Automated Wireless VPN Instantiation via NFV
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional manual provisioning and statically configured network operations for wireless VPN connections in metropolitan area networks are resource-intensive and limited in scalability, making them economically undesirable.
Innovation Solution
Automated instantiation of wireless VPN services using a VPN instantiation server that provides client configuration information to VPN clients, enabling them to establish secure and layer 2 tunnels with VPN endpoint servers, while utilizing network function virtualization to dynamically allocate computing resources based on real-time usage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual provisioning and statically configured network operations are used for wireless VPN connections, then network security and reliability are maintained, but resource consumption increases and scalability is limited
Solution Approach 1:
The system enables self-service through automated provisioning where the network automatically configures VPN connections without manual intervention. The provisioning system autonomously authenticates users, allocates resources, and configures network parameters, eliminating the need for manual provisioning while maintaining security through automated policy enforcement.
Solution Approach 2:
The patent implements dynamic resource allocation where network resources are not statically configured but dynamically assigned based on real-time需求的。The system can adapt resource allocation, configuration parameters, and security policies according to current network conditions and user requirements, improving both efficiency and scalability.
2Manufacturing precision
If manual provisioning is used for VPN client configuration, then configuration accuracy is ensured, but installation time and operational complexity increase
Solution Approach 1:
The system performs preliminary actions by pre-configuring VPN parameters, security policies, and resource allocations in the provisioning system before actual connection establishment. This allows rapid deployment since the configuration work is done in advance and automatically applied when users connect, ensuring accuracy while reducing on-site installation time.
Solution Approach 2:
The patent replaces manual mechanical provisioning processes with automated electronic provisioning systems. The system uses electronic configuration files, automated authentication mechanisms, and software-based resource allocation to substitute manual configuration activities, maintaining precision while dramatically reducing installation time and operational complexity.
3Stability of the object's composition
If statically configured network operations are used, then network stability is maintained, but adaptability to changing demands decreases
Solution Approach 1:
The system transitions from static to dynamic network operations where configuration parameters, resource allocations, and security policies can be adjusted in real-time based on network conditions and user demands. This dynamic approach maintains stability through automated policy enforcement while enabling scalability through flexible resource allocation that adapts to changing requirements.
Solution Approach 2:
The patent implements parameter changes by allowing dynamic modification of network configuration parameters such as bandwidth allocation, QoS settings, security policies, and resource provisioning levels. These parameters can be adjusted without reconfiguring the entire network infrastructure, maintaining stability while enabling adaptability to varying network demands and scaling requirements.
Data Source
AI summary
A wireless virtual private network (VPN) connection may be automatically instantiated from a wireless VPN client device using a VPN instantiation server. The VPN client device may automatically connect to the VPN instantiation server to obtain client configuration information for a VPN connection to a VPN endpoint server. The VPN instantiation server may instantiate the VPN endpoint server using a network function virtualization (NFV) platform. Then, the VPN client may establish a layer 2 tunnel across a wireless network to the VPN endpoint server.