VPN Infrastructure Device Adjusting Data Communication Thresholds
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
VPN systems face challenges in managing data communication efficiently, particularly when user devices are affected by malware, leading to superfluous data requests that can overload host devices and result in blacklisting and frequent disconnection/reconnection of VPN connections, wasting resources and impacting business interests.
Innovation Solution
A method involving a VSP control infrastructure that determines aggregate and average data communication thresholds, allowing for real-time adjustment of VPN data transmission to mitigate risks by comparing observed data with established thresholds, thereby conserving resources and preventing overloading.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If VPN systems allow unrestricted data communication, then user privacy and access freedom are maintained, but host devices may be overloaded by superfluous data requests from malware-infected devices
Solution Approach 1:
The patent introduces an infrastructure device as an intermediary between VPN servers and host devices. This mediator monitors data communication patterns, establishes baseline thresholds for normal operation, and selectively blocks superfluous data requests that exceed these thresholds, thereby protecting host devices from overloading while maintaining legitimate VPN traffic
Solution Approach 2:
The system implements feedback mechanisms by continuously monitoring data communication amounts between VPN servers and host devices. Baseline thresholds are established from observed communication patterns, and when traffic exceeds these thresholds, the system responds by blocking additional requests. This closed-loop feedback system dynamically adjusts to maintain reliable VPN service while preventing host device overloading
2Object-affected harmful factors
If VPN systems block superfluous data requests to prevent overloading, then host device protection is improved, but resource wastage occurs due to frequent disconnection and reconnection
Solution Approach 1:
The patent establishes baseline thresholds for data communication amounts before superfluous requests occur. By pre-defining what constitutes normal communication patterns through baseline establishment, the system can proactively block malicious traffic before it causes host device overloading or forces disconnection events that would waste resources
Solution Approach 2:
The system dynamically adjusts the parameter of data communication threshold based on established baselines. Rather than using fixed blocking rules, the threshold adapts to normal communication patterns, allowing legitimate traffic to pass while blocking only the superfluous requests that would cause overloading, thereby minimizing resource wastage from unnecessary disconnections
3Loss of energy
If VPN systems monitor and adjust data communication in real-time, then resource efficiency is improved, but system complexity increases
Solution Approach 1:
The patent divides the VPN system into distinct functional components: VPN servers that handle encryption and data transmission, infrastructure devices that perform monitoring and threshold management, and host devices that provide services. This segmentation allows each component to focus on specific tasks, simplifying the overall system architecture while enabling real-time resource efficiency through specialized monitoring functions
Data Source
AI summary
A method including determining, by an infrastructure device associated with a virtual private network (VPN), an average threshold level associated with an aggregate amount of VPN data communicated by one or more VPN servers with a host device during a reference period; determining, by the infrastructure device, an observed average aggregate amount of VPN data communicated by the one or more VPN servers with the host device during an operation period; comparing, by the infrastructure device, the observed average aggregate amount with the average threshold level; and selectively adjusting, by the infrastructure device, an amount of VPN data communicated by the one or more VPN servers with the host device during the operation period based at least in part on a result of comparing the observed average aggregate amount with the average threshold level. Various other aspects are contemplated.