Communication Device Ingress Information Management System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Network communication devices face denial of service issues when processing excessive information, leading to indiscriminate discard of important data and potential network integrity problems, as traditional methods like increasing processing capacity or prioritization schemes are either costly, complex, or vulnerable to malicious attacks.
Innovation Solution
A network communication ingress system that classifies incoming information and uses a classification filter with a counter to manage storage capacity, preventing information from exceeding assigned limits and discarding data when limits are reached, while tracking discards to identify potential denial of service attempts and notify remote systems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If processing capability and storage capacity of network device are increased, then ability to handle information is improved, but cost and administrative complexity increase
Solution Approach 1:
The patent segments the storage buffer into multiple classification-specific buffers, each dedicated to a particular traffic classification. This segmentation allows independent management of storage resources for different traffic types, preventing any single classification from exhausting total buffer capacity while maintaining manageable complexity through structured organization.
Solution Approach 2:
The patent introduces classification filters that dynamically change the parameter of buffer allocation based on traffic classification. Each classification receives a predetermined portion of buffer capacity, and the system monitors and adjusts buffer usage per classification in real-time, transforming the static buffer management into a dynamic, classification-aware system.
2Quantity of substance
If storage buffer capacity is increased, then ability to store information is improved, but when buffers are full information is discarded indiscriminately including important data
Solution Approach 1:
The storage buffer is segmented into classification-specific buffers, ensuring that important information in one classification cannot be discarded when another classification exhausts its allocated portion. Each classification has protected buffer space that is monitored independently, preventing indiscriminate discard of critical data.
Solution Approach 2:
Different portions of the storage buffer have different qualities assigned based on traffic classification. Critical traffic classifications receive buffered space with higher protection and priority, while less critical classifications have correspondingly adjusted buffer allocations. This local differentiation of buffer quality prevents important information from being discarded.
3Productivity
If priority tagging schemes are implemented network-wide, then information prioritization is improved, but configuration complexity and resource expenditure increase
Solution Approach 1:
The patent implements local quality differentiation at the buffer allocation level rather than requiring network-wide priority tagging. Each classification filter locally determines buffer allocation based on predefined classification rules, eliminating the need for complex network-wide priority mapping and configuration while maintaining effective prioritization.
Solution Approach 2:
The classification filter system operates autonomously using predefined classification rules and predetermined buffer allocations. The system self-manages buffer allocation and monitoring without requiring continuous network-wide configuration or coordination, reducing administrative overhead and complexity.
4Reliability
If classification filtering is implemented, then prevention of denial of service is improved, but device complexity increases
Solution Approach 1:
The classification filtering system is segmented into modular components: classification filters, counters, and per-classification buffer management. Each component handles a specific aspect of ingress management independently, making the overall system more manageable and maintainable while providing robust denial of service prevention through structured classification handling.
Data Source
AI summary
The components of communication network device ingress systems and methods cooperate to manage information ingress and prevent denial of service attempts. A classifier classifies incoming information. A classification filter filters the information on a classification basis to prevent denial of service. The classification filter includes a classification filter counter for tracking the flow of information associated with the classification filter. A zero value in the classification filter counter indicates that a buffer capacity limit associated with the classification is reached. The counter permits information to flow to a packet buffer if the classification filter counter value is not zero and discards information if the classification filter counter value is zero. In one exemplary implementation the classification filter counter decrements a classification filter counter value when the information is placed in the buffer. The classification filter counter value is incremented when the information is processed out of the buffer.