Controlling network access using negotiated encryption programs based on resource requirements
AssigneeCalix, Inc.
InventorsYouwu Tu, Yongsheng Xue, Tian Deng
Life of this patent
Estimating the term…
Abstract
A component controlling network access between a client and a server. The component determines, based on a first negotiation proposal from the client, a set of programs compatible with the client and determines, based on the set of programs and resources required by each program of the set of programs, a second negotiation proposal. The component sends the second negotiation proposal to the client. In this way, the component determines its negotiation proposal with a consideration of resource requirement of each program in order to avoid resource overload for the component.
Claims17
A method for controlling network access, executed by a component between a client and a server, comprising:
- defining resource efficiency of a program in terms of minimal comparative use of computing resources including CPU bandwidth and memory usage based on execution time;
- determining, based on a first negotiation proposal from the client, a set of programs for use in cryptographic key exchange compatible with the client, wherein the set of programs comprises Diffie Hellman with Group Exchange, Elliptic Curve, and RSA series;
- determining, based on the set of programs and resources required by each program of the set of programs, a second negotiation proposal by determining a resource efficient program among the set of programs, using the resource efficient program for the second negotiation proposal;
- and
- sending the second negotiation proposal to the client.
An apparatus for controlling network access, wherein the apparatus is between a client and a server, comprising:
- one or more processors;
- and
- a memory for storing one or more programs;
- wherein the one or more programs, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
- defining resource efficiency of a program in terms of minimal comparative use of computing resources including CPU bandwidth and memory usage based on execution time;
- determining, based on a first negotiation proposal from the client, a set of programs for use in cryptographic key exchange compatible with the client, wherein the set of programs comprises Diffie Hellman with Group Exchange, Elliptic Curve, and RSA series;
- determining, based on the set of programs and resources required by each program of the set of programs, a second negotiation proposal by determining a resource efficient program among the set of programs, using the resource efficient program for the second negotiation proposal;
- and
- sending the second negotiation proposal to the client.
A computer-readable storage medium storing instructions thereon that when executed cause one or more processors to:
- define resource efficiency of a program in terms of minimal comparative use of computing resources including CPU bandwidth and memory usage based on execution time;
- determine, based on a first negotiation proposal from the client, a set of programs for use in cryptographic key exchange compatible with the client, wherein the set of programs comprises Diffie Hellman with Group Exchange, Elliptic Curve, and RSA series;
- determine, based on the set of programs and resources required by each program of the set of programs, a second negotiation proposal by determining a resource efficient program among the set of programs, using the resource efficient program for the second negotiation proposal;
- and
- send the second negotiation proposal to the client.
Dependencies are inferred from the claim text.