VoIP Call Routing by Service Class for Secure Bandwidth Use
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional VoIP services face challenges in efficiently utilizing bandwidth due to high overhead from data encryption and authentication in Virtual Private Networks (VPNs), which also encounter difficulties in obtaining sufficient bandwidth.
Innovation Solution
A method and system for routing VoIP calls based on subscriber service classes, where packet data is determined to be routed over encrypted or non-encrypted networks, with encryption processors routing packets accordingly, and service classes differentiate between signaling and voice data, allowing for efficient bandwidth utilization by selecting appropriate network paths.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If VPN encryption is used for security, then security is improved, but bandwidth availability deteriorates due to processing overhead
Solution Approach 1:
The patent applies different quality levels of encryption to different subscribers based on their service class. Premium subscribers receive full VPN encryption services while standard subscribers use non-encrypted paths, allowing the system to optimize bandwidth usage by not applying encryption uniformly to all traffic while still providing security where needed.
Solution Approach 2:
The patent segments the network into encrypted and non-encrypted paths, and further segments subscribers into different service classes. This segmentation allows the system to route different types of traffic through appropriate paths based on subscriber class, resolving the contradiction between security requirements and bandwidth availability.
2Reliability
If uniform encryption is applied to all subscribers, then security is improved, but service differentiation capability deteriorates
Solution Approach 1:
The patent implements local quality by providing different encryption services to different subscribers based on their service class. Premium subscribers receive encrypted services while standard subscribers receive non-encrypted services, enabling service differentiation while maintaining security where required.
Solution Approach 2:
The patent makes the encryption service dynamic by allowing the system to adjust the level of encryption applied to each subscriber's traffic based on their service class and the type of data being transmitted. This dynamic approach enables flexible service differentiation while maintaining security standards.
3Reliability
If encryption processing is performed for all packets, then security is improved, but processing time increases
Solution Approach 1:
The patent applies partial action by performing encryption only on packets from premium subscribers or signaling packets, rather than encrypting all packets. This selective approach reduces processing time while still providing security where it is most needed.
Solution Approach 2:
The patent applies different processing qualities to different packets based on subscriber class and packet type. Premium subscriber packets receive full encryption processing while standard subscriber packets use faster non-encrypted paths, reducing overall processing time while maintaining security standards for critical traffic.
Data Source
AI summary
A method and system to rout a Voice over Internet Protocol (VoIP) call based on a service class of a subscriber enables efficient utilization of bandwidth by providing service corresponding to the subscriber service class, while enabling use of a Virtual Private Network (VPN) which provides security to a VoIP service. The method includes: determining a service class of a subscriber upon packet data being received from the subscriber; determining whether the received current packet is packet data to be routed over an encrypted network or a non-encrypted network, based on the service class of the subscriber; encrypting the received packet data with an encryption processor and then routing the encrypted packet data to a final destination with a router upon a determination that the received packet data is to be routed over the encrypted network; and directly routing the received packet data to the final destination with the router without encrypting the received packet data upon a determination that the received packet data is to be routed over the non-encrypted network without being encrypted.