Encrypted Media Traffic QoE Estimation via Traffic Analysis

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The use of transport layer security (TLS) encryption in media streaming impedes conventional methods for determining quality of experience (QoE) of media services, making it difficult for network providers to manage and enhance subscriber satisfaction.

Innovation Solution

A method and system that analyze encrypted media traffic by identifying media services, detecting media interactions, and estimating key performance indicators (KPIs) without deep packet analysis, using unencrypted data and characteristics of network traffic to determine media sessions and output report data.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If TLS encryption is used to protect media traffic, then security and privacy are improved, but the ability to determine QoE and perform traffic management is worsened

Engineering Contradiction:
ImprovesecurityVSAvoidQoE determination
Core Design Contradiction:
ReliabilityVSMeasurement precision

Solution Approach 1:

The patent uses unencrypted metadata and traffic characteristics as intermediary indicators to infer QoE metrics without decrypting the encrypted media payload. By analyzing packet timing, size patterns, and protocol headers, the system indirectly measures QoE while preserving encryption security.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent replaces direct deep packet inspection (mechanical analysis of content) with statistical analysis of traffic patterns and metadata. This substitution allows QoE measurement through observable characteristics rather than direct examination of encrypted content.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Measurement precision

If deep packet analysis is used to determine QoE, then measurement precision is improved, but the ability to work with encrypted traffic is worsened

Engineering Contradiction:
ImproveQoE measurementVSAvoidencrypted traffic compatibility
Core Design Contradiction:
Measurement precisionVSAdaptability or versatility

Solution Approach 1:

The system uses metadata and traffic characteristics as intermediaries to bridge the gap between encrypted traffic and QoE measurement. These intermediaries provide measurable signals that correlate with QoE without requiring decryption of the payload.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent shifts from analyzing content-based parameters (which require decryption) to analyzing transmission-based parameters such as packet timing, size distribution, and protocol behavior. These parameter changes enable QoE measurement that is compatible with encrypted traffic.

Inventive Principle:
Principle #35Parameter changes

3Ease of operation

If conventional QoE methods are used, then ease of operation is maintained, but effectiveness with encrypted media is worsened

Engineering Contradiction:
ImproveQoE analysis simplicityVSAvoidQoE estimation accuracy
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent replaces conventional deep packet inspection methods with statistical pattern recognition methods that operate on observable traffic characteristics. This substitution maintains operational simplicity while adapting to encrypted traffic environments where conventional methods fail.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS10601869B2System and method to estimate quality of experience for consumption of encrypted media network traffic
Publication Date: 2020.03.24 NETSCOUT SYSTEMS TEXAS LLC
  • US10601869B2 patent drawing
  • US10601869B2 patent drawing
  • US10601869B2 patent drawing

AI summary

A system and method is provided for analyzing media traffic having encrypted application-layer and payload data. The method includes determining from network traffic a media service provided to a network subscriber, application-layer and payload data of the network traffic providing the media service to the network subscriber being encrypted, detecting media traffic within the network traffic providing the media service to the network subscriber, associating application-layer data of the media traffic to a media session, determining a key performance indicator (KPI) associated with the media session, and outputting report data based on the KPI.