Intermediary Proxy Rules Device for Network Address Translation Policy Enforcement
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In multimedia communications networks, the lack of coordination in network address and port translation leads to incorrect policy application, resulting in media packets being routed to wrong destinations, mismatched addresses and ports, and ineffective policy enforcement due to the absence of translated address information being communicated to policy enforcement devices.
Innovation Solution
An intermediary proxy rules device is introduced to access and communicate network address and port bindings, updating relevant session-related policy signaling with translated address information to ensure accurate policy enforcement and packet forwarding.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If network address and port translation is implemented to enable communication between different networks, then connectivity and adaptability are improved, but policy enforcement accuracy and routing correctness deteriorate due to address information mismatch
Solution Approach 1:
The patent introduces an intermediary function within the network address translation device that acts as a mediator between the translation process and policy enforcement devices. This intermediary captures translated address information and forwards it to policy enforcement functions, ensuring they have accurate translated addresses for making policy decisions. This resolves the contradiction by maintaining both network connectivity through translation and policy enforcement accuracy through information sharing.
Solution Approach 2:
The patent implements a feedback mechanism where translated address information flows back from the network address translation device to the policy enforcement devices. This feedback loop ensures that policy enforcement devices receive real-time translated address information, allowing them to make accurate policy decisions based on the actual translated addresses rather than original addresses. This resolves the information asymmetry caused by address translation.
2Adaptability or versatility
If network address translation is performed to support mobile nodes and network flexibility, then network adaptability is improved, but routing correctness deteriorates due to mismatched destination addresses in media packets
Solution Approach 1:
The intermediary function in the network address translation device captures the translated destination address information and forwards it to routing and policy enforcement devices. This ensures that these devices have the correct translated addresses for routing media packets to mobile nodes, resolving the routing correctness issue while maintaining network flexibility through address translation.
3Device complexity
If translated address information is not communicated to policy enforcement devices, then device complexity is reduced, but policy enforcement effectiveness deteriorates due to inability to recognize translated addresses
Solution Approach 1:
The patent introduces an intermediary function within the existing network address translation device rather than creating entirely new systems. This intermediary leverages the existing translation infrastructure to capture and share translated address information, minimizing additional complexity while significantly improving policy enforcement effectiveness. The solution builds on existing components rather than adding completely new complex systems.
Data Source
AI summary
The present invention incorporates an intermediary proxy rules device that has access to information regarding network address and port bindings or network address and port translations. This intermediary function communicates translated address information to other devices on the network, such as the policy and charging rule function and policy and charging enforcement function. The full communication and coordination of this information coordinates correct translation address information and other necessary information to these PCRF and PCEF devices, which eliminates many of the problems associated with the session set-up and maintenance with other networks.