Leaky Bucket Rate Limiter for IEEE 1588 Communication Devices

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing communication devices are vulnerable to attacks that overload them with interrupt-causing messages, such as those using the IEEE 1588 protocol, which can debilitate the device by constant processing, rendering it unsuitable for critical tasks.

Innovation Solution

A process limiter module, specifically a leaky bucket module, is implemented to limit the processing of IEEE 1588 packets by configuring settings that control the capture rate and enable/disable processing based on thresholds, preventing excessive resource utilization and potential attacks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the communication device processes all interrupt-causing messages, then the device maintains high responsiveness and accuracy in handling IEEE 1588 packets, but the device becomes vulnerable to attacks that overload it with excessive messages, rendering it unable to perform critical tasks

Engineering Contradiction:
Improvedevice responsivenessVSAvoidattack vulnerability
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a rate-limiting intermediary mechanism that sits between the incoming interrupt-causing messages and the device's processing core. This intermediary monitors and controls the flow of messages, allowing legitimate IEEE 1588 packets to pass through while blocking or throttling excessive messages that could be part of an attack. The intermediary acts as a buffer that protects the device from being overwhelmed without preventing normal operation.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Productivity

If the device implements no processing limits on interrupt-causing messages, then all IEEE 1588 packets are handled, but excessive resource utilization occurs during attacks, debiliting the device

Engineering Contradiction:
Improvemessage processing throughputVSAvoidresource utilization
Core Design Contradiction:
ProductivityVSLoss of energy

Solution Approach 1:

The patent dynamically changes the processing parameters by adjusting the rate-limiting threshold based on observed message patterns. During normal operation, the threshold allows high throughput of IEEE 1588 packets. When attack patterns are detected (excessive message rates), the threshold is automatically lowered to limit resource consumption. This parameter adjustment enables the system to adapt its resource usage to current conditions, maintaining productivity when needed while preventing energy exhaustion during attacks.

Inventive Principle:
Principle #35Parameter changes

3Measurement precision

If the device processes every interrupt-causing message, then complete accuracy in time synchronization is maintained, but the device becomes disabled by constant processing during attacks

Engineering Contradiction:
Improvetime synchronization accuracyVSAvoidcontinuous operation capability
Core Design Contradiction:
Measurement precisionVSDuration of action of stationary object

Solution Approach 1:

The patent implements partial action by selectively processing only the necessary subset of interrupt-causing messages. Instead of handling every incoming message, the rate-limiting mechanism identifies and processes only those messages that fall within the legitimate IEEE 1588 protocol parameters and timing constraints. Messages that exceed these parameters are discarded without full processing. This partial processing approach maintains sufficient time synchronization accuracy for critical tasks while avoiding the disabling effect of constant processing during attacks.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS10009294B2Communication device for limiting processing of interrupt-causing messages
Publication Date: 2018.06.26 AVAGO TECHNOLOGIES INTERNATIONAL SALES PTE LTD
  • US10009294B2 patent drawing
  • US10009294B2 patent drawing
  • US10009294B2 patent drawing

AI summary

A system and method for limited the processing of interrupt-causing messages within a communication device. A user is able to set various values for dictating the bounds of a leaky bucket processor. The leaky bucket maintains and monitors a count, and dictates whether message processing is permitted or prohibited based on the count. When a message is processed, the count is decremented. When a predetermined time passes without processing a message, the count is incremented. If the count ever reaches a predetermined low threshold value, message processing is prohibited for a predetermined time On the other hand, if the count returns to a predetermined high threshold value, processing is permitted.