Packet Filtering via Header Segmentation and Metadata Extraction

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

In large-scale network applications, managing increasing volumes of data packets with varied file formats and types poses challenges in ensuring compatibility and efficient processing, as existing technologies struggle to handle new and rich file types effectively, leading to resource consumption and management difficulties.

Innovation Solution

A method involving a first and second processing means connected via a unidirectional pathway, where elements of the packet header are separated into metadata to identify and handle packets with specific formats, such as EtherTypes, VLAN tagging, and broadcast/multicast data, allowing for filtering and transformation to ensure compatibility, with optional verification against standards and construction of frame headers.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Quantity of substance

If conventional packet processing methods are used to handle increasing volumes of varied file formats, then data throughput is maintained, but resource consumption increases and management difficulty increases

Engineering Contradiction:

Improvedata volumeVSAvoidresource consumption

Core Design Contradiction:

Quantity of substanceVSUse of energy by moving object

Solution Approach 1:

The packet header is segmented into multiple fields (etherType field, length field, broadcast/multicast/reserved address fields, VLAN tagging fields) that are processed independently. Each field is extracted and evaluated separately against format requirements, allowing efficient filtering without processing the entire packet payload, thus reducing resource consumption while handling increased data volumes.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

Specific header elements are extracted from the packet for format verification before the packet is forwarded or dropped. The etherType, length, address, and VLAN fields are taken out and evaluated independently, enabling early filtering decisions that prevent unnecessary processing of packets that will ultimately be discarded, thereby reducing overall resource consumption.

Inventive Principle:

Principle #2Taking out (Extraction)

2Adaptability or versatility

If all packet formats are accepted and processed, then adaptability is improved, but device complexity increases

Engineering Contradiction:

Improveformat compatibilityVSAvoidprocessing complexity

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

Format verification is performed as a preliminary action before packets are forwarded to the destination. The method checks etherType against specified types, verifies length fields, validates address formats, and confirms VLAN tagging compliance before the packet is allowed to continue. This preliminary filtering simplifies downstream processing by ensuring only compliant packets proceed, reducing overall system complexity.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The filtering rules are made dynamic and configurable, allowing the system to adapt to different format requirements without changing its fundamental structure. The specified EtherTypes, length requirements, address validation rules, and VLAN tagging expectations can be adjusted based on network needs, providing adaptability while maintaining a consistent processing framework.

Inventive Principle:

Principle #15Dynamics

3Measurement precision

If header elements are copied to metadata for verification, then measurement precision is improved, but device complexity increases

Engineering Contradiction:

Improveformat verification accuracyVSAvoidprocessing structure

Core Design Contradiction:

Measurement precisionVSDevice complexity

Solution Approach 1:

Relevant header elements (etherType, length, address fields, VLAN tags) are copied into a metadata structure that can be easily manipulated and evaluated. This copying creates a working copy that can be verified against format requirements without modifying the original packet, enabling precise format verification while keeping the processing logic separate and manageable.

Inventive Principle:

Principle #26Copying

Solution Approach 2:

The metadata structure serves as an intermediary between the raw packet header and the verification logic. Instead of directly complex parsing and validation of the original header, the metadata acts as a simplified intermediate representation that bridges the gap, improving verification accuracy while reducing the complexity of the verification process itself.

Inventive Principle:

Principle #24Intermediary (Mediator)

4Reliability

If packets are filtered and modified before forwarding, then data quality is improved, but productivity decreases

Engineering Contradiction:

Improvedata format reliabilityVSAvoidpacket throughput

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

Format verification and filtering are performed as preliminary actions in the packet processing pipeline, before packets are forwarded or dropped. By checking etherType, length, addresses, and VLAN tags early in the process, the system ensures data format reliability is established upfront, preventing malformed packets from consuming downstream resources and actually improving overall throughput by eliminating reprocessing needs.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS11184256B2Method and device for filtering packets

Publication Date: 2021.11.23 THE SEC OF STATE FOR FOREIGN & COMMONWEALTH AFFAIRS

AI summary

In the field of data filtering the invention discloses a method of filtering data and a data filter (1), both with optional features, which assess network data using a number of criteria to refine it to a format appropriate for a user.