Policy Control for STUN Relay NAT Traversal

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current policy control methods in IMS networks, particularly when using STUN Relay for NAT traversal, struggle to accurately recognize and enforce policy and charging control over media streams due to encapsulation protocols and active destination changes, leading to incomplete or incorrect application of policy and charging rules.

Innovation Solution

A method and apparatus that receive and process address information related to terminals and network traffic relay entities, generate policy information based on this data, and monitor network traffic to enforce policies, ensuring correct application of policy and charging control by distinguishing between encapsulated and non-encapsulated traffic and managing active destination changes.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If STUN Relay is used for NAT traversal, then NAT traversal capability is improved, but policy control precision deteriorates due to encapsulation protocols and active destination changes

Engineering Contradiction:
ImproveNAT traversal capabilityVSAvoidpolicy control precision
Core Design Contradiction:
Adaptability or versatilityVSMeasurement precision

Solution Approach 1:

The patent introduces an intermediary mechanism between the STUN Relay and the policy control system. The P-CSCF acts as a mediator that extracts address information from STUN messages and forwards it to the PCRF for policy control. This intermediary layer allows the STUN Relay to maintain its NAT traversal functionality while enabling the policy control system to accurately identify and control media streams through the encapsulated traffic.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent segments the policy control function into distinct components: address information extraction at the P-CSCF, policy decision-making at the PCRF, and policy enforcement at the PCEF. This segmentation allows each component to handle specific aspects of policy control independently, improving overall precision while maintaining compatibility with STUN Relay encapsulation.

Inventive Principle:
Principle #1Segmentation

2Measurement precision

If address information is extracted from STUN messages, then policy control accuracy is improved, but system complexity increases

Engineering Contradiction:
Improvepolicy control accuracyVSAvoidsystem complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The P-CSCF performs multiple functions: it handles SIP signaling, extracts address information from STUN messages, and forwards policy control information to the PCRF. By making the P-CSCF multi-functional, the patent avoids adding new complex components while still achieving accurate policy control. The existing P-CSCF infrastructure is leveraged to perform the additional task of address information extraction.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The system uses the STUN messages themselves as the carrier for address information extraction. Rather than requiring separate signaling protocols or additional message formats, the patent extracts the necessary address information directly from the existing STUN request and response messages, eliminating the need for separate policy control signaling infrastructure.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS8356092B2Methods, apparatuses, system, and related computer program product for policy control
Publication Date: 2013.01.15 NOKIA SOLUTIONS & NETWORKS OY
  • US8356092B2 patent drawing
  • US8356092B2 patent drawing
  • US8356092B2 patent drawing

AI summary

It is disclosed a method including receiving first address information relating to a terminal and a network traffic relay entity, obtaining second address information relating to the network traffic relay entity and a network traffic destination entity, and sending the first address information and the second address information to a controlling entity; and a method including receiving the first and second address information, generating policy information based on the received first and second address information, and monitoring network traffic based on the generated policy information.