Unified Data Encapsulation for Multi-Protocol Security Testing

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current network security protocol testing methods are inefficient and costly due to their inability to fully utilize common characteristics of security protocols, requiring separate testing systems for each protocol and increasing development complexity and cost.

Innovation Solution

A communication protocol testing method and platform that uses a unified data encapsulation format to detect the execution of communication protocols between a tested device and a reference device, allowing for the reuse of testing systems and reducing development workload.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If a separate testing system is developed for each network security protocol, then the testing accuracy for that specific protocol is improved, but the development cost and complexity increase significantly

Engineering Contradiction:
Improvetesting accuracyVSAvoiddevelopment complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent creates a universal testing platform that can test multiple network security protocols (SSL/TLS, WPA/WPA2, IPsec, etc.) through a unified data structure. The platform uses a common message structure with fields for protocol type, message type, and protocol-specific parameters, allowing a single system to adapt to different protocols without requiring separate testing systems for each protocol, thereby reducing development complexity while maintaining testing accuracy.

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Measurement precision

If a separate testing system is developed for each network security protocol, then the testing accuracy for that specific protocol is improved, but the development cost increases

Engineering Contradiction:
Improvetesting accuracyVSAvoiddevelopment cost
Core Design Contradiction:
Measurement precisionVSEase of manufacture

Solution Approach 1:

The patent creates a universal testing platform that can test multiple network security protocols (SSL/TLS, WPA/WPA2, IPsec, etc.) through a unified data structure. The platform uses a common message structure with fields for protocol type, message type, and protocol-specific parameters, allowing a single system to adapt to different protocols without requiring separate testing systems for each protocol, thereby reducing development complexity while maintaining testing accuracy.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Extent of automation

If data capture tools are used for testing, then the testing process becomes more automated, but the system complexity and resource requirements increase

Engineering Contradiction:
Improvetesting automationVSAvoidsystem complexity
Core Design Contradiction:
Extent of automationVSDevice complexity

Solution Approach 1:

The patent implements a self-service testing approach where the device under test automatically generates test data and sends it directly to the testing platform through a standardized interface. This eliminates the need for external data capture tools to intercept and analyze traffic, as the tested device itself provides the test data in the required unified format, thereby maintaining automation while reducing system complexity.

Inventive Principle:
Principle #25Self-service

Data Source

PatentUS10243829B2Communication protocol testing method, and tested device and testing platform thereof
Publication Date: 2019.03.26 CHINA IWNCOMM
  • US10243829B2 patent drawing
  • US10243829B2 patent drawing
  • US10243829B2 patent drawing

AI summary

A communication protocol testing method, a tested device and a testing platform. The method includes: the tested device and the reference device execute a communication protocol, a message sent and/or received during execution of the communication protocol serving as a first message, and the first message being encapsulated in a data encapsulation format of the communication protocol; the tested device encapsulates a part of data or all the data in the first message and/or known data of the tested device according to a unified data encapsulation format to generate a second message; and the testing platform acquires the second message, parses the acquired second message according to the unified data encapsulation format to obtain a part of data or all the data in the second message, executes testing items, and outputs testing results, thereby completing the test.