Media Gateway Source Attribute Indication for Packet Authentication

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing media resource control methods in packet networks struggle to effectively differentiate between legitimate and illegitimate IP packets, leading to inefficient resource usage and potential attacks, as they primarily rely on destination attributes without adequately considering source attributes.

Innovation Solution

A method and system that indicate source attributes of media to media gateways, allowing for the differentiation and validation of legitimate packets by reporting and communicating source attributes during call establishment and media resource control, using extensions to protocols like H.248 to include source attributes in descriptors or packets.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If existing media resource control methods relying on destination attributes are used, then basic call establishment is achieved, but the system cannot differentiate between legitimate and illegitimate packets leading to security vulnerabilities and resource waste

Engineering Contradiction:

Improvepacket authentication reliabilityVSAvoidmedia resource control complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies preliminary action by indicating source attributes of media to the media gateway controller during call establishment before actual media transmission begins. This allows the system to pre-configure authentication criteria and filter rules, enabling the media gateway to subsequently differentiate legitimate packets from illegitimate ones without adding complex real-time analysis mechanisms.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent introduces source attributes as an intermediary element that mediates between the media gateway and media packets. These attributes act as a filtering layer that helps the gateway identify and authenticate packets without requiring the gateway itself to perform complex authentication logic, thus improving reliability while managing complexity.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Loss of energy

If all received packets are processed without distinction, then no packets are lost, but system resources are wasted processing attack or trash packets

Engineering Contradiction:

Improvesystem resource consumptionVSAvoidpacket processing completeness

Core Design Contradiction:

Loss of energyVSReliability

Solution Approach 1:

The system performs preliminary indication of source attributes before media transmission, establishing authentication criteria in advance. This allows the media gateway to proactively filter out illegitimate packets based on pre-configured source attribute matching rules, avoiding the waste of processing resources on attack or trash packets while maintaining completeness of legitimate packet processing.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent extracts and isolates the authentication function by separating source attribute indication from the main media processing flow. The media gateway controller handles the complex authentication logic by indicating source attributes, while the media gateway focuses on simple matching and filtering, thus extracting the resource-intensive authentication task from the packet processing path.

Inventive Principle:

Principle #2Taking out (Extraction)

3Adaptability or versatility

If destination attributes only are negotiated, then existing protocol compatibility is maintained, but inconsistencies between source and destination attributes cannot be detected

Engineering Contradiction:

Improveprotocol compatibilityVSAvoidattribute consistency detection precision

Core Design Contradiction:

Adaptability or versatilityVSMeasurement precision

Solution Approach 1:

The patent adds another dimension to the existing destination-attribute-only negotiation by introducing source attributes as a separate dimension of media description. This dimensional extension allows the system to maintain compatibility with existing protocols that use destination attributes while simultaneously enabling detection of inconsistencies between source and destination attributes through the additional source attribute dimension.

Inventive Principle:

Principle #17Another dimension (Dimensionality change)

Solution Approach 2:

The patent segments the media attribute negotiation into two independent parts: destination attributes for backward compatibility and source attributes for enhanced detection capability. This segmentation allows each part to serve its specific function without interfering with the other, maintaining protocol compatibility while improving attribute consistency detection.

Inventive Principle:

Principle #1Segmentation

Data Source

PatentUS7948971B2Method and device for controlling media resources, method and system for establishing calls

Publication Date: 2011.05.24 HUAWEI TECH CO LTD

AI summary

The embodiments of the present invention disclose a method and device for controlling media resources, and a method and system for establishing calls. The method for controlling media resources includes the steps of: indicating source attributes of at least one of locally transmitted media and locally received media to a first media gateway, which also includes: receiving source attributes of locally transmitted media reported from the first media gateway; when the source attributes of locally transmitted media and destination attributes of locally received media of the first media gateway are at least partly identical, determining the source attributes of locally transmitted media by receiving the destination attributes of locally received media reported from the first media gateway.