Leaky Bucket Rate Limiter for IEEE 1588 Communication Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication devices are vulnerable to attacks that overload them with interrupt-causing messages, such as those using the IEEE 1588 protocol, which can debilitate the device by constant processing, rendering it unsuitable for critical tasks.
Innovation Solution
A process limiter module, specifically a leaky bucket module, is implemented to limit the processing of IEEE 1588 packets by configuring settings that control the capture rate and enable/disable processing based on thresholds, preventing excessive resource utilization and potential attacks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the communication device processes all interrupt-causing messages, then the device maintains high responsiveness and accuracy in handling IEEE 1588 packets, but the device becomes vulnerable to attacks that overload it with excessive messages, rendering it unable to perform critical tasks
Solution Approach 1:
The patent introduces a rate-limiting intermediary mechanism that sits between the incoming interrupt-causing messages and the device's processing core. This intermediary monitors and controls the flow of messages, allowing legitimate IEEE 1588 packets to pass through while blocking or throttling excessive messages that could be part of an attack. The intermediary acts as a buffer that protects the device from being overwhelmed without preventing normal operation.
2Productivity
If the device implements no processing limits on interrupt-causing messages, then all IEEE 1588 packets are handled, but excessive resource utilization occurs during attacks, debiliting the device
Solution Approach 1:
The patent dynamically changes the processing parameters by adjusting the rate-limiting threshold based on observed message patterns. During normal operation, the threshold allows high throughput of IEEE 1588 packets. When attack patterns are detected (excessive message rates), the threshold is automatically lowered to limit resource consumption. This parameter adjustment enables the system to adapt its resource usage to current conditions, maintaining productivity when needed while preventing energy exhaustion during attacks.
3Measurement precision
If the device processes every interrupt-causing message, then complete accuracy in time synchronization is maintained, but the device becomes disabled by constant processing during attacks
Solution Approach 1:
The patent implements partial action by selectively processing only the necessary subset of interrupt-causing messages. Instead of handling every incoming message, the rate-limiting mechanism identifies and processes only those messages that fall within the legitimate IEEE 1588 protocol parameters and timing constraints. Messages that exceed these parameters are discarded without full processing. This partial processing approach maintains sufficient time synchronization accuracy for critical tasks while avoiding the disabling effect of constant processing during attacks.
Data Source
AI summary
A system and method for limited the processing of interrupt-causing messages within a communication device. A user is able to set various values for dictating the bounds of a leaky bucket processor. The leaky bucket maintains and monitors a count, and dictates whether message processing is permitted or prohibited based on the count. When a message is processed, the count is decremented. When a predetermined time passes without processing a message, the count is incremented. If the count ever reaches a predetermined low threshold value, message processing is prohibited for a predetermined time On the other hand, if the count returns to a predetermined high threshold value, processing is permitted.


