SCTP Packet Identification via Feature Tuple Matching

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The existing methods for identifying Stream Control Transmission Protocol (SCTP) packets are inadequate due to multi-homing support, as conventional quintuples can only identify a limited number of associations, leading to missed identification of packets using other quintuples involved in the association.

Innovation Solution

A method and device that utilize a SCTP tuple identification table with a mapping relation between a feature set tuple and SCTP associations, including source and destination IP addresses and verification tags, to correctly identify SCTP packets by matching feature tuples with the table, thereby covering all interactions within an SCTP association.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If a conventional quintuple is used to identify TCP/UDP packets, then the identification method is simple, but it cannot correctly identify all SCTP associations due to multi-homing support

Engineering Contradiction:
Improveidentification method simplicityVSAvoididentification accuracy
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent changes the identification parameters from a single quintuple (source IP, destination IP, source port, destination port, protocol) to a feature set that includes multiple quintuples and verification tags. This parameter expansion allows the system to handle multi-homing scenarios where multiple IP addresses and ports can be used within the same SCTP association, thereby improving identification accuracy without significantly complicating the implementation.

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The patent introduces a new dimension to packet identification by incorporating verification tags (V_tag) into the identification process. The feature set tuple now includes not only the traditional quintuple information but also the V_tag, which is unique to each SCTP association. This additional dimension enables reliable identification even when multiple IP addresses and ports are involved in the same association.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

2Adaptability or versatility

If multiple quintuples are used to support multi-homing in SCTP, then the protocol's versatility is improved, but the packet identification accuracy deteriorates

Engineering Contradiction:
Improvemulti-homing supportVSAvoidpacket identification accuracy
Core Design Contradiction:
Adaptability or versatilityVSMeasurement precision

Solution Approach 1:

The patent merges multiple identification criteria into a single feature set tuple structure. Instead of treating each quintuple separately, the system combines source IP address set, destination IP address set, source port set, destination port set, and verification tag into a unified feature set that represents an entire SCTP association. This merging approach allows the system to handle multiple quintuples while maintaining accurate identification through the combined feature set.

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The verification tag (V_tag) acts as an intermediary element that uniquely identifies an SCTP association regardless of which IP addresses or ports are used. The V_tag serves as a mediator between the multiple quintuples and the actual association, allowing the system to correctly identify packets even when multiple IP addresses and ports are involved in the same association.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Productivity

If a simplified quintuple identification method is used, then the processing speed is maintained, but the quantity of identified packets decreases due to missed identification

Engineering Contradiction:
Improveprocessing speedVSAvoidnumber of identified packets
Core Design Contradiction:
ProductivityVSQuantity of substance

Solution Approach 1:

The patent performs preliminary action by pre-establishing the feature set tuple structure and verification tag mapping during the association establishment phase. When packets arrive, the system can directly match the packet's feature tuple against the pre-established feature set tuples in the identification table, eliminating the need for complex real-time analysis. This preliminary preparation maintains fast processing speeds while ensuring complete packet identification.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS8626903B2Method and device for identifying an SCTP packet
Publication Date: 2014.01.07 HUAWEI TECH CO LTD
  • US8626903B2 patent drawing
  • US8626903B2 patent drawing
  • US8626903B2 patent drawing

AI summary

A method for identifying a Stream Control Transmission Protocol (SCTP) packet is provided, which includes: acquiring a feature tuple of a received SCTP packet, in which the feature tuple includes at least one piece of the following information: a source Internet Protocol (IP) address, a destination IP address, and a verification tag (V_tag); matching the acquired feature tuple of the SCTP packet with a SCTP tuple identification table, in which the SCTP tuple identification table includes a mapping relation between a feature set tuple and an SCTP association, and the feature set tuple includes at least one piece of the following information: a source IP address set, a destination IP address set, and the V_tag; and acquiring an SCTP association to which the SCTP packet belongs, if the acquired feature tuple of the SCTP packet matches one or more records of the SCTP tuple identification table. Correspondingly, a device for identifying an SCTP packet, a system for identifying an SCTP packet, and a method for establishing an SCTP tuple identification table are further provided, capable of reducing missed identification of an SCTP stream.