Direct connection limitation based on a period of time

Patent metadata

Field	Value
Publication number	US-10880381-B2
Application number	US-201515773010-A
Country	US
Kind code	B2
Filing date	Nov 4, 2015
Priority date	Nov 4, 2015
Publication date	Dec 29, 2020
Grant date	Dec 29, 2020

Abstract

Examples herein disclose a facilitation of a direct connection between a source and a destination. In response to a request from the source to facilitate the direct connection, the examples identify the destination among multiple destinations based on available bandwidth from the multiple destinations. The examples transmit a security token to the identified destination for authentication of traffic from the source, wherein the source includes an indication of a period of time. Based on the indication of the period of time, the examples limit the direct connection.

First claim

I claim:

1. A method comprising:
in response to a connection request from a source, identifying, by a processor of a networking device, a first destination from among multiple destinations based on available bandwidths of the multiple destinations;
transmitting, by the processor of the networking device, a first security information to the source and a second security information to the first destination for authorizing a direct connection between the source and the first destination for a predetermined period of time, wherein the second security information transmitted to the first destination includes an indication of the predetermined period of time for the direct connection between the source and the first destination;
receiving, by the processor of the networking device, a signal indicating an activation of the predetermined period of time from the first destination, wherein the signal indicating the activation of the predetermined period of time is sent to the networking device in responsive in response to an arrival of encrypted data from the source at the first destination;
tracking, by the processor of the networking device, the predetermined period of time in association with the first security information and the second security information in response to receiving the signal indicating the activation of the predetermined period of time; and
limiting, by the processor of the networking device, the direct connection between the source and the first destination based on the tracking of the predetermined period of time.

2. The method of claim 1 , wherein the limiting of the direct connection between the source and the first destination comprises:
transmitting, by the processor of the networking device, a stop signal to the source and the first destination in response to an expiration of the predetermined period of time, wherein the stop signal causes the source to cease transmitting the encrypted data to the first destination and causes the first destination to cease receiving the encrypted data from the source.

3. The method of claim 1 , comprising:
receiving, by the networking device, information of the available bandwidths of the multiple destinations from the multiple destinations.

4. The method of claim 1 , comprising:
responsive to the connection request from the source, transmitting, by the processor of the networking device, a response to the source, wherein the response includes the first security information and an Internet Protocol (IP) address of the first destination.

5. The method of claim 1 , comprising:
approving, by the processor of the networking device, the connection request from the source prior to the transmitting of the first security information to the source and the second security information to the first destination.

6. The method of claim 1 , wherein the first security information comprises a private key, and the second security information comprises a public key different from the private key.

7. The method of claim 1 , wherein the connection request from the source includes an events per second (EPS) information corresponding to network traffic at the source.

8. A non-transitory machine-readable storage medium storing instructions that when executed by a processing resource cause a networking device to:
in response to a connection request from a source device, identify a first destination device from among multiple destination devices based on available bandwidths of the multiple destination devices;
transmit a first security information to the source device and a second security information to the first destination device for authenticating a direct connection between the source device and the first destination device for a predetermined period of time, wherein the second security information transmitted to the first destination device includes an indication of the predetermined period of time;
receive a signal indicating an activation of the predetermined period of time from the first destination device, wherein the signal indicating the activation of the predetermined period of time is sent to the networking device in response to an arrival of encrypted data from the source device at the first destination device;
track the predetermined period of time in association with the first security information and the second security information in response to receiving the signal indicating the activation of the predetermined period of time; and
limit the direct connection between the source device and the first destination device based on the tracking of the predetermined period of time.

9. The non-transitory machine-readable storage medium of claim 8 , wherein the instructions to limit the direct connection between the source device and the first destination device comprise instructions that when executed by the processing resource cause the networking device to:
transmit a stop signal to the source device and the first destination device in response to an expiration of the predetermined period of time, wherein the stop signal causes the source device to stop transmitting the encrypted data to the first destination device and causes the first destination device to stop receiving the encrypted data from the source device.

10. The non-transitory machine-readable storage medium of claim 8 , comprising instructions that when executed by the processing resource cause the networking device to:
responsive to the connection request from the source device, transmit a response to the source device including the first security information and an Internet Protocol (IP) address of the first destination device.

11. A networking device comprising:
a processor; and
a first memory storing instructions that when executed by the processor cause the processor to:
in response to a connection request from a source, identify a first destination from among multiple destinations based on available bandwidths of the multiple destinations;
transmit a first security information to the source and a second security information to the first destination for authorizing a direct connection between the source and the first destination for a predetermined period of time, wherein the second security information transmitted to the first destination includes an indication of the predetermined period of time;
receive a signal indicating an activation of the predetermined period of time from the first destination, wherein the signal indicating the activation of the predetermined period of time is sent to the networking device in response to an arrival of encrypted data from the source at the first destination;
track the predetermined period of time in association with the first security information and the second security information in response to receiving the signal indicating the activation of the predetermined period of time; and
limit the direct connection between the source and the first destination based on the tracking of the predetermined period of time.

12. The networking device of claim 11 , comprising:
a second memory storing instructions to handle the direct connection between the source and the first destination in response to the first memory being unavailable.

13. The method of claim 1 , wherein the source comprises a source computing device, and the multiple destinations comprise multiple destination computing devices.

14. The method of claim 1 , wherein the first security information transmitted to the source comprises a first key pair, and the second security information transmitted to the first destination comprises a second key pair,
wherein the first key pair comprises a first public key and

Assignees

• Entit Software Llc
• Micro Focus Llc

Inventors

• Wang Xiaoyi

Classifications

• H04L67/101 Primary

  based on network conditions · CPC title

• H04L47/24

  Traffic characterised by specific attributes, e.g. priority or QoS · CPC title

• H04L9/088

  Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms (network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068) · CPC title

• H04L67/143

  Termination or inactivation of sessions, e.g. event-controlled end of session · CPC title

• H04L67/141 Primary

  Setup of application sessions (admission control or resource allocation in data switching networks H04L47/70) · CPC title