Multi-Interface Diameter Signaling Monitoring and Correlation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current technologies lack an effective architecture for monitoring and correlating Diameter signaling messages across multiple interfaces, which is essential for authentication, authorization, and accounting functions in computer networks.
Innovation Solution
A method and system for multi-interface monitoring and correlation of Diameter signaling information, involving screening modules to copy and correlate Diameter messages from various interfaces, and storing the correlated information in a memory device, enabling integrated monitoring and reporting.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If Diameter signaling messages are monitored across multiple interfaces, then comprehensive network monitoring capability is improved, but system complexity increases
Solution Approach 1:
The system divides the monitoring function into separate screening modules, each responsible for specific interfaces (e.g., S6a, S11, S9 interfaces). Each module independently copies Diameter messages from its assigned interface, and the correlation module integrates these segmented views into a complete picture of signaling activity across the network.
Solution Approach 2:
A correlation module serves as an intermediary between the multiple screening modules and the final monitoring output. This mediator receives copied messages from various interfaces, correlates them based on common attributes (such as destination host, source host, or session ID), and produces integrated monitoring records that represent the complete signaling flow.
2Measurement precision
If Diameter messages are copied and correlated from multiple interfaces, then monitoring accuracy is improved, but processing time increases
Solution Approach 1:
The screening modules perform preliminary copying of Diameter messages from various interfaces before correlation occurs. By pre-copying messages and preparing them for correlation, the system can reduce the processing burden during the correlation phase and enable more efficient matching of related signaling messages across interfaces.
Solution Approach 2:
Instead of processing original messages directly through multiple complex operations, the system creates copies of Diameter messages at each screening module. These copies contain the necessary information for correlation but can be processed independently and efficiently, reducing the time required for comprehensive multi-interface analysis.
3Reliability
If comprehensive monitoring of all Diameter interfaces is implemented, then network security monitoring capability is improved, but resource consumption increases
Solution Approach 1:
Each screening module is designed with local quality - it is responsible for monitoring specific interfaces and copying only the relevant Diameter messages from those interfaces. This localized approach allows the system to maintain comprehensive security monitoring across all interfaces while reducing the processing burden on any single module, as each only handles messages from its assigned interface rather than all interfaces.
Data Source
AI summary
According to one aspect, the subject matter described herein includes a method for multi-interface monitoring and correlation of Diameter signaling information. The method includes copying Diameter information from a first signaling message traversing a first signaling interface. The method further includes copying information from a second signaling message traversing a second signaling interface. The method further includes correlating the Diameter information from the first signaling message with the information from the second signaling message and storing the correlated information in a memory device.