VPN Tunnel Parameter Renegotiation for Session Continuity

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing VPN tunnel connections can be interrupted due to expiring encryption keys or other parameters during time-sensitive communication sessions, such as VoIP or video teleconferencing, leading to session interruptions.

Innovation Solution

A communication device initiates renegotiation of VPN tunnel establishment parameters, such as encryption keys or IP addresses, when user interaction occurs or when existing parameters are about to expire, to maintain a stable connection and prevent interruptions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the communication device waits for VPN tunnel parameters to expire before renegotiating, then the device can maintain current connection stability, but the communication session will be interrupted when parameters expire

Engineering Contradiction:
Improveconnection stabilityVSAvoidsession interruption time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The communication device monitors the expiration time of VPN tunnel parameters and initiates renegotiation before the parameters actually expire. This preliminary action ensures that the tunnel is reestablished with fresh parameters while maintaining continuous communication sessions, thus preventing interruptions that would occur if renegotiation waited until expiration.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The system dynamically adjusts the renegotiation timing based on the remaining lifetime of current VPN parameters. Instead of using a fixed schedule, the device continuously monitors parameter expiration and triggers renegotiation at the optimal moment - early enough to prevent interruption but late enough to minimize renegotiation frequency, thereby balancing connection stability with session continuity.

Inventive Principle:
Principle #15Dynamics

2Speed

If the communication device initiates VPN tunnel parameter negotiation before user interaction, then the tunnel can be established faster, but the negotiation process consumes time during which VPN communication is not possible

Engineering Contradiction:
Improvetunnel establishment speedVSAvoidnegotiation duration
Core Design Contradiction:
SpeedVSLoss of time

Solution Approach 1:

The communication device performs VPN tunnel parameter negotiation in advance, before the user actually needs to communicate through the tunnel. By anticipating the need for tunnel establishment and completing negotiation beforehand, the system ensures that when user interaction occurs, the tunnel is already ready or can be quickly reestablished, thus achieving fast tunnel availability without wasting negotiation time during actual communication.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If the communication device renegotiates VPN tunnel parameters frequently, then the connection remains stable with fresh parameters, but the renegotiation overhead increases and may interrupt sessions

Engineering Contradiction:
Improveconnection stabilityVSAvoidcommunication efficiency
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The communication device implements dynamic renegotiation by continuously monitoring the expiration time of current VPN parameters and triggering renegotiation only when necessary - specifically, when the remaining lifetime falls below a threshold or when user interaction is detected. This dynamic approach maintains connection stability with fresh parameters while minimizing unnecessary renegotiation overhead and avoiding interruptions to active communication sessions.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The system changes the renegotiation trigger parameters based on operational context. Instead of using a fixed renegotiation interval, the device adjusts the timing based on parameter expiration proximity and user interaction state, thereby optimizing the balance between maintaining fresh parameters for stability and avoiding excessive renegotiation that would reduce communication efficiency.

Inventive Principle:
Principle #35Parameter changes

Data Source

PatentEP1863254B1Negotiating VPN tunnel establishment parameters on user's interaction
Publication Date: 2009.12.09 BLACKBERRY LTD
  • EP1863254B1 patent drawingFigure 1
  • EP1863254B1 patent drawingFigure 2

AI summary

A communication device (106) is able to establish a virtual private network (VPN) tunnel (110) with a VPN server/gateway (108). The communication device (106) includes a communication application (132) that is able to communicate time-sensitive information with the server/gateway (108) over the tunnel (110). In response to an interaction of a user with this communication application (132), the device (106) triggers a renegotiation with the server/gateway (108) of at least one establishment parameter of the tunnel (110) if any establishment parameter of the tunnel (110) will expire in less than a predefined amount of time (176).