Proxy Server Detection via Path Length Comparison
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication network systems face challenges in detecting and identifying proxy servers, which can cause performance issues and security concerns, as users may be unaware if a proxy server is intervening in their connection to a network service, and current methods are not efficient in pinpointing proxy server malfunctions or failures.
Innovation Solution
A method and apparatus that detect paths between user equipment and network entities using tracerouting and path analysis to determine if a proxy server is present by comparing the lengths of traced paths and analyzing TTL values, allowing for the identification and location of proxies within the network.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a proxy server is deployed to improve network security and performance, then network security and performance are improved, but the complexity of detecting and identifying the proxy server increases
Solution Approach 1:
The patent implements feedback by having the server send probe messages through the client to the proxy server and receive timing information in return. This feedback loop allows the server to measure the time differential between direct and proxied communication paths, enabling detection of the proxy's presence and location without requiring complex active probing of the client itself.
Solution Approach 2:
The patent uses the client as an intermediary to relay probe messages between the server and the proxy server. Instead of directly probing the proxy or the client, the server sends messages through the client, which forwards them to the proxy. This intermediary approach allows indirect detection of the proxy while maintaining a relatively simple detection mechanism at the server side.
2Measurement precision
If path tracing methods are used to detect proxy servers, then proxy detection capability is improved, but the time and computational resources required increase
Solution Approach 1:
The patent extracts only the essential timing information needed for proxy detection by having the proxy server measure and report back the time differential between receiving probe messages directly from the server and receiving them through the client. This extraction approach provides sufficient precision for proxy detection without requiring complete path tracing or extensive computational analysis of the entire network path.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Various embodiments pertain to communication network systems. In particular, various embodiments relate to the detection of proxy servers and the locations of the proxy servers in communication network systems. A method, in certain embodiments, may include detecting a first path between a user equipment and a first network entity. The method may also include detecting a second path between the user equipment and a second network entity, wherein the first path is longer than the second path. In addition, the method may include determining whether the second network entity is a proxy server located between the user equipment and the first network entity based on an estimated value of the first path and an estimated value of the second path.