Anomaly Detection for Video Transmission Traffic

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Video transmission devices that do not support information collection protocols pose challenges in detecting abnormalities, and manual setting of expected traffic amounts for each port is impractical due to frequent configuration changes in IP packet transfer devices.

Innovation Solution

An abnormality detection device that automatically calculates expected traffic amounts by aggregating flow information and comparing it with measured traffic, using a flow table generation circuit, connection table generation circuit, and comparison circuit to determine deviations and detect abnormalities.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If manual setting of expected traffic amounts for each port is used, then abnormality detection accuracy is improved, but operation complexity increases and cannot keep up with frequent configuration changes

Engineering Contradiction:
Improveabnormality detection accuracyVSAvoidoperation complexity
Core Design Contradiction:
Measurement precisionVSEase of operation

Solution Approach 1:

The system automatically collects flow information from transmission and reception devices, generates flow tables, and calculates expected traffic amounts without requiring manual configuration. The abnormality detection device performs self-service by autonomously adapting to configuration changes through automatic information collection and calculation, eliminating the need for manual setting while maintaining detection accuracy

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system continuously collects flow information from devices, compares actual traffic with calculated expected traffic, and uses this feedback to detect abnormalities. The automatic calculation of expected traffic amounts based on real-time flow information creates a feedback loop that adapts to configuration changes, maintaining detection accuracy without manual intervention

Inventive Principle:
Principle #23Feedback

2Loss of information

If information collection protocols like SNMP or SYSLOG are used, then traffic monitoring capability is improved, but device compatibility deteriorates due to lack of protocol support in some video transmission devices

Engineering Contradiction:
Improvetraffic monitoring capabilityVSAvoiddevice compatibility
Core Design Contradiction:
Loss of informationVSAdaptability or versatility

Solution Approach 1:

The abnormality detection device acts as an intermediary that collects flow information directly from transmission and reception devices using their native communication capabilities, bypassing the need for SNMP or SYSLOG protocols. This intermediary approach enables traffic monitoring in devices that do not support standard information collection protocols

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system uses universal flow information collection methods that work across different device types and protocols. By collecting transmission source information, destination information, and flow identifiers from various devices through compatible means, the system achieves universal traffic monitoring capability across devices with different protocol support

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Measurement precision

If flow information is collected from all transmission and reception devices, then automatic calculation accuracy is improved, but information collection complexity increases

Engineering Contradiction:
Improveautomatic calculation accuracyVSAvoidinformation collection complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The system segments information collection by device type, creating separate flow tables for transmission devices and reception devices. This segmentation allows the system to collect and process information from multiple devices in an organized manner, improving calculation accuracy while managing collection complexity through structured data organization

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system merges flow information from multiple transmission and reception devices into unified flow tables, aggregating data by transmission source address, transmission source port, destination address, and destination port. This merging process enables automatic calculation of expected traffic amounts with high accuracy while simplifying the overall information collection process through consolidated data structures

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentUS11991063B2Anomaly detection device, anomaly detection method, and program
Publication Date: 2024.05.21 NIPPON TELEGRAPH & TELEPHONE CORP
  • US11991063B2 patent drawing
  • US11991063B2 patent drawing
  • US11991063B2 patent drawing

AI summary

An abnormality detection device according to the present invention is a video transmission state abnormality detection device connected via a network to a plurality of video transmission devices, an IP packet transfer device on the transmission side, an IP packet transfer device on the reception side, and a plurality of video reception devices. The video transmission state abnormality detection device prepares a transmission/reception IP flow table by aggregating IP flow information for the devices, detects an abnormality in transmission on the basis of the transmission/reception IP flow table, and specifies the location of the abnormality. The abnormality detection device according to the present invention can automatically detect the amount of traffic and specify which part of a transmission path an abnormality is caused on, without the need for advance setting. Therefore, video or sound traffic can be monitored efficiently.