Diameter Routing Table Propagation for Secure AAA
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing Diameter protocol for AAA in communications networks relies heavily on DNS queries for routing, which lacks control over the route taken by messages and poses security concerns due to varying security guarantees across different IP domains, especially with the multiplication of operators and domains.
Innovation Solution
A method for propagating routing information between nodes connected via the Diameter protocol, allowing nodes to exchange and enrich each other's routing tables, thereby reducing the need for DNS queries and enabling controlled routing through trusted links by including domain, management capabilities, and node types in routing information messages.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If DNS queries are used for routing Diameter nodes, then routing flexibility is improved, but route control and security are worsened due to varying security guarantees across different IP domains
Solution Approach 1:
The patent applies preliminary action by pre-establishing routing tables in Diameter nodes that contain routing information received from trusted operators. This allows nodes to have predetermined routing paths before actual communication occurs, eliminating the need for runtime DNS queries and ensuring that messages follow pre-approved secure routes. The routing tables are populated in advance through trusted exchange mechanisms, providing both flexibility and security.
2Reliability
If routing tables are enriched with comprehensive routing information, then route control is improved, but message volume and table size increase
Solution Approach 1:
The patent applies segmentation by dividing routing information into discrete routing records that can be selectively exchanged. Each routing record contains specific routing information for particular destination domains or operators. Nodes can request and exchange only the specific routing records they need, rather than transmitting entire routing tables. This segmented approach reduces message volume while maintaining comprehensive route control capability.
3Productivity
If routing information is exchanged between connected nodes, then DNS query usage is reduced, but device complexity increases due to additional exchange protocols
Solution Approach 1:
The patent applies universality by designing the routing information exchange mechanism to utilize existing Diameter protocol capabilities and standard network procedures. The exchange of routing tables leverages established connection establishment protocols and message formatting conventions already present in the Diameter framework. This multi-functional approach allows the same protocol infrastructure to handle both traditional Diameter operations and routing information exchange, minimizing additional complexity while achieving reduced DNS dependency.
Data Source
Figure 1~2
Figure 3
AI summary
The invention concerns a method for transmitting routing information between first (DN1) and second (DN2) nodes of a plurality of nodes capable of exchanging data relative to the management of subscribers to electronic communication services, the first node and the second node being connected and having exchanged (E1, E2) the respective management capabilities thereof, the method comprising, when the management capabilities supported by both the first node and the second node comprise a discovery capability: · triggered by a predefined event, a step (E3, E9) of transmission, by the first node to the second node, of a discovery message (PDR1, PDR3) comprising at least one item of routing information included in a routing table of the first node and relative to at least a third node.