Minimizing connection delay for a data session

Patent metadata

Field	Value
Publication number	US-12184737-B2
Application number	US-202318208258-A
Country	US
Kind code	B2
Filing date	Jun 10, 2023
Priority date	Jan 29, 2021
Publication date	Dec 31, 2024
Grant date	Dec 31, 2024

Abstract

One example may include identifying a communication session between a client device and a virtual private network (VPN) server has paused based on inactivity criteria, releasing communication session resources used by the communication session to a session resource pool, receiving a message at the VPN server from the client device indicating previously used session information, and re-establishing the communication session and resuming session data transfers between the client device and the VPN server using one or more of the communication session resources from the resource pool.

First claim

What is claimed is:

1. A method comprising
identifying a communication session between a client device and a virtual private network (VPN) server has paused based on inactivity criteria;
storing in memory one or more session parameters associated with the communication session;
releasing communication session resources used by the communication session to a session resource pool;
receiving a message at the VPN server from the client device indicating previously used session information, wherein the message comprises an encryption key and a token;
retrieving a client profile associated with the client device using the token; and
re-establishing the communication session between the client device and the VPN server using one or more of the communication session resources from the resource pool when the previously used session information matches the one or more session parameters stored in the client profile.

2. The method of claim 1 , comprising
allocating one or more of the released communication session resources to another communication session between the VPN server and another client device while the communication session is inactive.

3. The method of claim 1 , wherein the message is a single packet comprising the previously used session information.

4. The method of claim 1 , comprising
updating a profile to include released communication session parameters necessary to re-establish the communication session; and
populating a container or virtual machine with the released communication session parameters identified from the profile.

5. The method of claim 1 , comprising
establishing a UDP session between the client device and the server; and
establishing a TCP session between the client device and the server after the UDP session is established.

6. The method of claim 1 , wherein the released communication session resources include one or more of an active process, an allocated container, one or more IP addresses, and one or more ports.

7. The method of claim 1 , wherein the inactivity criteria comprises a timeout of an inactivity time window used to monitor activity of the communication session.

8. A virtual private network (VPN) server comprising a processor coupled to a memory configured to
identify a communication session between a client device and the VPN server has paused based on inactivity criteria;
store in the memory one or more session parameters associated with the communication session;
release communication session resources used by the communication session to a session resource pool;
receive a message from the client device indicating previously used session information, wherein the message comprises an encryption key and a token;
retrieve a client profile associated with the client device using the token; and
re-establish the communication session between the client device and the VPN server using one or more of the communication session resources from the resource pool when the previously used session information matches the one or more session parameters stored in the client profile.

9. The VPN server of claim 8 , wherein the processor is further configured to allocate one or more of the released communication session resources to another communication session between the VPN server and another client device while the communication session is inactive.

10. The VPN server of claim 8 , wherein the message is a single packet comprising the previously used session information.

11. The VPN server of claim 8 , wherein the processor is further configured to update a profile to include released communication session parameters necessary to re-establish the communication session, and populate a container or virtual machine with the released communication session parameters identified from the profile.

12. The VPN server of claim 8 , wherein the processor is further configured to establish a UDP session between the client device and the server, and establish a TCP session between the client device and the server after the UDP session is established.

13. The VPN server of claim 8 , wherein the released communication session resources include one or more of an active process, an allocated container, one or more IP addresses, and one or more ports.

14. The VPN server of claim 8 , wherein the inactivity criteria comprises a timeout of an inactivity time window used to monitor activity of the communication session.

15. A non-transitory computer readable storage medium configured to stores instructions that when executed cause a processor to perform:
identifying a communication session between a client device and a virtual private network (VPN) server has paused based on inactivity criteria;
storing in memory one or more session parameters associated with the communication session;
releasing communication session resources used by the communication session to a session resource pool;
receiving a message at the VPN server from the client device indicating previously used session information, wherein the message comprises an encryption key and a token;
retrieving a client profile associated with the client device using the token; and

re-establishing the communication session between the client device and the VPN server using one or more of the communication session resources from the resource pool when the previously used session information matches the one or more session parameters stored in the client profile.

16. The non-transitory computer readable storage medium of claim 15 , wherein the processor is further configured to perform allocating one or more of the released communication session resources to another communication session between the VPN server and another client device while the communication session is inactive.

17. The non-transitory computer readable storage medium of claim 15 , wherein the message is a single packet comprising the previously used session information.

Assignees

• Connectify Inc

Inventors

• Cunningham Kevin
• Gizis Alexander
• Prodoehl Brian

Classifications

• H04L63/0435

  wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06) · CPC title

• H04L63/061

  for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838) · CPC title

• H04L63/0807 Primary

  using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213) · CPC title

• H04L67/148

  Migration or transfer of sessions · CPC title

• H04L67/145 Primary

  avoiding end of session, e.g. keep-alive, heartbeats, resumption message or wake-up for inactive or interrupted session · CPC title