MUD Control Management Device Multi-Source File Acquisition

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The current RFC 8520 protocol limits MUD control management devices to obtaining MUD files only from the manufacturer's MUD file server, preventing them from accessing MUD files from a plurality of MUD file servers, which hinders accurate network behavior constraint for terminal devices with distributed MUD files.

Innovation Solution

A method and system that enables a MUD control management device to receive a MUD URL request from a terminal device and obtain MUD files from multiple MUD file servers based on target obtaining policies, allowing for accurate network behavior constraint by processing multiple MUD files to determine a unified target MUD file.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If the MUD control management device obtains MUD files only from the manufacturer's MUD file server according to RFC 8520 protocol, then the device follows the standard protocol and maintains simple operation, but it cannot obtain MUD files from a plurality of MUD file servers, reducing the accuracy of network behavior constraint

Engineering Contradiction:
Improveaccuracy of network behavior constraintVSAvoidability to obtain MUD files from multiple sources
Core Design Contradiction:
Measurement precisionVSAdaptability or versatility

Solution Approach 1:

The MUD control management device dynamically selects which MUD file server to access based on the device type of the terminal device. The system maintains adaptability by allowing the obtaining policy to change according to the terminal device characteristics, enabling the device to obtain MUD files from multiple different MUD file servers (manufacturer's server, third-party servers, etc.) while maintaining protocol compliance.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The system changes the parameter of MUD file source based on the terminal device type. By modifying the obtaining policy parameter according to different terminal device types, the system can switch between obtaining MUD files from the manufacturer's MUD file server or from designated third-party MUD file servers, thereby achieving both protocol compliance and enhanced adaptability for accurate network behavior constraint.

Inventive Principle:
Principle #35Parameter changes

2Reliability

If the MUD control management device is configured to obtain MUD files from multiple MUD file servers, then it can accurately constrain terminal devices with distributed MUD files, but the device complexity increases due to the need for multiple obtaining policies

Engineering Contradiction:
Improvenetwork policy enforcementVSAvoidobtaining policy configuration
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The system applies different obtaining policies locally based on terminal device types. Each terminal device type can have its own specific obtaining policy configured in the MUD control management device, allowing the system to handle different MUD file sources appropriately for different device types without requiring a single complex universal policy, thus reducing overall system complexity while maintaining reliability.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The MUD control management device acts as an intermediary that mediates between terminal devices and multiple MUD file servers. By centralizing the policy management function in this intermediary device, the complexity of managing multiple MUD file sources is contained and organized, allowing terminal devices to simply provide their device types while the intermediary handles the complex logic of selecting appropriate MUD files from different sources.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Adaptability or versatility

If the MUD control management device follows the RFC 8520 protocol strictly, then it maintains protocol compliance and simple operation, but it loses the ability to retrieve MUD files from third-party MUD file servers, reducing versatility

Engineering Contradiction:
Improveability to access multiple MUD file serversVSAvoidprotocol compliance
Core Design Contradiction:
Adaptability or versatilityVSEase of operation

Solution Approach 1:

The system performs preliminary configuration of multiple obtaining policies in the MUD control management device before operation. These policies are pre-configured based on different terminal device types and corresponding MUD file server locations. When a terminal device needs a MUD file, the device already has the necessary policies ready to execute, eliminating the need for complex real-time protocol negotiations and maintaining ease of operation while enabling access to multiple servers.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP4131887B1Method and system for acquiring manufacturer usage description (MUD) file, and device
Publication Date: 2024.07.31 HUAWEI TECH CO LTD
  • EP4131887B1 patent drawingFigure 1~2
  • EP4131887B1 patent drawingFigure 3
  • EP4131887B1 patent drawingFigure 4

AI summary

This application discloses a method for obtaining a manufacturer usage description MUD file, a device, and a system. The method includes: A MUD control management device receives a MUD URL request message sent by a terminal device, and obtains at least one MUD file from a plurality of MUD file servers based on a target obtaining policy corresponding to the terminal device. It can be learned that in this application, because the MUD control management device has target obtaining policies corresponding to terminal devices, the MUD control management device can obtain the MUD file from the plurality of MUD file servers based on the target obtaining policy corresponding to the terminal device. This provides a mechanism for obtaining a MUD file of a terminal device from a plurality of MUD file servers in a scenario in which a plurality of MUD files are distributed on the plurality of MUD file servers, so that network behavior of the terminal device is more accurately constrained.