Network Telemetry Injection for Encrypted Transport Monitoring
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The increased use of packet encryption and changes in Internet transport protocol designs, such as the QUIC protocol, have obscured observable data in transport protocol packets, making it difficult to determine range and quality telemetry data for streamed video and other data streams over networks.
Innovation Solution
A method where a device injects data, such as a pulse signal, into a network and sends attribute information about the injected data to another device, allowing the monitoring device to identify the injected data and determine network characteristics like congestion or packet loss by correlating the injected data's effect on the network.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If packet encryption is increased to protect data privacy and security, then data security is improved, but the ability to observe and measure network telemetry data deteriorates
Solution Approach 1:
The system performs preliminary actions by injecting known test data patterns into the network stream before the actual measurement process. This allows the monitoring device to establish a baseline of expected data characteristics that will pass through the encrypted network, enabling subsequent detection of network conditions through correlation analysis of the returned test data patterns.
Solution Approach 2:
The system introduces an intermediary approach by using correlation analysis as a mediator between the encrypted data flow and the monitoring device. Instead of directly observing encrypted packets, the system uses statistical correlation of injected test patterns with received data to infer network conditions, effectively mediating the measurement process without requiring decryption.
2Reliability
If transport protocol packet designs are changed to improve security (e.g., QUIC protocol with encrypted headers), then data protection is improved, but the ability to determine network delivery capabilities deteriorates
Solution Approach 1:
The system employs periodic action by continuously injecting test data patterns at regular intervals through the network connection. This periodic injection allows for continuous monitoring and measurement of network delivery capabilities over time, capturing variations in network performance while maintaining security through the use of encrypted protocols.
Solution Approach 2:
The system implements feedback mechanisms by analyzing the correlation between injected test data patterns and the data received back from the network. This feedback loop enables the monitoring device to continuously assess network delivery capabilities, detect issues such as packet loss or congestion, and provide this information back to the streaming system for adaptive adjustment.
3Loss of information
If network data flows are encrypted to prevent eavesdropping, then privacy is improved, but the ability to monitor network quality and performance deteriorates
Solution Approach 1:
The system uses copying by creating and injecting known test data patterns into the network stream. These copied test patterns serve as reference signals that allow the monitoring device to detect network conditions through correlation analysis, enabling quality monitoring without requiring access to the actual encrypted content of user data flows.
Data Source
AI summary
Methods, apparatuses, and systems are described for determining one or more characteristics of a network using multiplexed network transport protocols. A device may inject data into the network and send information indicative of the data injected into the network. A network device may receive the information indicative of the data injected into the network, monitor the network to identify the data injected into the network, and determine one or more characteristics of the network.