Session Resumption Tokens Using VRF Request Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Establishing communication sessions between devices is resource-intensive and can compromise device privacy due to the exchange of session information, which can be tracked and reused by unauthorized entities.
Innovation Solution
Devices utilize session resumption tokens secured with verifiable random functions (VRFs) to verify the authenticity of session resumption requests, ensuring that only trusted devices can access stored session information, thereby preserving privacy and enabling efficient session resumption.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If session information is exchanged to establish communication sessions, then communication reliability is improved, but device privacy deteriorates due to tracking and reuse of session information
Solution Approach 1:
The patent extracts only the essential session resumption capability from the full session information exchange. Instead of exchanging complete session information including configuration details and authentication information, the system uses compact session resumption tokens that contain only the minimum necessary data to resume communication, thereby maintaining reliability while protecting privacy.
Solution Approach 2:
The patent introduces session resumption tokens as an intermediary mechanism between devices. These tokens serve as mediators that enable session resumption without requiring direct exchange of sensitive session information. The tokens can be securely transmitted and stored while preventing unauthorized tracking and reuse, thus resolving the contradiction between reliable communication and privacy protection.
2Reliability
If session information is exchanged to establish communication sessions, then communication reliability is improved, but resource consumption worsens due to repeated information exchange
Solution Approach 1:
The patent applies preliminary action by pre-establishing session resumption tokens during the initial session setup. These tokens are prepared in advance and can be quickly reused for subsequent session resumptions, eliminating the need for repeated full information exchange and reducing resource consumption while maintaining communication reliability.
Solution Approach 2:
The patent uses session resumption tokens as simplified copies of the essential session information. Instead of exchanging complete session data repeatedly, devices exchange these compact token copies that contain only the critical information needed for session resumption, significantly reducing resource consumption while preserving communication reliability.
3Productivity
If session resumption tokens are used to enable efficient session resumption, then productivity is improved, but device complexity worsens due to token management requirements
Solution Approach 1:
The patent implements self-service mechanisms where devices automatically generate, store, and utilize session resumption tokens without requiring complex manual management. The token generation and validation processes are integrated into the communication protocol itself, allowing devices to autonomously handle token management while achieving efficient session resumption and reducing operational complexity.
Data Source
AI summary
Techniques are disclosed relating to resuming a communication session. In some embodiments, a first computing device stores a session resumption token that includes metadata usable to resume a communication session. The first computing device provides a request to resume the communication session with a second computing device and receives, from the second computing device, an output of a verifiable random function (VRF) associated with the request. In response to the request, the first computing device performs a verification of the output and determines, based on the verification, whether to provide the session resumption token to the second computing device.