QUIC Handshake Transport Mode Selection for Lower CPU Overhead
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The QUIC transport protocol-based communication systems incur high resource overheads, particularly CPU overheads, due to its default data encryption service, which is twice as high as that of HTTPS based on TCP+TLS/SSL.
Innovation Solution
A QUIC transport protocol-based communication method that allows a client computing device to select between encrypted and plaintext transport modes, reducing resource consumption by opting for plaintext transport when encryption is not required, while maintaining compatibility with the QUIC transport protocol.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If QUIC transport protocol with default data encryption service is used, then transport security is improved, but CPU overheads increase significantly (twice as high as HTTPS)
Solution Approach 1:
The patent implements dynamic transport mode selection, allowing the system to switch between encrypted and plaintext transport modes based on real-time security requirements. The client can select different transport modes (encrypted or plaintext) for different data streams or communication phases, optimizing the balance between security and resource consumption. This is achieved through mode indication fields in QUIC frames and flexible key management that allows selective encryption application.
Solution Approach 2:
The patent applies encryption selectively rather than uniformly across all data transmissions. Different portions of the communication can use different encryption states - critical data uses encrypted mode while non-sensitive data uses plaintext mode. This local differentiation allows the system to maintain security where needed while reducing CPU overheads for non-critical communications, directly addressing the resource consumption problem.
2Use of energy by moving object
If plaintext transport mode is selected to reduce CPU overheads, then resource consumption is reduced, but transport security is compromised
Solution Approach 1:
The system dynamically adjusts encryption application based on security requirements. Transport modes can be changed during communication sessions, allowing transition from encrypted to plaintext mode (or vice versa) as security needs evolve. This dynamic approach enables the system to reduce resource consumption when high security is not required, while maintaining the capability to restore full security when needed.
Solution Approach 2:
Encryption is applied locally and selectively to specific data streams or message types rather than globally to all communications. The system can identify which data requires protection and apply encryption only to those portions, leaving other data in plaintext mode for efficient processing. This selective application reduces overall CPU overheads while maintaining security for critical information.
3Adaptability or versatility
If multiple transport modes are supported, then adaptability is improved, but device complexity increases
Solution Approach 1:
The patent designs the QUIC implementation to handle multiple transport modes through a unified framework. A single protocol stack manages both encrypted and plaintext modes, using common infrastructure for connection establishment, data transmission, and error handling. The mode selection logic and encryption/decryption components serve dual purposes, reducing the need for separate implementation paths and minimizing the increase in device complexity despite supporting multiple modes.
Solution Approach 2:
The system manages complexity by treating transport mode as a configurable parameter rather than a structural difference. Encryption state, key material presence, and processing intensity are adjustable parameters that can be changed based on mode selection without fundamentally altering the protocol implementation. This parameter-based approach allows flexible mode switching while maintaining a consistent, manageable codebase and implementation structure.
Data Source
AI summary
The present disclosure provides communication techniques based on QUIC transport protocol. The communication techniques comprise receiving a first handshake message sent by a client computing device; defining a second handshake message in response to the first handshake message, wherein the second handshake message includes an encrypted-transport tag and a plaintext-transport tag; sending the second handshake message to the client computing device for selecting, based on the second handshake message, a target transport mode from a plurality of transport modes; receiving a third handshake message sent by the client computing device, where the third handshake message includes identification information of the target transport mode; and performing data transport based on the target transport mode.