Relayed Device Traffic Detection Using Network Address Information
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Network operators face challenges in detecting and managing traffic from relayed devices in mobile networks, as encryption and user hacking make it difficult to distinguish relayed traffic from the IP information, hindering effective policy enforcement.
Innovation Solution
A method involving network nodes and a User Equipment (UE) to request, acquire, and manage IP addresses or ranges for relayed devices, enabling the User Plane Function (UPF) to identify and classify tethered traffic, allowing differentiated policy application.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a UE acts as relay for other devices using its own IP range, then tethering functionality is enabled and security is improved, but the network operator cannot detect relayed traffic by inspecting IP information
Solution Approach 1:
The patent introduces an intermediary mechanism where the relay UE obtains and transmits network address information (such as MAC addresses or other identifiers) of relayed devices to the network. This intermediary information allows the network to identify relayed traffic without exposing the internal IP addressing scheme, thus maintaining both tethering functionality and detectability.
Solution Approach 2:
The patent embeds additional identification information within the existing traffic flow. The relay UE includes network address information of relayed devices in packets transmitted to the network, nesting this identification data within the normal communication stream without disrupting the IP-based tethering functionality.
2Reliability
If traffic encryption is implemented and users hack to avoid detection, then security and privacy are improved, but tethering detection by network operators becomes increasingly difficult
Solution Approach 1:
The patent uses an intermediary identifier (network address information) that is transmitted alongside encrypted traffic. This identifier acts as a mediator that allows the network to detect tethering without needing to decrypt or analyze the actual traffic content, thus preserving security while enabling detection.
Solution Approach 2:
The patent changes the identification method from relying on IP address patterns (which can be hidden) to using network address information that can be transmitted in clear or alongside encrypted traffic. This is analogous to changing the 'color' or form of the identification signal from one that can be concealed to one that remains visible.
Data Source
AI summary
A method for detecting and handling traffic from relayed or tethered devices in a communications network. The method includes obtaining at a terminal device network address information for a relayed device; transmitting from the terminal device traffic received from the relayed device, wherein the network traffic includes the network address information; and determining that the traffic relates to the relayed device based on the network address information. In some embodiments, the method further includes receiving at the terminal device an indication that the network address information shall be obtained for the relayed devices connected to the terminal device. In some embodiments, the method further includes transmitting from the terminal device an indication of the capability of the terminal device to obtain the network address information for relayed devices.