Application-Aware Route Selection Using Multi-Parameter Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems face potential security risks during the route selection process due to the inability to effectively identify and authenticate applications, which can lead to network resource infringement and attacks by malicious traffic.
Innovation Solution
A communication method and apparatus that verifies the integrity and authenticity of application identifiers and distinguishing parameters using various methods, including integrity or authenticity verification, digital signatures, and user authentication, to ensure that applications match predefined route selection policies, thereby reducing security risks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If application identification is performed without additional verifying parameters, then the route selection process is simple and fast, but security risks increase due to inability to effectively identify applications
Solution Approach 1:
The patent applies preliminary action by pre-configuring multiple application distinguishing parameters (package name, process name, UID, etc.) in the URSP rules before route selection. When an application is detected, the communication apparatus proactively verifies these parameters against the pre-configured rules, enabling effective application identification before data transmission begins, thus improving security without adding complex real-time verification mechanisms.
Solution Approach 2:
The patent employs parameter changes by introducing multiple application distinguishing parameters (package name, process name, UID, executable path, etc.) as verification criteria in the URSP rules. By changing from simple application identification to multi-parameter verification, the system achieves more accurate application identification and enhanced security while maintaining manageable complexity through structured parameter comparison.
2Object-affected harmful factors
If multiple application distinguishing parameters are verified, then application identification accuracy improves and security risks are reduced, but the verification process becomes more complex
Solution Approach 1:
The patent applies segmentation by dividing the application verification process into multiple independent parameter checks (package name verification, process name verification, UID verification, etc.). Each parameter is verified separately against corresponding fields in the URSP rules, allowing the system to comprehensively identify applications and block malicious traffic while maintaining organized, manageable verification logic that doesn't overwhelm the device.
Solution Approach 2:
The patent uses the URSP rule structure as an intermediary that pre-organizes multiple application distinguishing parameters and their expected values. This intermediary framework enables the communication apparatus to systematically verify applications against predefined criteria, reducing security risks through comprehensive verification while simplifying the process by providing a structured comparison template rather than requiring ad-hoc complex verification logic.
3Reliability
If application verification is performed before route selection, then malicious traffic is blocked and network resources are protected, but the data transmission process is delayed
Solution Approach 1:
The patent applies preliminary action by pre-configuring comprehensive URSP rules with multiple application distinguishing parameters before actual data transmission occurs. The verification process compares detected application parameters against these pre-established rules, enabling rapid matching and decision-making. This approach ensures network resource protection through thorough verification while minimizing time loss by avoiding complex real-time analysis during active transmission.
Solution Approach 2:
The patent uses copying by creating a verification copy of application parameters (package name, process name, UID, etc.) from the running application and comparing it against the pre-configured URSP rule parameters. This copying approach enables efficient parameter matching without requiring deep inspection or modification of the actual application, thus protecting network resources while maintaining fast verification speeds that minimize transmission delays.
Data Source
Figure 1
Figure 2
Figure 3~4
AI summary
Embodiments of this application provide a communication method and a communication apparatus. The method includes: When the communication apparatus detects an application, the communication apparatus determines, based on a second application identifier and a second application distinguishing parameter that are associated with the application, that the application matches a route selection policy rule, and associates the application with a session according to the route selection policy rule. The route selection policy rule includes a first application identifier and a first application distinguishing parameter. According to the method disclosed in this application, the addition of both the first application distinguishing parameter and the second application distinguishing parameter allows the communication apparatus to effectively identify the application.