MAP Message Screening via SCCP Address Extraction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional SS7 network message screening techniques lack flexibility in distinguishing between different destination networks, as they primarily rely on calling party information, which does not allow for selective screening based on the receiving network's rules.
Innovation Solution
Implementing a method to screen MAP messages in transit networks using called party information, allowing for more flexible routing policies by extracting and applying screening rules based on SCCP called party addresses and MAP message types, enabling actions such as dropping, storing, or passing messages.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If screening is performed at MTP or SCCP levels using calling party information, then traffic control to or from a particular node is effective, but screening based on upper layer protocols such as MAP protocol is not effective
Solution Approach 1:
The patent extends the screening capability from traditional MTP/SCCP level to the MAP protocol layer by extracting and analyzing MAP-specific fields (such as destination address, message type, and service information) in addition to conventional calling party information. This dimensional extension enables the system to perform sophisticated screening actions including blocking specific message types, filtering by destination network, and enforcing service-level policies that were previously inaccessible at lower protocol layers.
2Reliability
If screening is performed based on SCCP calling party information, then unauthorized messages from specific sources can be blocked, but flexibility to distinguish between different destination networks is lost
Solution Approach 1:
The patent segments the screening decision logic into multiple independent evaluation stages: first evaluating calling party information for source authentication, then evaluating destination address and message type information for destination-specific policy enforcement. This segmentation allows the system to independently apply different screening criteria based on either the source or destination, enabling both security protection and destination network differentiation without compromising either capability.
Solution Approach 2:
The patent adds destination address and message type as additional screening dimensions beyond the traditional calling party information. By extracting and analyzing MAP protocol fields such as destination address, message type, and service information, the system gains the ability to distinguish between different destination networks and apply destination-specific screening rules, thereby restoring flexibility while maintaining security.
3Reliability
If conventional screening techniques are used, then network infrastructure protection is maintained, but selective screening based on receiving network rules cannot be implemented
Solution Approach 1:
The patent implements dynamic screening capabilities by enabling the system to adapt its screening behavior based on real-time analysis of destination addresses and message types. The system can dynamically adjust routing decisions, blocking or allowing messages based on destination network policies and message characteristics, thereby providing selective screening flexibility while maintaining robust network infrastructure protection through coordinated evaluation of multiple protocol layers.
Data Source
AI summary
A method for screening mobile application part (MAP) messages in a transit network is provided. Signaling messages are received from a first network. SCCP called party address information is extracted from each signaling message. If the called party address matches first SCCP screening criteria, it is determined whether the signaling message is a targeted MAP message type. If the signaling message is a targeted MAP message type, a screening action is performed. Different MAP screening criteria may be applied for different destination networks.