Secure Handle for Kernel Bypass in Multi-Processor Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for data communication in high-performance computer networks, such as TCP/IP, are inefficient due to high processing overhead in the kernel, leading to delays and bottlenecks in data exchange between applications in a multi-computer environment, especially when large amounts of data need to be shared.
Innovation Solution
The introduction of a secure context object handle and a new protocol suite that includes a Liquid Transport Protocol (LTP) and Liquid Flow Protocol (LFP) to facilitate efficient data communication by providing a secure and efficient method for data exchange between applications and the kernel, using a connection-oriented protocol with features like selective retransmission and token-based flow control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If TCP/IP protocol is used for data communication between applications on different host computers, then communication reliability is improved, but processing overhead in the kernel increases and communication efficiency deteriorates
Solution Approach 1:
The patent extracts the communication handling functionality from the operating system kernel to user space, creating a user-mode network stack. This allows TCP/IP communication to maintain reliability while eliminating kernel processing overhead, as the user-mode stack can be optimized without affecting kernel performance and stability.
Solution Approach 2:
The patent segments the network communication stack into separate user-mode components that can be independently optimized. By dividing the communication handling into user-space processes rather than monolithic kernel code, the system achieves both reliability through proper protocol implementation and efficiency through optimized user-mode processing.
2Reliability
If standard TCP connections are established between applications on different hosts, then communication reliability is improved, but communication latency increases
Solution Approach 1:
The patent implements connection pooling and pre-established communication channels in user space. By preparing communication paths beforehand and maintaining persistent connections at the user level, the system reduces the time required for connection establishment and data transmission while maintaining reliable communication through proper protocol handling.
3Reliability
If kernel mediates all data communication between applications, then communication security is improved, but processing overhead increases and communication speed decreases
Solution Approach 1:
The patent introduces a user-mode network stack as an intermediary between applications and the kernel. This user-mode component handles communication protocols and data transmission, acting as a mediator that maintains security through proper protocol implementation while eliminating kernel processing overhead, thereby achieving both security and high speed.
4Reliability
If TCP protocol is used for inter-processor communication in multi-processor systems, then communication reliability is improved, but communication efficiency deteriorates due to kernel involvement
Solution Approach 1:
The patent enables user-space processes to handle their own communication needs through a user-mode network stack. Applications can establish direct communication channels with other applications on the same or different hosts without kernel mediation, allowing inter-processor communication to maintain reliability through proper TCP/IP implementation while achieving high efficiency through self-service communication handling.
Data Source
AI summary
A protocol element referred to as a secure handle is described which provides an efficient and reliable method for application-to-application signaling in multi-process and multi-computer environments. The secure handle includes an absolute memory reference which allows the kernel to more quickly and efficiently associate a network data packet with an application's communication context in the kernel.