Traffic Flow Authorization Using Duplicate Acknowledgments
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional systems experience delays in authorizing Transmission Control Protocol (TCP) and Stream Control Transmission Protocol (STCP) data flows, leading to poor Quality of Experience (QoE) for users due to the blocking of traffic until authentication is complete, which can result in increased wait times and negatively impact connectivity.
Innovation Solution
A method and system that receive packets from traffic flows, determine if they have been previously authorized, and if not, request authorization from an authorization server; upon receiving a response, send at least three duplicate acknowledgments to the sender to initiate retransmission ahead of standard timing, thereby reducing wait periods and improving QoE.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If conventional Data Plane equipment blocks traffic until authentication is complete, then authorization reliability is improved, but user wait time increases significantly
Solution Approach 1:
The system performs preliminary actions by sending duplicate acknowledgments to the sender immediately upon authorization completion, before the standard retransmission timer expires. This proactive approach ensures the sender is prepared for immediate retransmission, reducing the effective wait time while maintaining authorization reliability through proper authentication checks.
Solution Approach 2:
The system implements feedback mechanisms where the Data Plane equipment monitors authorization status and sends duplicate acknowledgments based on the authorization response from AAA servers. This feedback loop allows the system to adapt the retransmission timing based on actual authorization completion status, optimizing the balance between reliability and wait time.
2Stability of the object's composition
If Data Plane equipment waits for standard retransmission timing, then network stability is maintained, but connectivity speed is reduced
Solution Approach 1:
The system sends duplicate acknowledgments in advance upon authorization completion, preparing the sender for immediate retransmission. This preliminary action maintains network stability by using controlled, predictable retransmission triggers while significantly improving connectivity speed by eliminating unnecessary wait periods for standard retransmission timing.
Solution Approach 2:
The system dynamically adjusts retransmission timing based on authorization status. Instead of using fixed standard retransmission intervals, the system adapts the timing by sending duplicate acknowledgments immediately upon authorization completion, allowing the network to optimize performance based on actual conditions while maintaining stability through controlled retransmission management.
3Reliability
If traffic is blocked during authentication, then authorization control is improved, but Quality of Experience deteriorates
Solution Approach 1:
The system performs preliminary actions by preparing duplicate acknowledgments and sending them immediately upon authorization completion. This ensures that the sender is ready for immediate retransmission, minimizing the impact of blocking during authentication and improving Quality of Experience by reducing the perceived wait time while maintaining strong authorization control.
Solution Approach 2:
The system uses feedback from AAA servers to dynamically control traffic flow. By monitoring authorization responses and sending duplicate acknowledgments based on this feedback, the system maintains strong authorization control while improving Quality of Experience through faster, more responsive traffic restoration upon authorization completion.
Data Source
AI summary
A method and system for authorizing traffic flows in a computer network. The method including: receiving a packet from a traffic flow sent by a sender; determining whether the traffic flow has been previously authorized; if the traffic flow has not been previously authorized: determining a subscriber associated with the traffic flow, based on the data retrieved from the packet; requesting authorization from an authorization server based on the subscriber and the data retrieved from the packet; upon receiving a response from the authorization server, sending at least three duplicate acknowledgments to the sender, to generate a retransmission in advance of the standard retransmission timing; otherwise, if the traffic flow has been previously authorized, allowing the packet to continue to a destination.