Dynamic Service Chain Modification via Traffic Analysis

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Current network security configurations are inefficient due to manual configuration challenges, high computational resource usage, and suboptimal service chain implementations, which lead to increased latency and reduced performance, especially for flows with lower security threats.

Innovation Solution

An automation platform that receives information about service chains and network traffic, using machine learning to dynamically modify service chains by adjusting the number and percentage rates of network services based on traffic analysis, thereby optimizing security and performance.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If manual configuration of service chains is used, then network security can be maintained, but computational resource usage increases and configuration efficiency decreases

Engineering Contradiction:

Improvenetwork securityVSAvoidcomputational resource usage

Core Design Contradiction:

ReliabilityVSUse of energy by moving object

Solution Approach 1:

The system implements self-service by automatically analyzing network traffic patterns and dynamically adjusting service chain configurations without manual intervention. The automation platform monitors traffic characteristics, identifies security threats, and modifies service chain parameters autonomously, reducing computational overhead while maintaining security reliability.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The patent applies dynamics by transitioning from static manual configuration to dynamic automated adjustment of service chains. The system continuously adapts service chain parameters based on real-time traffic analysis, allowing the network security infrastructure to respond flexibly to changing threats while optimizing resource utilization.

Inventive Principle:

Principle #15Dynamics

2Reliability

If comprehensive service chains are implemented for all flows, then network security is enhanced, but latency increases and performance deteriorates

Engineering Contradiction:

Improvenetwork securityVSAvoidlatency

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The system applies local quality by customizing service chain configurations for different traffic flows based on their specific characteristics and security requirements. Instead of applying uniform comprehensive service chains to all traffic, the platform analyzes each flow and applies only the necessary security services, reducing latency for low-risk traffic while maintaining security for high-risk flows.

Inventive Principle:

Principle #3Local quality

Solution Approach 2:

The patent implements partial action by applying service chains selectively rather than universally. The automation platform determines the appropriate level of security inspection for each flow, applying full service chains only when necessary and using reduced service chains for low-risk traffic, thereby minimizing latency while maintaining adequate security coverage.

Inventive Principle:

Principle #16Partial or excessive action

3Ease of manufacture

If static service chain configuration is used, then implementation is simple, but adaptability to changing traffic patterns decreases

Engineering Contradiction:

Improveconfiguration simplicityVSAvoidadaptability to traffic patterns

Core Design Contradiction:

Ease of manufactureVSAdaptability or versatility

Solution Approach 1:

The system transitions from static to dynamic configuration by implementing automated service chain adjustment based on real-time traffic analysis. The platform continuously monitors network traffic patterns and automatically modifies service chain parameters to adapt to changing conditions, maintaining both simplicity through automation and high adaptability to evolving threats.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The patent implements feedback mechanisms by continuously monitoring network traffic and using this information to dynamically adjust service chain configurations. The automation platform receives feedback from traffic analysis, processes this information, and automatically modifies service chains accordingly, enabling the system to adapt to changing traffic patterns while maintaining configuration simplicity through automated closed-loop control.

Inventive Principle:

Principle #23Feedback

Data Source

PatentUS11677644B2Dynamically modifying a service chain based on network traffic information

Publication Date: 2023.06.13 JUNIPER NETWORKS INC

AI summary

A device may receive information associated with a service chain to be implemented in association with a flow. The information associated with the service chain may include a source network address associated with the flow, a destination network address associated with the flow, a set of protocols associated with the flow, and a set of network services, of the service chain, to be implemented in association with the flow. The device may implement the service chain in association with the flow. The device may receive network traffic information associated with the flow based on implementing the service chain in association with the flow. The device may modify the service chain based on the network traffic information associated with the flow to permit a modified service chain to be implemented in association with the flow.