Diameter Agent Topology Hiding for Network Security

Solution Overview

Problem

Existing Diameter network technologies face challenges in implementing flexible topology hiding, as it can disrupt message routing and requires different approaches based on trust levels between networks, making it difficult to handle both stateless and stateful transactions effectively.

Innovation Solution

A Diameter agent with a topology hiding module that determines the trust relationship between networks and modifies signaling messages to hide or restore topology information dynamically, based on the type of transaction, ensuring secure and flexible communication.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Object-affected harmful factors

If topology hiding is implemented in Diameter networks, then security and privacy of network topology information is improved, but message routing capability and transaction processing reliability deteriorate

Engineering Contradiction:

Improveexposure of topology informationVSAvoidmessage routing capability

Core Design Contradiction:

Object-affected harmful factorsVSReliability

Solution Approach 1:

The patent applies local quality by differentiating the treatment of topology information based on the type of Diameter message (stateless vs stateful transactions). For stateless transactions, topology hiding is applied to protect network information. For stateful transactions, topology information is preserved to maintain routing capability. This selective approach allows the system to optimize security where needed while maintaining functionality where required.

Inventive Principle:

Principle #3Local quality

Solution Approach 2:

The patent implements dynamics by making the topology hiding mechanism adaptive and configurable. The system can dynamically adjust whether to hide topology information based on the trust relationship between networks and the type of transaction. This dynamic configuration allows the system to respond to changing network conditions and security requirements without compromising routing capability.

Inventive Principle:

Principle #15Dynamics

2Reliability

If topology hiding is applied to all Diameter messages, then security coverage is improved, but flexibility in handling different trust relationships and transaction types deteriorates

Engineering Contradiction:

Improvesecurity coverageVSAvoidflexibility in trust relationship handling

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent applies local quality by differentiating the treatment of topology information based on the type of Diameter message (stateless vs stateful transactions). For stateless transactions, topology hiding is applied to protect network information. For stateful transactions, topology information is preserved to maintain routing capability. This selective approach allows the system to optimize security where needed while maintaining functionality where required.

Inventive Principle:

Principle #3Local quality

Solution Approach 2:

The patent implements dynamics by making the topology hiding mechanism adaptive and configurable. The system can dynamically adjust whether to hide topology information based on the trust relationship between networks and the type of transaction. This dynamic configuration allows the system to respond to changing network conditions and security requirements without compromising routing capability.

Inventive Principle:

Principle #15Dynamics

3Object-affected harmful factors

If topology information is hidden in stateless transactions, then network security is improved, but routing capability deteriorates

Engineering Contradiction:

Improvenetwork securityVSAvoidrouting capability

Core Design Contradiction:

Object-affected harmful factorsVSEase of operation

Solution Approach 1:

The patent applies local quality by differentiating the treatment of topology information based on the type of Diameter message (stateless vs stateful transactions). For stateless transactions, topology hiding is applied to protect network information. For stateful transactions, topology information is preserved to maintain routing capability. This selective approach allows the system to optimize security where needed while maintaining functionality where required.

Inventive Principle:

Principle #3Local quality

Data Source

PatentUS9967148B2Methods, systems, and computer readable media for selective diameter topology hiding

Publication Date: 2018.05.08 ORACLE INT CORP

AI summary

The subject matter described herein includes systems, methods, and computer readable media for selective Diameter topology hiding. The system includes a Diameter agent including a network interface configured to receive, from a first Diameter node in a first service provider network, a first Diameter signaling message including Diameter topology information and a Diameter topology hiding module (THM). In some aspects, the THM is configured to determine a trust relationship between the first service provider network and a second service provider network to which the first Diameter signaling message is addressed, in response to determining that the trust relationship requires at least some level of topology hiding, determine a topology hiding type based on the first Diameter signaling message, and modify, based on the topology hiding type, the Diameter topology information included in the first Diameter signaling message to hide at least some of the Diameter topology information.