Single Socket Secure Non-Secure Protocol Switching

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current network computing systems require multiple sockets for secure and non-secure communication, leading to socket exhaustion due to per-process and global limits on open descriptors, limiting the number of applications that can be communicated with.

Innovation Solution

A packet processing type determiner that facilitates both secure and non-secure communication over a single socket by using indicators to switch between protocols, allowing secure and non-secure data record processing without the need for multiple ports.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If multiple sockets are opened for secure and non-secure communication, then communication security is improved, but socket exhaustion occurs due to per-process and global limits on open descriptors

Engineering Contradiction:

Improvecommunication securityVSAvoidnumber of open sockets

Core Design Contradiction:

ReliabilityVSQuantity of substance

Solution Approach 1:

The patent combines secure and non-secure communication functionalities into a single socket, allowing the same socket to handle both encrypted and unencrypted data streams by detecting protocol indicators within the data packets themselves, thereby reducing the total number of sockets required

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The socket is designed to perform multiple functions by supporting both secure and non-secure communication protocols simultaneously, making it a universal communication interface that can adapt to different security requirements based on the detected protocol indicators in incoming packets

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS8914631B2Performing secure and non-secure communication over the same socket

Publication Date: 2014.12.16 ORACLE INT CORP

AI summary

A packet processing type determiner includes a non-secure packet processing module configured to process packets received over a single socket using a non-secure protocol. The packet processing type determiner also includes a data indicator checking module configured to check the packets for a first indicator denoting a beginning of a secure data record. The packet processing type determiner further includes a secure packet processing module configured to use a secure protocol to process the packets when a packet with the first indicator is detected until a packet with a second indicator denoting an end of the secure data record is detected.