Priority Service Access Filtering for Telecom DoS Mitigation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Telecommunication networks face denial of service attacks that degrade or prevent access to priority services like e911 and WPS, due to unauthorized access attempts that congest network components, compromising their availability and effectiveness.
Innovation Solution
Implementing a hacking mitigation system that monitors access request failures, determines excessive failure rates, and blocks subsequent requests from user devices, using protocols such as exclude device, exclude set, or exclude in/out based on geographic location and failure patterns to prevent network congestion.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If network components allow unrestricted access to priority services during high traffic, then service availability is maintained for authorized users, but network congestion increases and service degradation occurs
Solution Approach 1:
The patent introduces an intermediary system that sits between user devices and priority telecommunication services. This intermediary monitors access requests, identifies potential denial of service attacks based on failure rate thresholds, and selectively blocks malicious traffic while allowing legitimate traffic to pass through to the priority services, thus resolving the contradiction between maintaining service availability and preventing network congestion
Solution Approach 2:
The patent implements a feedback mechanism where the system continuously monitors access request failure rates and dynamically adjusts blocking decisions. When the failure rate exceeds a predetermined threshold, the system responds by blocking subsequent requests from suspicious user devices, creating a closed-loop control system that adapts to changing network conditions and attack patterns, thereby maintaining service reliability while preventing congestion
2Object-affected harmful factors
If the system blocks subsequent access requests from user devices with high failure rates, then network congestion is reduced, but legitimate service access may be prevented
Solution Approach 1:
The patent changes the parameter of access request handling by introducing dynamic blocking based on failure rate thresholds. Instead of uniformly allowing or blocking all requests, the system adjusts its behavior based on the observed failure rate parameter, blocking requests only when the failure rate exceeds a predetermined threshold, thus reducing congestion while preserving access for legitimate users whose failure rates remain below the threshold
Solution Approach 2:
The patent makes the access control mechanism dynamic rather than static. The blocking decision is not fixed but adapts in real-time based on the monitored failure rate of user devices. This dynamic approach allows the system to respond flexibly to changing conditions, blocking malicious traffic when failure rates indicate attacks while allowing legitimate traffic to pass when failure rates are within acceptable ranges
Data Source
AI summary
Systems and methods are provided for mitigating undesirable service disruptions in a communications network. Based on a determination that an access failure rate exceeds a threshold, it may be determined that a particular service is degraded or that a requesting user device is not authorized to access the service. One or more mitigation protocols may be used to block subsequent attempts by the requesting user device, a set of user devices associated with the requesting user device, or an area associated with the requesting user device to request access to the service.