SCTP Packet Identification via Feature Tuple Matching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing methods for identifying Stream Control Transmission Protocol (SCTP) packets are inadequate due to multi-homing support, as conventional quintuples can only identify a limited number of associations, leading to missed identification of packets using other quintuples involved in the association.
Innovation Solution
A method and device that utilize a SCTP tuple identification table with a mapping relation between a feature set tuple and SCTP associations, including source and destination IP addresses and verification tags, to correctly identify SCTP packets by matching feature tuples with the table, thereby covering all interactions within an SCTP association.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a conventional quintuple is used to identify TCP/UDP packets, then the identification method is simple, but it cannot correctly identify all SCTP associations due to multi-homing support
Solution Approach 1:
The patent changes the identification parameters from a single quintuple (source IP, destination IP, source port, destination port, protocol) to a feature set that includes multiple quintuples and verification tags. This parameter expansion allows the system to handle multi-homing scenarios where multiple IP addresses and ports can be used within the same SCTP association, thereby improving identification accuracy without significantly complicating the implementation.
Solution Approach 2:
The patent introduces a new dimension to packet identification by incorporating verification tags (V_tag) into the identification process. The feature set tuple now includes not only the traditional quintuple information but also the V_tag, which is unique to each SCTP association. This additional dimension enables reliable identification even when multiple IP addresses and ports are involved in the same association.
2Adaptability or versatility
If multiple quintuples are used to support multi-homing in SCTP, then the protocol's versatility is improved, but the packet identification accuracy deteriorates
Solution Approach 1:
The patent merges multiple identification criteria into a single feature set tuple structure. Instead of treating each quintuple separately, the system combines source IP address set, destination IP address set, source port set, destination port set, and verification tag into a unified feature set that represents an entire SCTP association. This merging approach allows the system to handle multiple quintuples while maintaining accurate identification through the combined feature set.
Solution Approach 2:
The verification tag (V_tag) acts as an intermediary element that uniquely identifies an SCTP association regardless of which IP addresses or ports are used. The V_tag serves as a mediator between the multiple quintuples and the actual association, allowing the system to correctly identify packets even when multiple IP addresses and ports are involved in the same association.
3Productivity
If a simplified quintuple identification method is used, then the processing speed is maintained, but the quantity of identified packets decreases due to missed identification
Solution Approach 1:
The patent performs preliminary action by pre-establishing the feature set tuple structure and verification tag mapping during the association establishment phase. When packets arrive, the system can directly match the packet's feature tuple against the pre-established feature set tuples in the identification table, eliminating the need for complex real-time analysis. This preliminary preparation maintains fast processing speeds while ensuring complete packet identification.
Data Source
AI summary
A method for identifying a Stream Control Transmission Protocol (SCTP) packet is provided, which includes: acquiring a feature tuple of a received SCTP packet, in which the feature tuple includes at least one piece of the following information: a source Internet Protocol (IP) address, a destination IP address, and a verification tag (V_tag); matching the acquired feature tuple of the SCTP packet with a SCTP tuple identification table, in which the SCTP tuple identification table includes a mapping relation between a feature set tuple and an SCTP association, and the feature set tuple includes at least one piece of the following information: a source IP address set, a destination IP address set, and the V_tag; and acquiring an SCTP association to which the SCTP packet belongs, if the acquired feature tuple of the SCTP packet matches one or more records of the SCTP tuple identification table. Correspondingly, a device for identifying an SCTP packet, a system for identifying an SCTP packet, and a method for establishing an SCTP tuple identification table are further provided, capable of reducing missed identification of an SCTP stream.


