Routing Device Network Tapping for Unauthorized Communication Detection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing wireless communication systems, such as LTE and 5G, face challenges in detecting and coping with unauthorized communication in the wireless communication section between a base station and a core network device, leading to potential delays in communication.
Innovation Solution
A system comprising a routing device and an unauthorized communication coping device, where the routing device performs network tapping on packets and transmits them to an unauthorized communication detection device, allowing for real-time detection and coping with unauthorized communication without delaying wireless communications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a defense device is disposed on the server side of the core network device to detect unauthorized communication, then the communication line capacity can be reduced when abnormality is detected, but the defense device cannot detect unauthorized communication in the wireless communication section between base station and core network device
Solution Approach 1:
The system divides the network into two detection zones: wireless communication section (base station to core network) and wired communication section (core network to server). Different defense devices are deployed in each zone, with the first defense device specifically monitoring wireless traffic and the second defense device monitoring wired traffic, enabling comprehensive coverage without gaps.
Solution Approach 2:
A routing device acts as an intermediary between the wireless communication section and the second defense device. It performs network tapping to extract copies of packets from the wireless communication flow and forwards them to the first defense device for specialized analysis, while allowing normal traffic to pass through to the core network without delay.
2Reliability
If a defense device constantly checks communication in the wireless communication section to detect unauthorized communication, then unauthorized communication can be detected, but wireless communication delay occurs
Solution Approach 1:
The routing device creates a copy of packets from the wireless communication section and forwards the copy to the first defense device for analysis. The original packets continue flowing through the normal path to the core network without being intercepted or delayed, allowing security inspection to occur on duplicate data only.
Solution Approach 2:
The routing device performs network tapping and packet copying in advance, before the defense device needs to analyze the traffic. This preliminary preparation allows the defense device to receive already-copied packets for inspection without requiring real-time interception that would cause communication delays.
Data Source
AI summary
A routing device and an unauthorized communication coping device are provided. The routing device is a device that performs routing of a packet in conformance with a wireless communication protocol in a wireless communication section which is a communication section that connects a base station and a core network device, and the routing device performs network tapping on a packet as a routing target and transmits the network-tapped packet to the unauthorized communication detection device (the device that performs unauthorized communication determination which is determination of whether or not communication is unauthorized communication based on a packet). The unauthorized communication coping device performs, for unauthorized communication which is communication for which a result of the unauthorized communication determination based on the network-tapped packet is true, unauthorized communication coping including configuring communication control information which is information for controlling the unauthorized communication for at least one of the routing device and the core network device.