SMB Security Signatures Seamless Session Switch
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for accelerating Server Message Block (SMB) data transmissions are either inaccurate and cumbersome or compromise security by turning off message authentication codes (MACs), making them insecure and susceptible to hacking.
Innovation Solution
A method and system that use a proxy client and proxy server to intercept and alter SMB security messages, establishing a secure socket connection with the server while maintaining a non-secure connection with the client, allowing for secure and accelerated data transmission over high latency links by bypassing SMB security over portions of the network.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If MACs are turned off to allow acceleration, then data transmission speed is improved, but security is compromised and data becomes susceptible to hacking
Solution Approach 1:
A proxy server is introduced as an intermediary between the client and server. The proxy server intercepts SMB security messages, extracts security data, establishes a secure socket connection with the server while maintaining a non-secure connection with the client. This allows acceleration over the proxy-client link without compromising server security, as the proxy handles security authentication with the server while enabling faster data transmission to the client.
2Productivity
If ad hoc snooping method is used for acceleration, then some data transmission benefit is achieved, but accuracy is very low and the process is cumbersome
Solution Approach 1:
The proxy server performs preliminary action by intercepting and processing security messages before data transmission begins. It extracts security data in advance and establishes secure sockets beforehand, allowing subsequent data transmissions to proceed at accelerated speeds without repeated security verification, thereby improving both efficiency and accuracy.
Data Source
AI summary
The present invention relates to systems, apparatus, and methods of securely transmitting data between a client and a server. The method includes receiving an initial security message from the client. The security message is to establish security between the server and the client. Further, the client's security parameters are set to enabled and not required. The method further includes forwarding the initial security message to the server and intercepting a security response from the server. The response includes security data and security parameters set to enabled and required. The method includes extracting the security data from the security response, and using the security data to establish a secure socket connection between the proxy server and the server. Furthermore, the method alters the request by changing the security parameters to not enabled and not required, and transmits the altered request and establishes a non-secure socket connection.