Multipath Connection Encryption Tunnels for Low-Delay Packet Delivery
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Modern networking protocols face challenges in maintaining efficient communication across multiple network nodes due to bottlenecks and ordered communications that cause undesirable delays and resource overhead, particularly in multipath connections.
Innovation Solution
Implementing a multipath connection with a transport converter that uses a shared encryption key across multiple layers, allowing for secure and efficient data transmission through separate encrypted tunnels, and optimizing packet delivery based on network conditions to reduce buffering and overhead.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a multipath connection is established with separate encrypted tunnels for each path, then communication reliability is improved, but device complexity and resource overhead increase
Solution Approach 1:
The patent merges multiple encrypted tunnels into a single shared encryption context. Instead of creating separate encryption instances for each path, the system uses one shared key and encryption configuration across all multipath connections, reducing device complexity while maintaining the reliability benefits of multipath communication.
Solution Approach 2:
The shared encryption key serves multiple functions simultaneously - it secures data across all paths, all layers (QUIC, UDP, IP), and all network nodes (UPF, gNodeB, AMF). This universal encryption approach eliminates the need for separate encryption mechanisms for each path, reducing overall system complexity.
2Object-affected harmful factors
If encryption keys are shared across multiple network nodes and layers, then communication security is improved, but loss of information about path-specific encryption context occurs
Solution Approach 1:
The patent introduces a path identifier as an intermediary element that carries path-specific information through the shared encryption context. This path identifier acts as a mediator between the shared encryption key and the specific communication path, allowing the system to maintain both security through shared keys and path-specific context through the identifier.
Solution Approach 2:
The encryption context is segmented into two independent parts: the shared encryption key (providing security) and the path identifier (providing path-specific context). This segmentation allows each component to serve its specific function without interference - the key remains shared across all paths while the path identifier maintains path-specific information throughout the communication.
3Adaptability or versatility
If protocols are duplicated across multiple layers and nodes, then adaptability to different network conditions is improved, but device complexity and resource usage increase
Solution Approach 1:
The patent implements a universal protocol stack where the QUIC protocol operates at multiple layers (transport, UDP, IP) simultaneously with a single shared key. This multi-functional approach allows the same protocol implementation to adapt to different network conditions and nodes without requiring separate protocol instances, improving resource usage efficiency while maintaining adaptability.
Data Source
AI summary
Methods, apparatuses, and systems for handling end-to-end encryption are described. A user device may send encrypted data to a server via a proxy using an encryption key shared with multiple network nodes across multiple layers. The proxy device may create an encrypted tunnel with an application server and send the encrypted data over the encrypted tunnel to the application server. The application server may receive the encrypted data over the encrypted tunnel from the proxy device. The application server may decrypt the encrypted data.