VPN Connection Status Detection via Handshake Monitoring

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing VPN systems face challenges in efficiently managing VPN connections, leading to resource wastage as allocated IP addresses are not promptly reallocated when a client device becomes inactive, resulting in reduced availability for other devices.

Innovation Solution

Implementing a method for VPN connection status detection that involves selecting an IP address for a client device from a pool, providing access, receiving handshake notifications, determining a threshold time period of inactivity, disconnecting the client device, and adding the IP address back to the pool, ensuring resources are reallocated efficiently.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If VPN connections are maintained without inactivity detection, then connection stability is improved, but resource utilization deteriorates

Engineering Contradiction:
Improveconnection stabilityVSAvoidresource utilization
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The system implements feedback by monitoring handshake notifications from client devices and using this information to determine connection status. The server continuously receives feedback about client activity and adjusts resource allocation accordingly, disconnecting inactive clients to reallocate IP addresses to active users.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The system dynamically adjusts connection management based on real-time activity detection. Instead of static connection maintenance, the system dynamically monitors handshake notifications and modifies connection states based on detected inactivity periods, allowing flexible resource reallocation while maintaining stable connections for active users.

Inventive Principle:
Principle #15Dynamics

2Ease of operation

If IP addresses are allocated to client devices, then access availability is improved, but resource waste increases when clients become inactive

Engineering Contradiction:
Improveaccess availabilityVSAvoidresource waste
Core Design Contradiction:
Ease of operationVSLoss of energy

Solution Approach 1:

The system takes preliminary action by monitoring handshake notifications and detecting inactivity before it becomes problematic. By continuously tracking the time between notifications, the system can proactively disconnect inactive clients and reallocate their IP addresses before resources are wasted, ensuring efficient utilization.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system discards inactive connections after detecting a threshold time period without handshake notifications, and recovers the associated IP addresses by adding them back to the pool of available addresses. This allows the resources to be reallocated to other active client devices.

Inventive Principle:
Principle #34Discarding and recovering

3Productivity

If continuous monitoring of client activity is implemented, then resource reallocation efficiency is improved, but system complexity increases

Engineering Contradiction:
Improveresource reallocation efficiencyVSAvoidsystem complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The system implements self-service by having client devices automatically send handshake notifications to prove their presence and activity. The clients essentially monitor their own activity and communicate it to the server, reducing the need for complex server-side monitoring mechanisms while still achieving efficient resource reallocation.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS11665141B1Virtual private network connection status detection
Publication Date: 2023.05.30 UAB 360 IT
  • US11665141B1 patent drawing
  • US11665141B1 patent drawing
  • US11665141B1 patent drawing

AI summary

Virtual private network (VPN) service provider infrastructure (SPI) receives a request to access a VPN from a client device. The VPN SPI selects an Internet Protocol (IP) address for access to the VPN by the client device from a pool of IP addresses. The VPN SPI provides access to the VPN for the client device via the IP address. The VPN SPI receives one or more handshake notifications from the client device. The VPN SPI determines that a threshold time period has passed since a latest-in-time handshake notification of the one or more handshake notifications. The VPN SPI disconnects the client device from the VPN in response to determining that the threshold time period has passed. The VPN SPI adds the IP address to the pool of IP addresses in response to disconnecting the client device from the VPN.