Expandable RTP Header for Encrypted Stream Diagnosis
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In communication networks, particularly in Voice over IP systems, diagnosing errors in encrypted data streams using the RTP protocol is challenging due to the absence of key information during connection signaling, which is encrypted and not available to diagnostic units.
Innovation Solution
A method is introduced where an expandable header is added to data packets, allowing key information specific to each data stream to be inserted and transmitted, enabling decryption and analysis without compromising security, by using the SRTP protocol with an extended header that includes key information only during diagnosis.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data streams are encrypted using SRTP protocol with separate keys for each stream, then security is improved, but key information becomes unavailable for diagnostic analysis
Solution Approach 1:
The patent segments the data transmission process into two distinct modes: normal encrypted transmission and diagnostic analysis mode. During normal operation, only encrypted data streams are transmitted maintaining security. During diagnostic mode, a separate diagnostic data stream is introduced that carries unencrypted key information, allowing analysis without compromising ongoing security.
Solution Approach 2:
The patent introduces a diagnostic data stream as an intermediary carrier that transports key information separately from the encrypted data streams. This intermediary stream allows diagnostic equipment to obtain necessary key information for analysis while the main data streams remain encrypted and secure during normal operation.
2Difficulty of detecting and measuring
If key information is made available for diagnostic purposes, then analysis capability is improved, but security is compromised
Solution Approach 1:
The patent implements a dynamic system where the availability of key information changes based on operational mode. A control mechanism switches between normal operation (key information hidden) and diagnostic operation (key information made available through diagnostic stream). This dynamic approach allows the system to adapt its security transparency based on current needs.
Solution Approach 2:
The patent enables periodic or on-demand activation of the diagnostic data stream carrying key information. Instead of continuously exposing key information, the system can activate the diagnostic stream periodically or when specifically needed for analysis, maintaining security during normal operation while enabling analysis when required.
3Productivity
If multiple encrypted data streams are transmitted simultaneously, then communication efficiency is improved, but diagnostic complexity increases
Solution Approach 1:
The patent makes the diagnostic data stream universally applicable to multiple encrypted data streams. A single diagnostic stream can carry key information for analyzing multiple different encrypted streams, eliminating the need for separate diagnostic mechanisms for each stream and reducing overall diagnostic complexity while maintaining efficient multi-stream transmission.
Data Source
Figure 1~2
AI summary
One network protocol (RTP) each, having data packets (dp) comprising an expandable header (KE) is provided for a data stream (dsl..n) encoded in a manner individual to said data stream, and the key information (sil..n) formed in a data stream manner individual to said data stream is inserted into an expandable header (RTPH) of a data packet (dp) of the respective data stream (dsl..n) and transmitted. The key information (spl..n) is selected in a manner individual to said data stream from the expanded headers (KE) of received data packets (dp) of the respective data stream (dsl..n), and the associated encoded data stream (dsl..n) is decoded by means of at least one piece of selected data stream individual key information (sil..n). The forming and inserting of key information (sil..n) into standard expanded headers (KE) can be performed with little additional expense, thus significantly reducing the expenditure for the analysis or diagnosis of the simultaneously transmitted encoded data streams (dsl..n). Advantageously, the insertion of key information (sil..n) can be activated or initiated only if the diagnosis or analysis and/or the recording of the data streams is currently being performed.