Gateway-Mediated QUIC Transport Across Time-Varying Networks
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Time-varying networks, such as satellite networks, pose challenges for broadband Internet access due to high edge-to-edge propagation delay and the non-applicability of Performance Enhancement Proxies (PEPs) with QUIC, leading to inefficient data transport and potential exposure of end-to-end information to middleboxes.
Innovation Solution
A computer-implemented method using gateway devices to establish end-to-end encrypted transport connections over time-varying networks, with gateways handling packet forwarding and encryption, supporting edge-to-edge signaling to manage name resolution and transport connections, and ensuring privacy and congestion control without relying on DNS.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If QUIC protocol is used for end-to-end encrypted transport, then data security and privacy are improved, but middleboxes cannot perform congestion control and loss recovery
Solution Approach 1:
The patent introduces gateway devices as intermediaries between end-user devices and server devices. These gateways establish separate control connections to both the end-user device and server device, enabling them to perform middlebox functions such as congestion control and loss recovery without decrypting or inspecting the encrypted QUIC data streams. The gateways act as mediators that can manage transport layer functions while preserving end-to-end encryption.
2Productivity
If PEPs are used to mitigate high delay links, then data transport performance is improved, but end-to-end encryption and new protocol deployment are prevented
Solution Approach 1:
The patent segments the transport path into multiple independent control connections: one between the end-user device and gateway, and another between the gateway and server device. This segmentation allows the gateway to perform performance enhancement functions on each segment independently while the end-to-end data payload remains encrypted and protected. The control plane is segmented while the data plane maintains end-to-end encryption.
3Loss of information
If end-to-end encrypted connections are established, then privacy is maintained, but gateway devices cannot inspect or manage transport information
Solution Approach 1:
The gateway devices function as intermediaries that establish separate control connections with both endpoints without needing to decrypt or inspect the encrypted data payload. The gateways can monitor and manage transport layer information (such as congestion control and loss recovery) through these control connections while the actual data streams remain privately encrypted between end-user devices and server devices.
4Reliability
If slow start behavior is used in high delay networks, then congestion control is achieved, but sending rate increases slowly due to long ACK reception times
Solution Approach 1:
The patent segments the transport path into multiple control connections, allowing independent congestion control on each segment. The gateway can perform congestion control and loss recovery on the high-delay segment between itself and the server device, while the end-user device can maintain a higher sending rate on the segment between itself and the gateway. This segmentation prevents the slow start behavior from bottlenecking the overall sending rate.
Data Source
AI summary
A computer-implemented method for transporting data between an end-user device and a server device for providing a network service via a time-varying network, the time-varying network including a plurality of nodes that are interconnected intermittently in time. Also, a network arrangement, a gateway device, a computer program, and a computer-readable data carrier for carrying out the method.