Traffic Identifiers for Enterprise and Personal Profile Policies
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile device management systems lack the ability to signal the distinction between personal and enterprise user device profiles to the network, leading to challenges in applying differentiated network policies and treatments.
Innovation Solution
Implementing user device profile markers in network signaling and data packets to differentiate between personal and enterprise profiles, allowing for separate network sessions or traffic identifiers to apply specific policies such as QoS and firewall settings.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If user device profiles are implemented to separate personal and work data, then data security and privacy are improved, but the network cannot currently differentiate between personal and enterprise traffic to apply appropriate policies
Solution Approach 1:
The patent introduces traffic identifiers (such as DNN, S-TWI, or P-TWI) as intermediary elements that carry profile information through the network. These identifiers act as mediators between the user device profiles and the network policies, enabling the network to distinguish between personal and enterprise traffic without modifying the core profile separation mechanism on the device.
Solution Approach 2:
The patent segments network traffic into distinct flows based on user device profiles by introducing separate traffic identifiers for personal and enterprise data. This segmentation allows the network to apply different policies to different traffic types while maintaining the logical separation already implemented at the device level through work profiles.
2Adaptability or versatility
If traffic identifiers are introduced to enable network policy differentiation, then network policy adaptability is improved, but network signaling and packet structure complexity increases
Solution Approach 1:
The patent designs traffic identifiers to serve multiple functions: they identify the user device profile type (personal or enterprise), carry QoS information, and enable policy application. By making these identifiers multi-functional, the patent reduces the need for separate signaling mechanisms and minimizes the overall complexity increase.
Solution Approach 2:
The patent utilizes existing network parameters (such as DNN, S-TWI, P-TWI) and modifies their semantics to include profile differentiation capabilities. Rather than introducing entirely new signaling protocols, the patent changes the interpretation and usage of existing parameters, thereby achieving policy differentiation with minimal additional complexity.
3Adaptability or versatility
If separate network sessions are created for personal and enterprise profiles, then traffic treatment differentiation is improved, but network resource consumption increases
Solution Approach 1:
The patent implements a dynamic approach where the network can flexibly allocate resources based on traffic characteristics rather than creating static separate sessions for all traffic. The system can dynamically establish dedicated sessions only when required by policy, while allowing shared sessions with differentiated treatment for other traffic types, thereby optimizing resource utilization.
Data Source
AI summary
In some aspects, the techniques described herein relate to a method including: obtaining, at a network device from a user device, a request for a network session, the request including an indication of a user device profile; determining a traffic identifier to associate with the user device profile; binding the traffic identifier to a network policy to be applied to traffic associated with the user device profile; and providing the traffic identifier to the user device.