Flexible Packet Transmission for Network Segmentation Efficiency
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network segmentation methods face inefficiencies in data transmission between separated networks, particularly due to limitations in the two-way data transmission system that supports only the physical and data link layers, leading to decreased network transmission efficiency and potential data loss during large-capacity data transfers.
Innovation Solution
A method and system that generate flexible packets of varying lengths based on file size, load them into flexible frames according to priority, and transmit these frames between networks, allowing for efficient data restoration and transmission using a single path, while incorporating a unique ID for each file to manage priority and ensure secure data transfer.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If fixed packet design is used for data transmission, then network security is maintained through structured transmission, but data transmission efficiency decreases and transmission time increases
Solution Approach 1:
The patent implements dynamic packet length adaptation where the packet structure and length are adjusted based on the actual data size and transmission requirements. Instead of using fixed packet lengths, the system dynamically determines optimal packet parameters for each transmission scenario, allowing flexible framing that adapts to varying data characteristics and improves transmission efficiency while maintaining security protocols.
Solution Approach 2:
The system changes transmission parameters including packet length, frame structure, and segmentation granularity based on data size and priority. By modifying these parameters dynamically rather than using fixed values, the transmission system optimizes throughput and reduces latency for different types of data traffic while maintaining network security through controlled parameter adjustments.
2Reliability
If network segmentation is implemented to block malicious codes, then security is improved, but data transmission capability between networks is reduced
Solution Approach 1:
The patent introduces a controlled intermediary transmission mechanism that acts as a bridge between segmented networks. This intermediary system manages data transfer through controlled packetization, priority-based scheduling, and selective transmission protocols, enabling secure data exchange between isolated networks while maintaining security boundaries. The intermediary layer facilitates transmission without compromising the segmentation security model.
Solution Approach 2:
The system applies segmentation at the packet level within each network, dividing data into manageable units that can be independently controlled and tracked. This granular segmentation allows precise control over what data crosses network boundaries, enabling security policies to be applied selectively to different data segments while maintaining overall network isolation and security.
3Productivity
If traditional packet transmission is used, then transmission protocol simplicity is maintained, but transmission efficiency for multiple data types decreases
Solution Approach 1:
The patent implements dynamic packet structure adaptation where packet formats, lengths, and organizational schemes are adjusted based on data characteristics, priority levels, and network conditions. This dynamic approach allows the system to optimize transmission efficiency for different data types while maintaining a relatively simple base protocol structure, balancing complexity and performance.
Data Source
AI summary
Provided are a method and a system for transmitting multiple data, in which the method includes receiving a plurality of transmission files for transmission from a transmission device of the first network to a reception device of the second network, and temporarily storing the received files, generating flexible packets by dividing each of the plurality of transmission files by a flexible packet length determined according to size of the files, in which a transmission file in a size smaller than the flexible packet length among the plurality of transmission files is generated as one flexible packet without being divided, loading the flexible packets into a plurality of flexible frames based on a corresponding transmission file priority according to a maximum data transmission size, and transmitting the plurality of flexible frames to the second network.