SRTP Intermediary Sender Authentication and Retransmission
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The Secure Real-time Transport Protocol (SRTP) lacks mechanisms for intermediary senders to authenticate and handle data unit loss or reordering during transitional forwarding and processing, leading to potential disruptions in network traffic and increased processing delays.
Innovation Solution
Incorporating a system with a receiver, processing, and transmitter component to determine the index and session key of data units, authenticate them, and retransmit them, thereby extending receiver functionalities to intermediary senders like proxies, translators, and MCUs to manage data integrity and sequence.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a jitter buffer is used to retransmit transitional data units in incremental order, then data unit reordering is overcome and data integrity is maintained, but delay between receiving and retransmitting increases and network traffic load increases due to empty units
Solution Approach 1:
The patent changes the authentication parameter from static session keys to dynamic per-packet authentication tags (PATs) that incorporate sequence numbers and timestamps. This allows the intermediary sender to authenticate packets in real-time without buffering, maintaining data integrity while eliminating the time delay associated with jitter buffers.
Solution Approach 2:
The patent extracts the authentication functionality from the receiver and implements it at the intermediary sender. By equipping the intermediary sender with authentication capabilities (determining indices, verifying PATs), the system eliminates the need for jitter buffers and empty unit transmissions, reducing both delay and network traffic load.
2Ease of operation
If intermediary senders forward data units without authentication mechanisms, then device complexity is reduced and ease of operation is improved, but data unit loss and reordering cannot be prevented
Solution Approach 1:
The intermediary sender performs self-authentication of received data units using the authentication tags and session keys already available in the SRTP stream. This self-service authentication mechanism allows the intermediary sender to verify data integrity independently without requiring additional external verification systems, maintaining operational simplicity while ensuring reliability.
Solution Approach 2:
The authentication tags (PATs) are calculated and attached to each data unit before transmission by the original sender. This preliminary authentication action allows intermediary senders to verify data integrity immediately upon receipt without additional processing, maintaining both ease of operation and data unit integrity.
3Reliability
If SRTP uses consecutive sequence number incrementing, then replay protection is provided and confidentiality is maintained, but intermediary senders cannot detect or handle data unit loss or reordering
Solution Approach 1:
The patent extends the authentication mechanism from simple sequence number checking to a multi-dimensional verification system that includes per-packet authentication tags incorporating sequence numbers, timestamps, and data unit indices. This additional dimensional information enables intermediary senders to detect and handle data unit loss and reordering while maintaining the original replay protection capabilities.
Solution Approach 2:
The enhanced authentication mechanism serves multiple functions simultaneously: it provides replay protection through sequence number verification, enables detection of data unit loss through index verification, and allows detection of reordering through timestamp verification. This multi-functional approach maintains SRTP's security while adding intermediary sender capabilities.
Data Source
AI summary
Systems, methods, and media for retransmitting data using the SRTP are provided. In some embodiments, methods for retransmitting data using the SRTP are provided. The methods include: receiving at least one data unit associated with a media session; determining the index of the at least one data unit; determining the session key of the media session using the index; authenticating the at least one data unit using the session key; and retransmitting the at least one data unit.