Border Proxy for Real-Time Traffic Traversal and Mutual Trust
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current telecommunication networks face challenges in enabling real-time communication across private domains and global transport networks due to firewall traversal issues, which affect the quality and reliability of voice and multimedia services, and require costly and complex solutions like VPNs and SDNs.
Innovation Solution
A telecommunication device with a proxy, traverser, value-collector, authenticator, and authorizer that facilitates real-time traffic traversal across firewalls, prioritizes traffic, and establishes mutual trust between devices, allowing for secure and efficient communication while eliminating the need for costly SDN infrastructure.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If SDN overlay servers are used to transport calls through the network, then service providers can bill for their services and maintain quality control, but device complexity and infrastructure cost increase significantly
Solution Approach 1:
The patent extracts the essential functions of SDN overlay servers (billing, quality control, authentication) and implements them in a lightweight border device at the network edge. This eliminates the need for complex centralized SDN infrastructure while maintaining the critical services that SDN provides.
Solution Approach 2:
The border device acts as an intermediary between the private network and global transport network, performing authentication, authorization, and traffic management functions. This mediator approach replaces the need for complex SDN overlay architecture while maintaining service quality and billing capabilities.
2Ease of operation
If firewall traversal workarounds like STUN, TURN, or keep-alive packets are used, then real-time communication can traverse firewalls, but battery stand-by time is reduced and reliability decreases
Solution Approach 1:
The border device performs preliminary authentication and authorization actions before real-time communication begins. By pre-establishing trusted relationships and opening necessary paths through firewalls in advance, the system eliminates the need for continuous keep-alive packets, thereby improving battery life and communication reliability.
3Ease of operation
If VPN solutions are implemented to resolve NAT and firewall traversal, then centralized resolution is achieved, but complexity, cost increase and security issues are introduced
Solution Approach 1:
Instead of implementing complex, persistent VPN infrastructure, the patent uses a lightweight border device that performs NAT traversal and firewall penetration functions on-demand. This disposable approach at the network edge provides the necessary functionality without the ongoing complexity and security management overhead of VPN solutions.
Data Source
AI summary
A telecommunication device for real-time communication at a border between a global transport network and a private domain of a communication network may include a proxy for a communication protocol, means for traffic using real-time communication protocols to traverse a firewall, means for real-time traffic initiated by the communication protocol to traverse a firewall, means for measuring and collecting value information about the real-time traffic over the global transport network, means for creating mutual trust between the telecommunication device and a second device with which it communicates; and means for authorizing usage of a feature for a mutually trusted communication participant.