Wireless Access Point Priority Scrutiny Mechanism
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional wireless communication systems lack effective control over priority settings for message traffic, allowing malicious or improperly configured applications to disrupt Quality of Service (QoS) by assigning unauthorized priority values, which can propagate through encapsulation and tunneling operations, leading to imbalances in network traffic and potential network paralysis.
Innovation Solution
An access point monitor scrutinizes priority values assigned by mobility devices and replaces invalid or reserved values with a default 'best effort' priority before message transmission, using a reserved priority list propagated from a wireless switching point to ensure proper QoS settings are maintained, thereby preventing rogue applications from interfering with control traffic.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If trust levels are afforded over wireless links to support QoS guarantees for voice and video applications, then quality of service for real-time applications is improved, but malicious or erroneous priority values can propagate through encapsulation and tunneling operations, causing network traffic imbalance and potential network paralysis
Solution Approach 1:
The access point performs preliminary validation of priority values before encapsulating traffic in access tunnel packets. By checking whether priority values match reserved values (such as 6 or 7 in 802.1p terminology) before transmission, the system prevents unauthorized priority values from propagating through the network, thereby eliminating the harmful effect while maintaining QoS guarantees for legitimate traffic
Solution Approach 2:
The access point acts as an intermediary between mobility devices and the backhaul network. It validates and potentially modifies priority values in wireless frames before encapsulation, serving as a security checkpoint that prevents malicious priority values from reaching the trusted access tunnel while allowing legitimate QoS-marked traffic to pass through unchanged
2Loss of information
If encapsulation operations append priority values from encapsulated layers to outer headers, then priority information is preserved through tunneling, but initially improper priority values propagate through encapsulation mechanisms and are taken as valid by access tunnels
Solution Approach 1:
The access point performs preliminary validation of priority values before encapsulation operations. By checking whether the priority value in the wireless frame matches reserved values (such as 6 or 7 in 802.1p terminology) before appending it to the outer header, the system ensures that only valid priority information is preserved and propagated through the tunneling mechanism
Solution Approach 2:
The system uses the encapsulation mechanism itself as part of the security solution. By validating priority values before encapsulation and using the same encapsulation process to preserve validated priority information, the system converts a potential security vulnerability into a protective mechanism that both preserves legitimate priority information and blocks malicious values
Data Source
AI summary
A wireless access point employs monitor to scrutinize priority of mobility unit assigned priority values, and replaces invalid or reserved values to prevent rogue or poorly constructed applications (apps) from improper priority specification and subsequent imbalance of priority message transmission for control and other high-priority message traffic. The access point receives an indication of reserved message priorities from a wireless switching point at a remote end of an access tunnel providing backhaul network access to mobility units coupled to the access point. The access point stores the reserved message priorities for comparison with priorities assigned at the mobility units. Messages having invalid priorities are modified to reduce the priority to an allowed value, such as best effort, prior to the message transmission through the access tunnel to the backhaul network.