SSID to QCI Mapping for Encrypted Wi-Fi Traffic
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In Wi-Fi to cellular bridging scenarios, it is challenging to determine the appropriate quality of service for encapsulated or encrypted data traffic, as existing methods rely on visible protocol headers which are not applicable for encapsulated traffic, especially at evolved packet data gateways providing LTE core network access to Wi-Fi users.
Innovation Solution
The solution involves mapping a Wi-Fi service set identifier (SSID) to a quality value in a datagram header, which is then used to assign a data bearer with a suitable quality of service class identifier (QCI) for the type of traffic expected, enabling appropriate quality of service assignment for Wi-Fi traffic in the LTE core network.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If protocol headers are used to determine quality of service, then quality of service assignment is straightforward for unencrypted traffic, but this method is not applicable for encapsulated or encrypted traffic where headers are not visible
Solution Approach 1:
The patent introduces SSID as an intermediary identifier to bridge the gap between Wi-Fi network identification and LTE quality of service assignment. Instead of relying on invisible protocol headers in encrypted traffic, the SSID serves as a visible mediator that carries network identification information through the encapsulated tunnel, enabling the ePDG to determine appropriate QoS parameters without decrypting the traffic.
Solution Approach 2:
The patent performs preliminary action by establishing a mapping between SSIDs and QoS parameters before encrypted traffic transmission. The base station pre-configures which SSIDs correspond to which quality of service levels, and this mapping information is stored and referenced during tunnel establishment and traffic routing, enabling proactive QoS assignment rather than reactive header inspection.
2Adaptability or versatility
If SSID mapping to QCI is implemented, then quality of service can be assigned for encapsulated traffic, but additional mapping infrastructure and configuration are required
Solution Approach 1:
The patent makes the SSID field multi-functional by using it not only for its traditional purpose of identifying Wi-Fi networks but also as a carrier for quality of service identification. This universal usage of SSID eliminates the need for separate QoS identification mechanisms in encapsulated traffic, reducing overall system complexity despite the added mapping capability.
Solution Approach 2:
The patent changes the parameter being used for QoS identification from protocol headers (which are invisible in encrypted traffic) to SSID (which remains visible and accessible). This parameter substitution transforms the QoS assignment process from header-based inspection to SSID-based lookup, requiring configuration but enabling functionality that was previously impossible.
3Measurement precision
If protocol header inspection is used for QoS determination, then traffic type can be identified, but this approach fails when traffic is encapsulated in tunnels at ePDG
Solution Approach 1:
The SSID acts as an intermediary that preserves traffic identification capability through the tunnel. Instead of attempting to inspect the encapsulated protocol headers that are hidden from view, the system uses the SSID as a mediator that carries the necessary identification information in plain text, allowing reliable traffic type determination without compromising tunnel security or inspection capability.
Data Source
AI summary
Systems and methods are disclosed for assigning a quality of service to a data packet in a communications network by mapping a Wi-Fi access layer identifier such as an SSID to a value in a datagram header, and subsequently using the datagram header to assign an appropriate data bearer for the datagram, the data bearer having a quality of service class identifier appropriate for the type of traffic expected to be sent over the particular Wi-Fi access layer.