# US 2018/0324258 A1 · Direct connection limitation based on a period of time

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2018/0324258 A1
- Document ID: US20180324258A1
- Status: Published application
- Kind: A1
- Application number: 15/773,010
- Filed: 2015-11-04
- Published: 2018-11-08
- Earliest claimed: 2015-11-04
- Assignees: Entit Software LLC
- Applicants: Entit Software LLC
- Inventors: Xiaoyi Wang
- Web page: https://patentgrep.com/patent/US20180324258A1

## CPC

- H04L 67/141: Setup of application sessions (admission control or resource allocation in data switching networks H04L47/70)
- H04L 9/088: {Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms (network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068)}
- H04L 67/101: based on network conditions
- H04L 67/143: Termination or inactivation of sessions, e.g. event-controlled end of session
- H04L 47/24: Traffic characterised by specific attributes, e.g. priority or QoS
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Examples herein disclose a facilitation of a direct connection between a source and a destination. In response to a request from the source to facilitate the direct connection, the examples identify the destination among multiple destinations based on available bandwidth from the multiple destinations. The examples transmit a security token to the identified destination for authentication of traffic from the source, wherein the source includes an indication of a period of time. Based on the indication of the period of time, the examples limit the direct connection.

## Claims

### Claim 1

A method, executable by a networking device, the method comprising:
in response to a request from a source to facilitate a direct connection, identifying a destination among multiple destinations based on available bandwidth from the multiple destinations;
transmitting a first key pair to the source and a second key pair to the identified destination, wherein the transmitted second key pair includes an indication of a period of time; and
limiting the direct connection based on the indication of the period of time.

### Claim 2 (depends on 1)

The method of claim 1 comprising:
receiving an activation signal from the destination to track the period of time in response to an arrival of traffic at the destination.

### Claim 3 (depends on 1)

The method of claim 1 wherein limiting the direct connection based on the indication of the period of time comprises:
transmitting a stop signal to the source in response to an expiration of the period of time.

### Claim 4 (depends on 1)

The method of claim 1 comprising:
receiving health information and the available bandwidth from each of the multiple destinations.

### Claim 5 (depends on 1)

The method of claim 1 comprising:
transmitting a response to the source wherein the response includes the first key pair and an Internet Protocol (IP) address to the identified destination.

### Claim 6 (depends on 1)

The method of claim 1 comprising:
approving the request from the source prior to transmission of the first and the second key pairs.

### Claim 7 (depends on 1)

The method of claim 1 wherein the first key pair and the second key pair are different types of key pairs.

### Claim 8 (depends on 1)

The method of claim 1 wherein the request from the source includes an events per second (EPS) information corresponding to traffic at the source.

### Claim 9

A non-transitory machine-readable storage medium comprising instructions that when executed by a processing resource cause a networking device to:
in response to a request from a source to facilitate a direct connection, identifying a destination among multiple destinations based on available bandwidth from the multiple destinations;
transmit a security token to the identified destination for authenticating traffic from the source, wherein the security token includes an indication of a period of time; and
limit the direct connection based on the indication of the period of time.

### Claim 10 (depends on 9)

The non-transitory machine-readable storage medium of claim 9 wherein to limit the direct connection based on the indication of the period of time comprises instructions that when executed by the processing resource cause the networking device to:
transmit a signal to stop a transmission of traffic from the source to the destination based upon an expiration of the period of time.

### Claim 11 (depends on 9)

The non-transitory machine-readable storage medium of claim 9 comprising instructions that when executed by the processing resource cause the networking device to:
track the period of time based upon traffic arrival at the identified destination.

### Claim 12 (depends on 9)

The non-transitory machine-readable storage medium of claim 9 comprising instructions that when executed by the processing resource cause the networking device to:
transmit a response to the source including an Internet Protocol (IP) address to the identified destination.

### Claim 13

A system comprising:
a first load balancer adaptable to:
in response to a request from a source to facilitate a direct connection, identify a destination among multiple destinations based on available bandwidth from the multiple destinations;
transmit a first key pair to the source and a second key pair to the identified destination, wherein the transmitted second key pair includes an indication of a period of time; and
limit the direct connection to the source and the identified destination based on the indication of the period of time.

### Claim 14 (depends on 13)

The system of claim 13 comprising:
a second load balancer adaptable to handle the facilitation of the direct connection when the first load balancer is unavailable.

### Claim 15 (depends on 13)

The system of claim 13 comprising:
the identified destination adaptable to transmit an activation based on an arrival of traffic from the source, wherein the activation signal indicates a tracking of an expiration of the period of time.
