TCP Option Field for Device Identity Discovery
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Address translation devices in networks obscure true device identities, hindering automatic discovery of relationships between modules communicating over TCP connections, and establishing additional connections is often impractical due to security restrictions.
Innovation Solution
Implementing messaging modules beneath the TCP stack to extract and reuse sequence numbers in existing TCP messages, allowing the exchange of device identifiers like network addresses, even in the presence of address translation devices, without requiring new connections.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If address translation devices are used to obscure device identities for security, then security is improved, but automatic discovery of module relationships deteriorates
Solution Approach 1:
The patent introduces a special TCP option as an intermediary mechanism that carries device identity information through the address translation device. This option field acts as a mediator that preserves the true source address information while allowing the address translation device to function normally, thus resolving the conflict between security (address translation) and information loss (device identity discovery).
Solution Approach 2:
The patent performs preliminary action by inserting the true source address into the TCP option field before the address translation device obscures it. This preliminary preservation of identity information allows automatic discovery to work correctly even though the main address fields are translated, thus maintaining both security and discoverability.
2Measurement precision
If additional TCP connections are established to communicate true addresses, then device identity discovery is improved, but device complexity and security restrictions worsen
Solution Approach 1:
The patent merges the device identity communication function with the existing TCP connection by embedding the true address information in the TCP option field of the same connection. This eliminates the need for separate discovery connections, thus improving measurement precision while reducing device complexity and avoiding additional security restrictions.
Solution Approach 2:
The patent makes the existing TCP connection multi-functional by using its option field to carry both standard TCP control information and device identity information. This universal use of the connection eliminates the need for dedicated discovery connections, reducing complexity while maintaining accurate device identity discovery.
3Reliability
If TCP sequence numbers are reused for messaging module communication, then communication reliability is improved, but TCP connection stability may worsen
Solution Approach 1:
The patent extracts the messaging function from the standard TCP application layer and implements it at the TCP stack level by reusing sequence numbers. This extraction allows the messaging module to communicate reliably using sequence number reuse while the TCP connection itself remains stable, as the messaging communication is separated from the application data transmission.
Data Source
AI summary
Various systems and methods for exchanging communications between devices coupled by an address translation device are disclosed. These techniques can be used to facilitate automatic relationship discovery. One method involves extracting a sequence number from a TCP acknowledgment message being conveyed from a network interface to a TCP stack, and then sending a new TCP message, which includes the sequence number.