User-Control Plane Traffic Correlation for Scalable Network Monitoring
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Challenges exist in efficiently monitoring network performance by correlating user plane and control plane traffic in a network system with control and user plane separation, particularly in 5G networks, while maintaining scalability and minimizing network burden.
Innovation Solution
A network monitoring system that includes U probes and C probes to capture and buffer user and control plane packets, respectively, and correlates them using deep packet inspection to generate monitoring data, minimizing data transmission and network burden.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If user plane and control plane are physically separated to provide network scalability, then network capacity is improved, but correlation of user plane and control plane traffic becomes more difficult
Solution Approach 1:
The patent introduces an intermediary correlation system that receives traffic data from both user plane and control plane, performs matching operations using correlation keys, and produces correlated results. This intermediary component resolves the complexity of direct correlation between physically separated planes by providing a centralized matching mechanism that handles the coordination overhead.
Solution Approach 2:
The patent segments the correlation process into distinct functional components: data collection from separate planes, key extraction and matching, and result generation. This segmentation allows each component to be optimized independently and facilitates distributed implementation across multiple system elements, reducing overall system complexity.
2Measurement precision
If deep packet inspection is performed to correlate traffic, then measurement precision is improved, but processing time increases
Solution Approach 1:
The patent applies partial deep packet inspection by extracting only specific correlation keys from packets rather than performing complete inspection of all packet contents. This selective approach maintains sufficient accuracy for correlation purposes while significantly reducing processing time compared to full deep packet inspection of every packet.
Solution Approach 2:
The patent performs preliminary extraction of correlation keys from packets before the actual matching operation. By preparing and organizing these keys in advance, the system reduces the computational burden during the correlation matching phase, thereby reducing overall processing time while maintaining correlation accuracy.
3Reliability
If network monitoring system is expanded to monitor separated planes, then monitoring capability is improved, but network burden increases
Solution Approach 1:
The patent extracts only the essential correlation keys from network traffic for monitoring purposes, rather than capturing and processing complete packet data. This extraction approach maintains monitoring capability by preserving the necessary information for correlation while significantly reducing the amount of data that needs to be transmitted and processed, thereby reducing network burden.
4Adaptability or versatility
If user plane nodes are selected for specific roles to enable programmability, then adaptability is improved, but system complexity increases
Solution Approach 1:
The patent implements a universal correlation framework that can handle multiple user plane node roles and configurations through a single matching mechanism. The correlation system is designed to work with any user plane node regardless of its specific role, eliminating the need for separate correlation logic for each node type and reducing overall system configuration complexity.
Data Source
AI summary
A system having a network monitor communicating with U and C probes monitoring SGW-U and SGW-Cs. The U probes buffer captured user plane packets from which they determine new sessions and send new session data to the network monitor, the new session data including an IP address pair of the corresponding U probe and SGW-U. The C probes inspect captured control plane packets, determine control plane packets having a same IP address as an SGW-U in the new session data, and send associated control data to a particular U probe having the IP address paired with the IP address of the SGW-U, wherein the particular U probe correlates the control data with buffered user plane packets and generates associated monitoring data.


