Time-Deterministic Firewall Packet Prioritization
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Firewalls struggle to process time-critical packets in real-time due to limited time budgets, leading to high latency and intermittent packet processing, which is exacerbated by varying processing times and concurrent computing operations.
Innovation Solution
A method for time-deterministic firewalls that assigns prioritization to each data packet, uses a buffer to interrupt and resume processing of lower-priority packets when high-priority packets arrive, and resumes processing of lower-priority packets once high-priority packets are fully processed.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If firewalls process all packets sequentially without prioritization, then all packets are treated equally, but time-critical packets experience high latency and processing delays
Solution Approach 1:
The patent changes the processing parameter from uniform sequential processing to prioritized processing based on packet importance. Packets are assigned different priority levels (e.g., time-critical vs. non-time-critical), and the firewall processes higher-priority packets first, thereby reducing latency for time-critical packets while maintaining fair treatment of other packets.
Solution Approach 2:
The patent introduces dynamic packet buffering where packets are held in buffers until their turn to be processed arrives. This dynamic waiting mechanism allows the firewall to control processing timing, ensuring that time-critical packets are processed promptly while less urgent packets wait appropriately, thus improving overall packet delivery reliability without excessive latency.
2Measurement precision
If firewalls allocate sufficient processing time for complete packet analysis, then processing accuracy improves, but real-time processing requirements cannot be met
Solution Approach 1:
The patent applies partial action by processing only the most critical packets with full analysis while using prioritized queues to handle less critical packets. Time-critical packets receive complete and accurate filtering analysis, while other packets are processed in priority order, ensuring that the most important packets meet both accuracy and real-time requirements without compromising overall throughput.
3Ease of operation
If firewalls process packets in arrival order, then processing is simple and consistent, but high-priority packets are delayed by low-priority packets already in processing
Solution Approach 1:
The patent transforms the static first-come-first-served processing into a dynamic prioritized processing system. Packets are assigned priority levels and placed in corresponding queues. The firewall dynamically selects packets from appropriate priority queues for processing, ensuring that time-critical packets are handled promptly regardless of their arrival order, while maintaining relatively simple processing logic through structured queue management.
4Productivity
If firewalls allow parallel processing of multiple packets, then processing throughput increases, but processing time becomes highly variable causing intermittent packet processing
Solution Approach 1:
The patent segments the packet processing system into multiple priority queues and dedicated processing threads for each queue. This segmentation allows parallel processing of packets from different priority levels while maintaining stable and predictable processing times within each queue. Time-critical packets are processed in their dedicated queue with consistent timing, while other packets are handled in parallel without causing intermittent delays.
Data Source
AI summary
The invention relates to a method for allowing data packets in a network to arrive at the recipient at definable times. The method requires a firewall in a computer network. Each data packet is processed within the firewall according to filter rules. Each data packet which is transmitted through the firewall to a recipient is assigned a prioritization for processing in the firewall. Each data packet is transmitted after the filter rules have been processed, but this transmission can be interrupted as soon as another data packet with a higher prioritization arrives at the firewall. The data packet, the processing of which was interrupted, is then stored in the buffer for processing at a later time.