Layer Two Proxy for Wireless Network Data Tunneling
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for mobile devices to connect to service provider networks using software tunnels are inefficient as they require both Generic Routing Encapsulation (GRE) and Internet Protocol Security (IPSec) protocols to provide layer two frames, making it difficult to solely transmit layer two frames.
Innovation Solution
Implementing a termination device as a layer two proxy that establishes a tunnel over a layer three network connection, assigns source and destination addresses, and generates layer two frames to encapsulate IP packets, thereby facilitating communication between mobile devices and a service function chain (SFC) infrastructure without the need for GRE tunnels on top of IPSec.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If GRE and IPSec protocols are used together to provide layer two frames, then mobile devices can connect to service provider networks, but the system complexity increases and network efficiency decreases
Solution Approach 1:
The patent extracts the GRE tunneling functionality from the mobile device and relocates it to the network infrastructure (gateway or router). The mobile device only needs to establish an IPSec tunnel, while the network side handles GRE frame encapsulation and forwarding, thereby reducing device complexity while maintaining connection reliability
Solution Approach 2:
The patent introduces a gateway or router as an intermediary device that acts as a GRE endpoint. This intermediary receives IPSec packets from mobile devices, extracts the layer two frames, and forwards them through GRE tunnels to the service provider network, thereby simplifying the mobile device's protocol requirements while ensuring reliable connectivity
2Adaptability or versatility
If GRE tunnels are created on top of IPSec tunnels, then layer two frames can be transmitted, but the network overhead increases and transmission efficiency decreases
Solution Approach 1:
The patent segments the tunneling functions into separate layers: IPSec handles secure transport at the network layer, while GRE handles layer two frame encapsulation at the data link layer. This segmentation allows each protocol to operate independently and efficiently, reducing overall network overhead compared to nested tunneling approaches
Data Source
AI summary
A request to establish a tunnel over a layer three network connection may be received by a proxy device. The tunnel may then be established by the proxy device. Device information and wireless network information from a mobile device may be received over the tunnel. Responsive to receipt of the device information and the wireless network information, source and destination addresses may be assigned to the mobile device. The source and destination addresses may correspond to the device information and the wireless network information. Internet protocol (IP) packets may be received, via the tunnel, from the mobile device. Layer two frames may be generated utilizing the assigned source and destination addresses. The layer two frames may encapsulate each of the IP packets. The layer two frames may be transmitted to a layer two service function chain (SFC) infrastructure.