Cellular IoT Traffic Flow Control via Dynamic DNS-to-IP Updates
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for controlling IoT device traffic flow using IP addresses are prone to errors due to frequent changes in IP addresses associated with domain names, leading to operational inefficiencies and security risks.
Innovation Solution
Implement a system using the Policy and Charging Rules Function (PCRF) to manage traffic flow control based on domain names, with a packet data analyzer monitoring IP address changes and updating the PCRF's service profiles automatically through DNS queries, ensuring accurate and up-to-date IP address lists for whitelisting or blacklisting.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If IP addresses are used for traffic flow control, then access control can be implemented, but the control becomes inaccurate and error-prone due to frequent IP address changes associated with domain names
Solution Approach 1:
The patent introduces domain names as an intermediary layer between the access control system and the actual IP addresses. Instead of directly managing volatile IP addresses, the system manages stable domain names that resolve to IP addresses through DNS queries. This intermediary approach maintains accurate access control lists without requiring direct tracking of changing IP addresses.
Solution Approach 2:
The system performs preliminary DNS resolution to obtain IP addresses before implementing access control decisions. By resolving domain names to IP addresses in advance and maintaining a cached mapping, the system prepares accurate IP address information ahead of time, reducing the need for frequent real-time updates and improving control accuracy.
2Ease of operation
If domain names are used for traffic flow control, then management simplicity is improved, but errors increase due to IP address changes associated with domain names
Solution Approach 1:
The patent implements a feedback mechanism where the system periodically performs DNS queries to detect changes in IP addresses associated with monitored domain names. When changes are detected, the system automatically updates the access control lists with the new IP addresses. This closed-loop feedback ensures that the simplicity of domain name management does not compromise access control accuracy.
Solution Approach 2:
The system automatically monitors domain name IP address mappings and updates its own access control lists without requiring manual intervention. By self-monitoring DNS changes and self-updating the IP address information, the system maintains both operational simplicity and control accuracy simultaneously.
3Reliability
If manual IP address tracking is used, then access control can be maintained, but operational overhead increases due to frequent updates required
Solution Approach 1:
The system automatically performs DNS queries to monitor IP address changes and updates its own access control lists without requiring manual intervention. This self-service approach eliminates the operational overhead of manual tracking while maintaining reliable access control enforcement, thereby improving operational efficiency.
Solution Approach 2:
The system implements continuous monitoring of domain name IP address mappings through periodic DNS queries. This continuous automatic update mechanism ensures that access control lists remain accurate without requiring discrete manual updates, maintaining both reliability and operational efficiency through uninterrupted automated operation.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A computer-implemented system and method for automated traffic flow control using domain name for one or more devices enabled for connectivity over cellular network are disclosed. The computer-implemented method for automated traffic flow control using domain name for one or more devices enabled for connectivity includes receiving device information for the one or more devices; receiving domain name information for at least one domain name that the one or more devices are allowed to access; associating the at least one domain name with one or more internet protocol (IP) addresses; monitoring the at least one domain for change in the one or more IP addresses for that domain; and updating the one or more IP addresses of the domain name if any change in the one or more IP addresses for that domain is found.