Subscriber Session Traffic Handling via Dynamic Encapsulation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for handling subscribers' network traffic between customer premises equipment (CPE) and broadband access networks face limitations, including encapsulation constraints that hinder multicast functionality, complex management of multiple sessions, and reliance on centralized servers that are single points of failure, leading to inefficient service provisioning and traffic handling.
Innovation Solution
A method and system that establish a subscriber session between CPE and a broadband network gateway (BNG), allowing dynamic encapsulation of data using a network control entity (NCE) and dynamic encapsulation module (DEM) to determine whether data is encapsulated or non-encapsulated, enabling flexible network policy enforcement and breakout points, thereby reducing reliance on centralized servers and enhancing traffic handling efficiency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If PPP encapsulation is used for all subscriber traffic between CPE and BNG, then centralized policy enforcement and AAA are achieved, but multicast functionality and IP forwarding mechanisms are hindered
Solution Approach 1:
The patent segments subscriber traffic into two categories: control plane traffic (authentication, accounting, authorization) that requires PPP encapsulation and centralized handling at BNG, and data plane traffic (including multicast) that can use native IP forwarding. This segmentation allows simultaneous support for centralized policy enforcement and multicast functionality by directing different traffic types through different paths.
Solution Approach 2:
The patent introduces an intermediary mechanism (service gateway or policy enforcement point) that sits between the access network and core network, allowing IP-based multicast traffic to be forwarded natively while PPP-encapsulated control traffic is still terminated at BNG. This intermediary enables both encapsulated and non-encapsulated traffic to coexist.
2Device complexity
If all subscriber traffic is routed through centralized BNG server, then policy enforcement is simplified, but system complexity and single point of failure risk increase
Solution Approach 1:
The patent extracts the data plane forwarding function from the centralized BNG server and places it at the service gateway or network access server. Only the control plane (AAA and policy management) remains centralized at BNG, while actual traffic forwarding is distributed to multiple access network nodes, eliminating the single point of failure while maintaining simplified policy enforcement.
Solution Approach 2:
The patent implements dynamic traffic steering that can adaptively route traffic through different paths based on service type, subscriber profile, and network conditions. This allows the system to dynamically bypass the centralized BNG for certain traffic types (like multicast) while maintaining centralized control for other traffic, balancing complexity and reliability.
3Reliability
If PPP session termination is required at BNG for all traffic, then authentication and authorization are ensured, but service breakout before BNG is prevented
Solution Approach 1:
The patent performs preliminary authentication and authorization at the service gateway or network access server before traffic reaches BNG. This preliminary action allows services to breakout and be delivered locally without requiring all traffic to traverse to BNG for session termination, while still ensuring security through pre-established authentication.
Solution Approach 2:
The patent introduces a new dimension to the architecture by adding service gateways and policy enforcement points at intermediate network locations, creating multiple dimensional paths for traffic flow. This allows authentication to occur at one location (service gateway) while service delivery occurs at another location (local service breakout), decoupling these functions spatially.
Data Source
AI summary
A method for handling subscribers' network traffic between a CPE (customer premises equipment) and a broadband access network includes establishing a subscriber session between the CPE and a BNG (broadband network gateway, an entity within the broadband access network), to set up a network route between the CPE and the BNG. Data transmitted within the subscriber session are encapsulated into protocol frames. A NCE (network control entity) acquires a state of the subscriber session and updates network policies in at least one network entity on the network route based on the state of the subscriber session. A DEM (dynamic encapsulation module) decides, based on a DEM configuration, whether data sent to the broadband access network are encapsulated data within the subscriber session or are non-encapsulated data outside the subscriber session. The data are transmitted on a part of the network route and are handled according to the network policies.