Edge Server WebRTC QoS Enforcement via Tenant ID
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
WebRTC's end-to-end encryption prevents intermediate entities from enforcing Quality of Service (QoS) across network elements, making it difficult to define priority levels for network elements in enterprise or contact center communications.
Innovation Solution
An edge server retrieves a tenant identifier for an encrypted media stream and dynamically configures Software Defined Network (SDN) elements to enforce QoS parameters based on Service Level Agreements (SLAs), ensuring necessary network resources are allocated for WebRTC communications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If end-to-end encryption is implemented in WebRTC communications, then security against man-in-the-middle attacks is improved, but the ability to enforce Quality of Service (QoS) across network elements deteriorates
Solution Approach 1:
The patent introduces an intermediary system comprising a session border controller and network elements that act as mediators between the encrypted WebRTC communication streams and the QoS enforcement mechanisms. These intermediaries can inspect and control network traffic without breaking the end-to-end encryption, allowing QoS parameters to be enforced while maintaining security. The intermediary extracts identification information from the encrypted streams and applies appropriate QoS policies based on tenant identifiers and service level agreements.
2Reliability
If end-to-end encryption is used for WebRTC communications, then security is improved, but the ability to define priority levels for network elements deteriorates
Solution Approach 1:
The patent segments the WebRTC communication system into multiple controllable components, including session border controllers, network elements, and QoS enforcement points. Each segment can independently apply priority levels and QoS policies based on tenant identifiers extracted from the encrypted streams. This segmentation allows different priority levels to be defined for different network elements and communication streams without compromising the end-to-end encryption, enabling flexible QoS management across the network infrastructure.
Data Source
AI summary
A request to establish an encrypted media stream is received, by an edge server, for a Web Real-Time Communication (WebRTC) communication session between a first browser, and a second browser or gateway. The edge server is a boundary device between a first network and a second network. The edge server retrieves a tenant identifier for the encrypted media stream. The tenant identifier can identify a specific company or enterprise. In response to receiving the tenant identifier for the encrypted media stream for the WebRTC communication session, a list of one or more Quality-of-Service (QoS) parameters associated with the tenant is retrieved. For example, the list of QoS parameters may be based on a Service Level Agreement (SLA). The edge server dynamically sends a message to configure the second network to support the list of one or more QoS parameters associated with the tenant.