Connection Management Using Dual Credentials for Congestion-Free Service Flows

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Network performance issues such as congestion negatively impact the ability of user devices to communicate effectively, particularly for devices that are part of a service entity's network, due to the use of temporary device identifiers which complicate identification and provision of preferential treatment.

Innovation Solution

User devices identify themselves using two credentials, with a first credential verifying group membership and a second credential verifying association with the service entity, allowing for the provisioning of congestion-free service flows.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If temporary device identifiers are used for user devices, then device privacy and security are improved, but device identification and group membership verification become more difficult

Engineering Contradiction:
Improvedevice securityVSAvoiddevice identification
Core Design Contradiction:
ReliabilityVSDifficulty of detecting and measuring

Solution Approach 1:

The patent introduces a service entity as an intermediary that maintains mapping between temporary device identifiers and permanent identifiers. The service entity receives verification requests containing temporary identifiers, resolves them to permanent identifiers, and performs group membership verification, thus enabling identification without exposing permanent device identifiers.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The verification process is segmented into multiple steps: first verifying the temporary device identifier with the service entity, then separately verifying the second credential with the local network device. This segmentation allows each verification step to use appropriate credentials without requiring direct exposure of permanent identifiers.

Inventive Principle:
Principle #1Segmentation

2Productivity

If preferential treatment is provided to specific devices, then network performance for those devices is improved, but network complexity and credential verification processes increase

Engineering Contradiction:
Improvenetwork performanceVSAvoidcredential verification system
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The credential verification is segmented into two independent credentials: a first credential (temporary device identifier) verified by the service entity to establish group membership, and a second credential verified by the local network device to confirm association with the service entity. This segmentation distributes verification complexity across multiple components rather than concentrating it in a single system.

Inventive Principle:
Principle #1Segmentation

3Measurement precision

If two-credential verification is implemented, then accurate group membership verification is improved, but verification process time and computational overhead increase

Engineering Contradiction:
Improvegroup membership verification accuracyVSAvoidverification process time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The service entity performs preliminary verification of the first credential (temporary device identifier) and maintains pre-computed mappings between temporary and permanent identifiers. When a connection request arrives, the service entity has already resolved the temporary identifier to a permanent identifier, so the local network device only needs to verify the second credential against the service entity's record, reducing the computational time required during the actual connection establishment.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS20250385872A1Systems and methods for connection management
Publication Date: 2025.12.18 COMCAST CABLE COMM LLC
  • US20250385872A1 patent drawing
  • US20250385872A1 patent drawing
  • US20250385872A1 patent drawing

AI summary

Methods and systems for connection management are disclosed. A service entity may provide preferential treatment to a group of devices on a network. To identify itself as being entitled to receive such treatment, a user device may send one or more credentials to a server device associated with the service entity. The credential(s) may be used to determine if the user device belongs to the group of devices. If the user device belongs to the group of devices, the service entity may establish one or more enhanced service flows that the user device can use to communicate with and/or over the network.