Transparent Proxy Asynchronous Processing Control Packet Delay

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional transparent proxies face challenges in managing data flow, particularly when significant on-board processing is required, as it can interfere with typical data flow, leading to data loss due to premature transmission of control packets like FIN, without either side being aware of the loss.

Innovation Solution

Implementing a system with asynchronous processing and an indicator module to monitor the operational state of processing, delaying the retransmission of control packets until processing is complete, ensuring data packets are fully processed before transmission continues.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If transparent proxy performs significant on-board processing of data packets, then security protection capability is improved, but data flow management becomes problematic leading to data loss

Engineering Contradiction:
Improvesecurity protection capabilityVSAvoiddata loss
Core Design Contradiction:
ReliabilityVSLoss of substance

Solution Approach 1:

The patent applies preliminary action by establishing an indicator variable before processing data packets to track the processing state. This allows the system to prepare control packet handling decisions in advance based on the processing status, preventing data loss before it occurs. The indicator is set to indicate whether processing is active, and this pre-established state information guides subsequent control packet transmission decisions.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent implements feedback by using the indicator variable to monitor the processing state of data packets and adjusting control packet transmission accordingly. The system continuously checks the processing status through the indicator and modifies its behavior - delaying control packets when processing is active and transmitting them when processing is complete. This feedback mechanism ensures data integrity while maintaining security protection.

Inventive Principle:
Principle #23Feedback

2Speed

If transparent proxy passes control datagrams through without processing, then data flow speed is maintained, but connection management errors occur due to premature packet transmission

Engineering Contradiction:
Improvedata flow speedVSAvoidconnection management accuracy
Core Design Contradiction:
SpeedVSReliability

Solution Approach 1:

The patent applies dynamics by making the control packet transmission behavior adaptive rather than static. The system dynamically adjusts its handling of control packets based on the real-time processing state indicated by the indicator variable. When processing is active, control packets are delayed; when processing is complete, they are transmitted immediately. This dynamic approach maintains both speed and reliability.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The indicator variable serves as an intermediary element between the data processing function and the control packet transmission function. It mediates the interaction by providing status information that allows the transmission function to make informed decisions about when to send control packets, preventing premature transmission while maintaining efficient data flow.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Productivity

If transparent proxy processes data packets asynchronously, then processing efficiency is improved, but control packet transmission timing becomes complex

Engineering Contradiction:
Improveprocessing efficiencyVSAvoidcontrol packet transmission control
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The patent extracts the timing control logic from the complex asynchronous processing by using a separate indicator variable that captures the essential state information. This extraction simplifies the control mechanism - instead of complex timing coordination within the asynchronous processing, the system uses the indicator to determine when control packets should be transmitted, significantly reducing control complexity while maintaining high processing efficiency.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentUS9009332B1Protection against network-based malicious activity utilizing transparent proxy services
Publication Date: 2015.04.14 AO KASPERSKY LAB
  • US9009332B1 patent drawing
  • US9009332B1 patent drawing
  • US9009332B1 patent drawing

AI summary

Transparent proxy services are provided reliably. A TCP/IP input stream is received that includes data and control packets directed to a destination address that is different from a network address of the proxy. Incoming TCP data packets and control packets are intercepted. Intercepted data packets are processed asynchronously with respect to reception of other TCP data packets. At the start of the processing, an indicator is set to represent an active state of the processing; at the conclusion of the processing an output of the processing is sent to a determined destination for the first TCP data packet, and the indicator is set to represent a non-active state of the processing. In response to the state of the indicator representing the active state of the processing, control packets are delayed by the proxy.