Communication Device SNI-Based Transfer Rate Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems fail to effectively control data transfer rates for specific data transmitted from server devices to terminals in encrypted communication environments, leading to inefficient bandwidth usage and potential quality of experience (QoE) issues.
Innovation Solution
A communication device and method that detect server information and domain names from request communications, using the Server Name Indication (SNI) within SSL/TLS handshakes to restrict data transfer rates based on pre-defined settings for each domain, allowing precise control of data transfer for each service even when multiple services share the same IP address.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If encrypted communication (SSL/TLS) is used to protect data transmission, then security and privacy are improved, but the ability to identify and control specific data communications is worsened
Solution Approach 1:
The patent applies preliminary action by extracting and storing the SNI (Server Name Indication) from the encrypted SSL/TLS handshake before actual data transmission begins. This allows the communication device to pre-identify the domain name associated with the encrypted connection, enabling subsequent transfer rate control based on domain-specific policies without compromising the encryption security.
2Productivity
If data transfer control is implemented for encrypted communications, then bandwidth management is improved, but the complexity of the communication device increases
Solution Approach 1:
The patent applies the extraction principle by isolating and utilizing only the necessary portion of the encrypted communication data - specifically the SNI field from the SSL/TLS handshake. By extracting this single identifier element, the system enables domain-based transfer rate control without needing to decrypt or analyze the entire encrypted data stream, thus minimizing the increase in device complexity.
3Adaptability or versatility
If multiple services share the same IP address, then resource utilization is improved, but the ability to control data transfer for each service individually is worsened
Solution Approach 1:
The patent applies local quality by using the SNI (Server Name Indication) to distinguish between different services hosted on the same IP address. Each service is identified by its unique domain name extracted from the SSL/TLS handshake, allowing the communication device to apply different transfer rate controls to each service locally, even though they share the same network endpoint.
Data Source
AI summary
A communication device includes: a server information detection unit that detects server information from a request communication requesting the initiation of encryption of a communication, the request communication being transmitted by a delivery destination device at the time when the delivery destination device receives data from a server device; a domain name detection unit that detects a domain name corresponding to the server information; and a restriction unit that performs data communication restriction with respect to the data transmitted from the server device to the delivery destination device based on the domain name.