Enhanced security when sending asynchronous messages

• US 9,942,203 B2
• Filed: 03/30/2015
• Issued: 04/10/2018
• Est. Priority Date: 03/30/2015
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Hopkins, Graham D., Quigly, Timothy J., Saker, Luke D. C., Stirling, Craig H., White, Matthew B.
• Primary Examiner(s): Waliullah, Mohammed
• Application Number:
  US14/672,927
• Publication Number:
  US 20160294782A1
• Time in Patent Office: 1,107 Days
• CPC Class Codes: H04L 49/90 Buffering arrangements
• CPC Class Codes: H04L 51/212 using filtering or selective blocking
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 63/168 above the transport layer

Abstract

According to one exemplary embodiment, a method for increasing security when sending a plurality of messages over a network connection is provided. The method may include determining if the plurality of messages on a staging queue satisfies a batch threshold value. The method may also include determining a security key with a message destination based on determining that the plurality of messages on the staging queue satisfies the batch threshold value. The method may then include encrypting the plurality of messages based on the determined security key. The method may further include sending the encrypted plurality of messages to the message destination over the network connection.

Claims

1. A computer system for increasing security when sending a plurality of messages over a network connection, comprising:

one or more processors, one or more computer-readable memories, one or more computer-readable tangible storage medium, and program instructions stored on at least one of the one or more tangible storage medium for execution by at least one of the one or more processors via at least one of the one or more memories, wherein the computer system is capable of performing a method comprising;

receiving, within a client device, the plurality of messages asynchronously from an application thread running on the client device;

enqueuing the received plurality of messages in a staging queue within the client device, wherein the staging queue has an amount of memory assigned to the staging queue;

determining that the plurality of messages in the staging queue satisfies a batch threshold value, wherein the batch threshold value is based on the amount of memory assigned to the staging queue;

determining a new security key with a message destination based on determining that the plurality of messages on the staging queue satisfies the batch threshold value;

encrypting the enqueued plurality of messages based on the determined new security key, wherein encrypting the plurality of messages based on the determined new security key comprises encrypting each message within the plurality of messages based on the determined new security key; and

sending the encrypted plurality of messages as a batch from the client device to the message destination over the network connection, wherein a subsequent plurality of messages is encrypted using a different security key.

2. The computer system of claim 1, wherein message destination comprises a destination queue or a destination application.

3. The computer system of claim 1, wherein the determined security key is a Secure Socket Layer (SSL) key or a Transport Layer Security (TSL) key.

4. The computer system of claim 1, wherein sending the plurality of messages comprises sending each message within the plurality of messages in immediate succession.

5. A computer program product for increasing security when sending a plurality of messages over a network connection, comprising:

one or more non-transitory computer-readable storage medium and program instructions stored on at least one of the one or more tangible storage medium, the program instructions executable by a processor, the program instructions comprising;

program instructions to receive, within a client device, the plurality of messages asynchronously from an application thread running on the client device;

program instructions to enqueue the received plurality of messages in a staging queue within the client device, wherein the staging queue has an amount of memory assigned to the staging queue;

program instructions to determine that the plurality of messages in the staging queue satisfies a batch threshold value, wherein the batch threshold value is based on the amount of memory assigned to the staging queue;

program instructions to determine a new security key with a message destination based on determining that the plurality of messages on the staging queue satisfies the batch threshold value;

program instructions to encrypt the enqueued plurality of messages based on the determined new security key, wherein encrypting the plurality of messages based on the determined new security key comprises encrypting each message within the plurality of messages based on the determined new security key; and

program instructions to send the encrypted plurality of messages as a batch from the client device to the message destination over the network connection, wherein a subsequent plurality of messages is encrypted using a different security key.

6. The computer program product of claim 5, wherein message destination comprises a destination queue or a destination application.

7. The computer program product of claim 5, wherein sending the plurality of messages comprises sending each message within the plurality of messages in immediate succession.