining security through automatic closure after inactivity.
Data Source
AI summary
A processing method for secure access to a resource access server connected to one or more resources by means of a resource client comprises: registering the resource and determining a resource identifier corresponding to the resource; receiving a resource confirm request carrying the resource identifier from the resource client; at least confirming that the resource identifier is valid, and in response to the resource confirm request, providing a resource access channel connection message to the resource client; receiving a resource access request of a user for accessing a target resource; in response to a resource access channel establishment request initiated by the resource client according to the resource access channel connection message, establishing a resource access channel between the resource access server and the resource client; and in response to the resource access request, allowing access to the target resource by means of the resource access channel.