Dynamic QoS Assignment in IPsec Tunnels for Secure Voice
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The integration of cellular and WiFi networks poses security challenges due to the lack of encryption in WiFi networks, and the inability to provide Quality of Service (QoS) in DOCSIS access networks, which affects the quality of Voice over Packet (VOP) services by introducing delays and jitter.
Innovation Solution
A system that dynamically assigns QoS to active sessions within a secure data tunnel using a home agent, session border controller, and policy servers, ensuring security and maintaining QoS across multiple networks, including open access WiFi networks, by determining bandwidth requirements based on codec information and IP addresses.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If WiFi networks are used to provide wireless access, then network coverage and accessibility are improved, but security is worsened due to lack of encryption
Solution Approach 1:
The patent introduces an IPsec tunnel as an intermediary layer between the WiFi network and the core network. This tunnel provides encryption and security mechanisms that are not natively present in WiFi networks, allowing the system to maintain both the coverage benefits of WiFi and the security requirements of voice services.
Solution Approach 2:
The patent creates a composite network architecture that combines WiFi access with IPsec tunneling and QoS mechanisms. This composite structure integrates the open access nature of WiFi with the security and quality control of cellular-grade networks, resolving the contradiction between accessibility and security.
2Device complexity
If DOCSIS access network is used without QoS, then device complexity is reduced, but service quality is worsened due to delay and jitter
Solution Approach 1:
The patent implements dynamic QoS assignment where bandwidth requirements are determined based on active sessions and codec information. The system dynamically adjusts QoS parameters rather than using static configurations, allowing it to maintain service quality while adapting to changing network conditions and session types.
Solution Approach 2:
The patent changes the QoS parameters (bandwidth, delay, jitter) based on the type of active session and codec being used. By monitoring session information and dynamically adjusting parameters, the system maintains high service quality without requiring overly complex pre-configured QoS policies for every possible scenario.
3Device complexity
If static QoS assignment is used in IPsec tunnel, then device complexity is reduced, but adaptability is worsened unable to adjust to different session types
Solution Approach 1:
The patent implements a feedback mechanism where the system monitors active sessions, determines codec information, and uses this information to dynamically assign appropriate QoS parameters. This feedback loop allows the system to adapt to different session types (voice, video, data) while maintaining manageable complexity through automated decision-making based on session characteristics.
Data Source
AI summary
Quality of Service (QoS) is provided to a secure data tunnel such an an IPsec tunnel using information about the tunnel and the underlying data session to formulate a set of bandwidth requirements. A policy server operates to receive the information to create the set of bandwidth requirements which are enforced by a termination device. The termination device sets the bandwidths. QoS can be provided on a static or continuous basis. QoS can be provided on a dynamic basis. QoS can be provided at different levels depending on the type of data session. Multiple QoS can be provided for multiple data sessions existing simultaneously using multiple SSIDs.