Time-Deterministic Firewall Packet Scheduling

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Firewalls in computer networks lack the ability to process packets in real time, leading to delayed packet delivery and intermittent processing, which is problematic for time-critical traffic.

Innovation Solution

A method is introduced where a time budget is assigned to each data packet, ensuring it is transmitted only after the allocated time has expired, regardless of the actual processing time. This approach allows for predictable packet delivery and deterministic firewall behavior.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Speed

If firewalls process packets immediately upon arrival, then processing speed is improved, but processing time becomes variable and unpredictable

Engineering Contradiction:

Improvepacket processing speedVSAvoidprocessing time variability

Core Design Contradiction:

SpeedVSLoss of time

Solution Approach 1:

The patent applies preliminary action by pre-calculating and assigning time budgets to packets before they are fully processed. The firewall determines the maximum processing time required for packet filtering in advance and uses this information to schedule packet transmission times, ensuring predictable delivery without sacrificing processing speed.

Inventive Principle:

Principle #10Preliminary action

2Manufacturing precision

If firewalls allocate more processing resources to packets, then processing completeness is improved, but processing time increases

Engineering Contradiction:

Improvepacket filtering completenessVSAvoidpacket processing duration

Core Design Contradiction:

Manufacturing precisionVSDuration of action of moving object

Solution Approach 1:

The patent changes the parameter of time allocation by assigning specific time budgets to packets based on their processing requirements. Instead of providing unlimited processing time, the system calculates the necessary processing duration in advance and enforces this time constraint, ensuring complete filtering within a predictable timeframe.

Inventive Principle:

Principle #35Parameter changes

3Reliability

If firewalls buffer packets to achieve uniform processing time, then time determinism is improved, but network latency increases

Engineering Contradiction:

Improvetime deterministic behaviorVSAvoidnetwork latency

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent applies dynamics by making the buffering strategy adaptive rather than static. Packets are buffered only when necessary to achieve uniform processing times, and the buffering duration is dynamically adjusted based on the assigned time budget and actual processing requirements. This minimizes unnecessary latency while ensuring time deterministic behavior.

Inventive Principle:

Principle #15Dynamics

Data Source

PatentUS20250141813A1Packet Delays For Time-Deterministic Firewalls

Publication Date: 2025.05.01 HIRSCHMANN AUTOMATION AND CONTROL GMBH

AI summary

The invention relates to a method for allowing data packets in a network to arrive at the recipient at definable times. The method requires a firewall in a computer network. Each data packet which is transmitted through the firewall to a recipient is assigned a time budget for processing in the firewall. Each data packet is then transmitted to the recipient through the firewall only after the time budget has expired. The time budget is defined based on the maximum possible processing time in the firewall.