Iub Gateway Decryption for WCDMA Bandwidth De-Duplication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The Iub interface in WCDMA mobile networks acts as a bottleneck for data traffic due to its encrypted data payload and complex protocol, making it opaque to existing stream de-duplication technologies, which are unable to effectively reduce bandwidth consumption and latency.
Innovation Solution
A gateway system is introduced that transparently extracts encrypted data from the Iub interface, converts it into clear IP packets for stream de-duplication, and re-encrypts it, while maintaining voice traffic integrity, using tunnel multiplexing, packet compression, and header compression to optimize bandwidth usage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If stream de-duplication is applied to reduce bandwidth consumption, then data traffic efficiency is improved, but it cannot be applied to the Iub interface because the data payload is encrypted and the protocol is nontrivial
Solution Approach 1:
A gateway is introduced as an intermediary device between the stream de-duplication optimizer and the Iub interface. The gateway performs decryption of encrypted data payloads and protocol conversion, transforming the complex Iub protocol into a format that the optimizer can process. This mediator resolves the contradiction by enabling the optimizer to work with encrypted Iub traffic without requiring changes to the Iub interface itself.
Solution Approach 2:
The system is divided into distinct functional modules: the Iub interface layer, the gateway layer (with decryption and protocol conversion capabilities), and the stream de-duplication optimizer layer. This segmentation allows each component to operate independently with its own complexity management, enabling the optimizer to focus on de-duplication while the gateway handles the complexity of encryption and protocol conversion.
2Reliability
If data traffic is encrypted on the Iub interface to ensure security, then security is improved, but bandwidth optimization becomes impossible because the encrypted payload is opaque to optimization software
Solution Approach 1:
The gateway acts as a secure intermediary that temporarily decrypts data packets to enable optimization processing. It maintains security by ensuring that decryption occurs only in the controlled environment of the gateway, and re-encrypts data before forwarding it over the Iub interface. This allows the stream de-duplication optimizer to analyze and optimize the clear text data without compromising security.
Solution Approach 2:
Decryption is performed as a preliminary action before the data reaches the stream de-duplication optimizer. By decrypting the data first, the system enables the optimizer to work with readable data for bandwidth optimization, while the subsequent re-encryption step ensures security is restored before transmission. This sequence of actions resolves the contradiction between security and optimization capability.
Data Source
Figure 1~3
Figure 4~6
Figure 7~9
AI summary
A gateway turns encrypted PS data traffic on the lub interface into clear IP packets so that WAN stream de-duplication and other optimization can be performed to eliminate the transfer of repetitive data across the lub interface, thereby increasing the throughput between the NodeB and the RNC of the WCDMA network. The gateway pulls PS data traffic out from lub without disturbing the signaling and CS traffic. The bifurcated PS data traffic is redirected to the GTP I/O port of the gateway where the stream de-duplication is applied. Deployment of the gateway is transparent to the WCDMA network. No network reconfiguration is required to deploy the gateway on the lub interface.