Detecting Shared Access via Data Stream Features

Solution Overview

Problem

Current methods for detecting shared access in networked Internet Protocol (IP) connections are inaccurate due to centralized operating systems and multiple browser versions, leading to misjudgments about IP sharing, resulting in income loss for operators.

Innovation Solution

A method that involves receiving application layer packets from user terminals, extracting a public network IP and data stream features, determining the number of user terminals based on these features, and implementing access control if the number exceeds a threshold, thereby improving detection accuracy and reducing network burden.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Difficulty of detecting and measuring

If the number of browser versions is used to detect shared access, then detection capability is provided, but misjudgement occurs when a single user terminal uses multiple browser versions

Engineering Contradiction:

Improvedetection capabilityVSAvoiddetection accuracy

Core Design Contradiction:

Difficulty of detecting and measuringVSMeasurement precision

Solution Approach 1:

The patent segments the detection task into multiple independent detection dimensions: operating system version detection, browser version detection, and data stream feature detection. By analyzing these separate aspects independently and combining their results, the system can distinguish between actual shared access and false positives caused by single terminals using multiple browsers or centralized OS versions.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent introduces a new detection dimension by extracting data stream features (such as sequence numbers, timestamps, or other unique identifiers within the data stream) in addition to traditional header field analysis. This additional dimension provides unique identification capability that resolves the ambiguity of using only browser or OS version counts.

Inventive Principle:

Principle #17Another dimension (Dimensionality change)

2Difficulty of detecting and measuring

If the number of operating system versions is used to detect shared access, then detection capability is provided, but misjudgement occurs when all user terminals use the same centralized operating system

Engineering Contradiction:

Improvedetection capabilityVSAvoiddetection accuracy

Core Design Contradiction:

Difficulty of detecting and measuringVSMeasurement precision

Solution Approach 1:

The patent segments the detection task into multiple independent detection dimensions: operating system version detection, browser version detection, and data stream feature detection. By analyzing these separate aspects independently and combining their results, the system can distinguish between actual shared access and false positives caused by single terminals using multiple browsers or centralized OS versions.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent uses data stream features as an intermediary element that provides unique identification without being directly influenced by OS or browser version centralization. These features act as a mediator that reveals the true number of terminals regardless of what OS or browser versions are used, solving the limitation of relying solely on OS version diversity.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Ease of manufacture

If HTTP packet header analysis is used to detect shared access, then implementation is simple, but detection accuracy deteriorates due to centralized OS versions and multiple browser versions

Engineering Contradiction:

Improveimplementation simplicityVSAvoiddetection accuracy

Core Design Contradiction:

Ease of manufactureVSMeasurement precision

Solution Approach 1:

The patent segments the detection task into multiple independent detection dimensions: operating system version detection, browser version detection, and data stream feature detection. By analyzing these separate aspects independently and combining their results, the system can distinguish between actual shared access and false positives caused by single terminals using multiple browsers or centralized OS versions.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent embeds multiple detection mechanisms within a unified framework. The data stream feature extraction is nested within the existing packet processing flow, and the combination of OS version, browser version, and data stream feature analysis is nested within the detection system, allowing complex accurate detection while maintaining implementation structure.

Inventive Principle:

Principle #7Nested doll (Nesting)

Data Source

PatentUS10447793B2Detecting shared access

Publication Date: 2019.10.15 HANGZHOU DPTECH TECH

AI summary

A method and a device for detecting shared access are provided in the present disclosure. The method comprises: receiving an application layer packet from a user terminal; extracting a public network IP accessed by the user terminal and a data stream feature from the received application layer packet, where the data stream feature uniquely identifies the user terminal; determining a number of user terminals which access the public network IP according to the data stream feature; and determining that there is shared access for the public network IP if the number of user terminals accessing the public network IP is greater than a first threshold.