Secure Link Handshake Whitelisting for Protocol Message Delivery
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing secure link configurations between peer devices in computer networks often result in dropped protocol messages during the handshake process due to the need for manual configuration and the inability to encrypt certain packet types until encryption keys are established, especially in geographically distant locations.
Innovation Solution
Automated systems and methods that include a whitelist of protocols to be sent without encryption, allowing peer devices to configure secure links by exchanging this whitelist during the handshake process, ensuring that supported protocols are not encrypted and others are encrypted, thereby reducing dropped packets.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual configuration is used to accept unencrypted packets for protocol messages, then protocol messages can be exchanged during handshake, but the configuration process becomes difficult for distant locations and time-consuming for multiple devices
Solution Approach 1:
The system automatically extracts the whitelist of protocols from the incoming request and configures itself to accept unencrypted packets for those protocols during the handshake process, eliminating the need for manual user configuration while ensuring reliable protocol message exchange
Solution Approach 2:
The system performs the configuration action in advance by extracting the whitelist from the request before the handshake completes, pre-configuring the device to accept unencrypted protocol messages during the vulnerable window, thus avoiding configuration delays
2Reliability
If all packets are encrypted during handshake, then security is maintained, but protocol messages that require responses may be dropped
Solution Approach 1:
The system applies different encryption treatments to different packet types by extracting a whitelist of protocols that should remain unencrypted during handshake, while all other packets continue to be encrypted, thus maintaining security for data packets while ensuring reliable delivery of protocol messages
Solution Approach 2:
The system segments packets into two categories: whitelisted protocols that are sent unencrypted and all other packets that are encrypted, allowing protocol messages to be exchanged reliably while maintaining security for other data
Data Source
AI summary
A computer-implemented method for configuring secure links may include receiving, by a computing device, a request to establish an encrypted link from a peer device in a network. The method may also include identifying, by the computing device, a data type of the request to establish the encrypted link. The method may then include determining, by the computing device, that the data type is supported by the computing device. Additionally, the method may include extracting, by the computing device from the request, a whitelist of protocols to send without encryption. Furthermore, the method may include automatically reconfiguring, by the computing device, a configuration setting of the computing device to whitelist one or more protocols from the whitelist of protocols. Finally, the method may include sending, by the computing device, a response to the peer device to accept the request. Various other methods, systems, and computer-readable media are also disclosed.