Session Recovery Using Pre-Stored State Information
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In client-server mode, re-establishing a secure session after interruption involves multiple interactions and CPU-intensive key exchange and authentication processes, leading to significant delays and resource waste, making it impractical for quick session recovery.
Innovation Solution
A method and apparatus for quickly recovering sessions by sending and decrypting pre-established session and state information between a client and server, using encrypted keys to restore the session without re-generating keys or re-authenticating, allowing for complete recovery without server storage of session-related information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a complete session establishment process is initiated again after session interruption, then the session can be re-established with proper authentication and key exchange, but significant time delay and CPU load occur
Solution Approach 1:
The patent applies preliminary action by pre-establishing and storing session information including encryption keys and authentication data before session interruption occurs. When interruption happens, the client and server retrieve and verify this pre-stored information instead of performing complete key exchange and authentication again, thus maintaining security while dramatically reducing recovery time
Solution Approach 2:
The patent uses copying by creating and storing a copy of the session state information (including master keys, TE keys, and authentication data) on both client and server sides during normal session operation. This copied session state can be quickly restored after interruption without regenerating the original keys through computationally intensive processes
2Reliability
If key exchange and authentication processes are performed during session re-establishment, then secure session can be restored, but CPU load increases significantly
Solution Approach 1:
The patent applies preliminary action by pre-computing and storing session keys and authentication data before session interruption. When recovery is needed, these pre-computed cryptographic elements are retrieved and verified rather than being regenerated through CPU-intensive key exchange protocols, thus maintaining security while reducing energy consumption
Solution Approach 2:
The patent uses copying by maintaining copies of cryptographic session state (master keys, traffic encryption keys, integrity protection keys) on both client and server. This allows verification of session authenticity through comparison of copied data rather than re-executing computationally expensive cryptographic key generation and exchange processes
3Reliability
If interrupted tasks are restarted from beginning, then task completion can be ensured, but time waste occurs
Solution Approach 1:
The patent applies preliminary action by pre-storing the state information of running tasks including execution progress, data buffers, and control parameters during normal session operation. When session interruption occurs, these task states are recovered and resumed from the stored checkpoint rather than restarting tasks from the beginning, ensuring task completion while avoiding time waste
Data Source
AI summary
A method for recovering sessions includes storing, by a client, session information after a session is established between the server and the client. When the session needs to be recovered upon interruption, the client sends all state information before interruption of the session and the session information to the server, and the server recovers the session upon the received session information and all state information before interruption of the session. After a session is interrupted, the server does not need to store any session-related information, thus saving the resources of the server, and all information about the previous session can be recovered completely.