IoT Traffic Control via Domain Name Resolution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for controlling traffic flow in IoT devices connected via cellular or wireless networks face challenges due to dynamic IP address changes, leading to errors and increased operational effort in allow-listing or deny-listing specific IP addresses, which are not flexible enough for websites with external resources and subdomains.
Innovation Solution
A system and method for automated traffic flow control using domain names, where device information is received, associated with service profiles, and monitored for IP address changes, with a traffic rule schema translator and protocol data analyzer updating IP addresses as needed to ensure accurate access control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If allow-listing or deny-listing specific IP addresses is used to control traffic flow, then access control is achieved, but continuous updating and knowledge of those addresses is required, increasing operational effort and complexity
Solution Approach 1:
The patent introduces domain names as an intermediary between devices and IP addresses. Instead of directly managing dynamic IP addresses, the system uses domain names that resolve to IP addresses through DNS. This intermediary layer allows traffic control rules to remain stable while IP addresses change, eliminating the need for continuous manual updates of IP address allow-lists or deny-lists.
2Ease of operation
If domain names are used instead of specific IP addresses for traffic control, then simplicity and flexibility are improved, but errors may occur due to IP address changes associated with domain names
Solution Approach 1:
The system implements automatic monitoring of DNS records to detect when IP addresses associated with domain names change. When changes are detected, the traffic control rules are automatically updated to reflect the new IP addresses. This feedback mechanism ensures that domain name-based control remains accurate and reliable even as underlying IP addresses change dynamically.
3Reliability
If manual management of IP address allow-lists or deny-lists is performed, then access control is enforced, but time and resources are consumed for continuous updating
Solution Approach 1:
The system automates the entire process of detecting IP address changes and updating traffic control rules. The automatic DNS monitoring and rule update mechanisms eliminate the need for manual intervention, allowing the system to self-maintain accurate access control lists without consuming human time or resources for continuous updates.
4Reliability
If traditional IP address-based filtering is used, then traffic control is achieved, but flexibility for websites with external resources and subdomains is limited
Solution Approach 1:
The patent transitions from managing traffic control at the IP address level to the domain name level, adding a higher dimension of abstraction. This allows a single domain name rule to automatically cover multiple IP addresses, subdomains, and external resources associated with that domain, providing much greater flexibility for managing access to websites and their related resources without requiring separate rules for each IP address.
Data Source
AI summary
A computer-implemented system and method for automated traffic flow control using domain name for one or more devices enabled for connectivity over cellular network are disclosed. The computer-implemented method for automated traffic flow control using domain name for one or more devices enabled for connectivity includes receiving device information for the one or more devices; receiving domain name information for at least one domain name that the one or more devices are allowed to access, denied to access or a combination thereof; associating the at least one domain name with one or more internet protocol (IP) addresses; monitoring the at least one domain for change in the one or more IP addresses for that domain; and updating the one or more IP addresses of the domain name if any change in the one or more IP addresses for that domain is found.