QUIC Proxy Node Service Negotiation for Stable Communication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The QUIC protocol does not allow for the provision of additional services by intermediary network elements, leading to instability in QUIC communications due to address and port number modifications by proxy nodes.
Innovation Solution
A method for managing QUIC communications that involves discovering proxy nodes capable of providing services, sending encrypted proxy information messages to establish the use of these services, and verifying the reliability of the proxy nodes to ensure stable communication.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If proxy nodes modify address and port number in QUIC communications, then additional services can be provided by intermediary network elements, but communication stability deteriorates due to address changes
Solution Approach 1:
The patent introduces a proxy node as an intermediary between QUIC terminals that can modify addresses and port numbers while maintaining communication stability. The proxy node acts as a mediator that handles address translation and maintains the QUIC connection, allowing service provision without breaking the communication flow. The proxy node inserts itself into the communication path and manages the address modifications transparently to the endpoints.
Solution Approach 2:
The patent implements preliminary actions by establishing proxy node discovery and service negotiation mechanisms before actual QUIC communication begins. The system performs preliminary validation of proxy nodes, pre-establishes communication paths through proxies, and negotiates service terms in advance, so that when communication starts, the stability issues are already resolved through pre-configured proxy relationships.
2Reliability
If QUIC protocol encrypts all data including control information, then security is improved, but proxy node service provision deteriorates due to lack of visibility
Solution Approach 1:
The patent segments the QUIC protocol data into encrypted payload portions and unencrypted control portions. Specifically, it divides QUIC packets into encrypted data segments and unencrypted header segments, allowing proxies to inspect and manage control information (headers, connection identifiers, stream identifiers) while the actual payload remains encrypted for security. This segmentation enables proxies to provide services based on control plane information without decrypting user data.
Solution Approach 2:
The patent applies different encryption qualities to different parts of the QUIC protocol. Control plane information (headers, connection management data) is left unencrypted or uses weaker encryption that proxies can read, while the data plane (actual user payload) uses strong encryption. This local quality differentiation allows proxies to function with visibility into control information while maintaining strong security for actual data transmission.
3Adaptability or versatility
If QUIC connection migration is supported for address changes, then adaptability to network changes is improved, but communication stability deteriorates due to verification overhead
Solution Approach 1:
The patent uses the proxy node as an intermediary to manage QUIC connection migration. When address changes occur, the proxy node mediates the migration process by maintaining the connection state and coordinating the transition between old and new addresses. The proxy validates address changes and manages the migration tokens, reducing the verification overhead for endpoints and stabilizing the connection during migration events.
Solution Approach 2:
The patent implements feedback mechanisms where proxy nodes monitor address changes and provide feedback to QUIC terminals about migration status. The system uses feedback loops where the proxy validates address changes, sends confirmation tokens back to terminals, and adjusts connection parameters based on migration progress. This feedback control stabilizes the connection during migration by ensuring both endpoints are synchronized about address changes.
Data Source
AI summary
A method for managing communication between a first terminal and a second terminal in a communication network is disclosed. The method includes, at the first terminal: discovering at least one proxy node between the first terminal and the second terminal, the proxy node being capable of providing at least one service for the communication, and if the first terminal accepts the service, sending to the second terminal, in an establishment phase or during the communication, an encrypted proxy information message containing data identifying the at least one proxy node and a token intended to be provided to the second terminal by the at least one proxy node.