Enhanced security when sending asynchronous messages

• US 9,887,968 B2
• Filed: 10/26/2015
• Issued: 02/06/2018
• Est. Priority Date: 03/30/2015
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Hopkins, Graham D., Quigly, Timothy J., Saker, Luke D. C., Stirling, Craig H., White, Matthew B.
• Primary Examiner(s): King, John B
• Application Number:
  US14/922,319
• Publication Number:
  US 20160294784A1
• Time in Patent Office: 834 Days
• CPC Class Codes: H04L 49/90 Buffering arrangements
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 63/168 above the transport layer

Abstract

According to one exemplary embodiment, a method for increasing security when sending a plurality of messages over a network connection is provided. The method may include determining if the plurality of messages on a staging queue satisfies a batch threshold value. The method may also include determining a security key with a message destination based on determining that the plurality of messages on the staging queue satisfies the batch threshold value. The method may then include encrypting the plurality of messages based on the determined security key. The method may further include sending the encrypted plurality of messages to the message destination over the network connection.

Claims

1. A method for increasing security when sending a plurality of messages over a network connection, the method comprising:

receiving, within a client device, the plurality of messages asynchronously from an application thread running on the client device;

enqueuing the received plurality of messages in a staging queue within the client device wherein the staging queue has an amount of memory assigned to the staging queue;

determining that the plurality of messages in the staging queue satisfies a batch threshold value, wherein the batch threshold value is based on the amount of memory assigned to the staging queue;

determining a new security key with a message destination based on determining that the plurality of messages on the staging queue satisfies the batch threshold value;

encrypting the enqueued plurality of messages based on the determined new security key; and

sending the encrypted plurality of messages as a batch from the client device to the message destination over the network connection, wherein the determined new security key is only used for the sent plurality of messages and a subsequent plurality of messages is encrypted using a different security key.

2. The method of claim 1, wherein message destination comprises a destination queue or a destination application.

3. The method of claim 1, wherein the determined security key is a Secure Socket Layer (SSL) key or a Transport Layer Security (TSL) key.

4. The method of claim 1, wherein encrypting the plurality of messages based on the determined security key comprises encrypting each message within the plurality of messages based on the determined security key.

5. The method of claim 1, wherein sending the plurality of messages comprises sending each message within the plurality of messages in immediate succession.