Centralized State Engine for Distributed Security Packet Processing

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

In distributed security environments, existing packet processing devices maintain local state tables, leading to inconsistencies and inefficiencies in packet forwarding, resulting in repeated processing and resource consumption, as state information is not consistently shared across devices.

Innovation Solution

A centralized state engine is introduced to manage and retrieve state information from a cloud-based database, providing consistent and updated state information to packet processing devices, decoupling state storage from packet processing and enabling efficient storage and retrieval of state information across the network.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If each packet processing device maintains its own local state table, then each device can make independent packet forwarding decisions, but inconsistencies arise and packet processing efficiency decreases due to repeated processing

Engineering Contradiction:

ImproveIndependent packet forwarding decisionVSAvoidPacket processing efficiency

Core Design Contradiction:

Adaptability or versatilityVSProductivity

Solution Approach 1:

The patent merges the state tables of multiple distributed packet processing devices into a single centralized state database. This allows all devices to access consistent state information from the same source, eliminating inconsistencies while maintaining independent decision-making capabilities through a shared state repository.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The patent introduces a centralized state database as an intermediary between packet processing devices. This intermediary stores and manages state information centrally, allowing devices to query consistent state data without maintaining duplicate local state tables, thereby improving processing efficiency.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Device complexity

If each packet processing device maintains its own local state table, then device complexity is reduced, but resource consumption increases due to redundant state information storage and repeated scanning

Engineering Contradiction:

ImproveLocal state table managementVSAvoidResource consumption

Core Design Contradiction:

Device complexityVSLoss of energy

Solution Approach 1:

The patent combines multiple local state tables into a single centralized state database, eliminating redundant state information storage across devices. This reduces the total resource consumption for maintaining state information while simplifying device complexity by removing the need for local state management.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

Instead of each device maintaining its own copy of state information, the patent uses a centralized database that provides state information to multiple devices as needed. This eliminates redundant copies of state data while reducing the burden on individual devices.

Inventive Principle:

Principle #26Copying

3Speed

If state information is stored locally within each packet processing device, then retrieval speed is fast, but consistency across devices deteriorates leading to inaccurate forwarding decisions

Engineering Contradiction:

ImproveState information retrieval speedVSAvoidState information consistency

Core Design Contradiction:

SpeedVSReliability

Solution Approach 1:

The patent implements a feedback mechanism where the centralized state database receives updates from packet processing devices and propagates these changes to all other devices. This ensures consistency across the network while maintaining fast retrieval through direct queries to the centralized database.

Inventive Principle:

Principle #23Feedback

Solution Approach 2:

The centralized state database serves all packet processing devices simultaneously, providing both fast retrieval capability and consistent state information. The database acts as a universal state repository that maintains reliability while enabling efficient access for all devices.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS11874845B2Centralized state database storing state information

Publication Date: 2024.01.16 FORTINET INC

AI summary

Systems and methods for a cloud state engine are provided. According to one embodiment, a query pertaining to state information associated with a packet to be processed by a first packet processing device of multiple packet processing devices associated with a distributed security environment is received by a centralized state engine running on a computing device associated with the distributed security environment. The state information associated with the packet influences how the packet is to be processed by the first packet processing device. Responsive to the query, the state information is identified by the centralized state engine by processing the received query with reference to a state database containing state information for multiple packets. The identified state information is provided to the first packet processing device by generating a response to the query containing the identified state information.