Pre-established Session Tokens for Network Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Establishing network application and secure communication sessions incurs significant delays due to processing overheads such as key generation, authentication, and handshaking, especially in enterprise environments where multiple users or devices attempt to connect simultaneously.
Innovation Solution
Pre-establishing sessions by analyzing session logs to identify frequently accessed applications or communication channels, and using an intermediary to perform necessary handshaking or credential exchanges before user requests, allowing immediate session utilization and load balancing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If sessions are established in real-time when users request them, then session security and authentication are ensured, but significant delays occur due to processing overhead from key generation, handshaking, and authentication
Solution Approach 1:
The system performs session establishment actions in advance by creating pre-authenticated session tokens during off-peak periods. These tokens contain pre-computed authentication credentials and encryption keys, allowing users to access sessions immediately without real-time handshaking or key generation delays.
2Productivity
If multiple users establish sessions simultaneously at the start of workday, then all users can access network resources, but processing overhead from simultaneous handshaking and authentication creates large delays
Solution Approach 1:
Session tokens are pre-generated and cached during off-peak periods before user demand occurs. When multiple users simultaneously request access at the start of the workday, they receive pre-authenticated tokens immediately without triggering simultaneous handshaking or authentication processes, thus eliminating the processing overhead bottleneck.
Solution Approach 2:
The system creates multiple copies of pre-authenticated session tokens that can be distributed simultaneously to multiple users. Each token is a self-contained copy of authentication credentials that can be validated without requiring real-time communication with the authentication server, enabling parallel user access without processing delays.
3Use of energy by moving object
If session establishment processing is performed on-demand, then system resources are conserved, but user experience deteriorates due to significant delays before sessions become usable
Solution Approach 1:
The system performs session token generation during off-peak periods when system resources are abundant and user demand is low. This preliminary action shifts the computational load to times when it does not impact user experience, while still providing immediate session access to users when they need it.
Solution Approach 2:
The system periodically regenerates session tokens in batches during off-peak hours rather than processing each user request individually in real-time. This periodic batch processing approach efficiently utilizes system resources during low-demand periods while ensuring fresh, valid tokens are available for user access during peak periods.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Embodiments described include systems and methods for management and pre- establishment of network application and secure communication sessions. Session logs may be analyzed to identify an application or secure communication sessions likely to be accessed, and prior to receiving a request to establish the session, an intermediary (e.g. another device such as an intermediary appliance or other device, or an intermediary agent on a client such as a client application) may pre-establish the session, performing any necessary handshaking or credential or key exchange processes. When the session is subsequently requested (e.g. in response to a user request), the system may immediately begin using the pre-established session. This pre-establishment may be coordinated within the enterprise providing load balancing and scheduling of session establishment to prevent large processing loads at any one point in time.