VPN Concentrator Stream Priority Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Convergence of voice and data networks poses challenges in ensuring quality of service and security, particularly for voice over Internet Protocol (VOIP) calls, as existing architectures often result in dropped calls and security concerns, especially with wireless access.
Innovation Solution
Establishing a virtual private network (VPN) connection with a VPN concentrator that periodically determines the importance of data streams, ceasing and resuming renegotiation requests based on stream importance, using priority indicators and renegotiation control messages to manage VPN connections effectively.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Object-affected harmful factors
If VPN connection renegotiation is performed periodically to maintain security, then data security is improved, but VOIP call reliability deteriorates due to dropped calls
Solution Approach 1:
The patent implements dynamic VPN connection management by introducing a priority indicator mechanism that allows the system to adaptively adjust renegotiation behavior based on the importance of the data stream. VOIP calls are marked with high priority indicators, causing the VPN concentrator to suspend periodic renegotiation requests during active calls, while non-VOIP data streams continue normal security renegotiation cycles. This dynamic approach resolves the contradiction by making the security mechanism flexible rather than rigid.
Solution Approach 2:
The patent applies different quality levels of VPN connection management to different data streams based on their priority indicators. High-priority streams (VOIP calls) receive enhanced protection by suspending renegotiation entirely, while low-priority streams (non-time-sensitive data) receive standard periodic renegotiation for security. This local differentiation allows the system to optimize security and reliability for each stream type independently, resolving the universal contradiction.
2Reliability
If VPN connection is maintained continuously for VOIP calls, then call reliability is improved, but data security deteriorates due to lack of renegotiation
Solution Approach 1:
The system dynamically adjusts the VPN connection lifecycle based on stream priority. For high-priority VOIP streams, the connection is maintained continuously without renegotiation interruptions. For low-priority streams, the connection undergoes periodic renegotiation. This dynamic behavior is controlled by the priority indicator field in the VPN protocol, allowing the system to adapt connection management to the specific requirements of each data stream.
Solution Approach 2:
The patent changes the renegotiation parameter (frequency/duration) based on the priority indicator of the data stream. The priority indicator acts as a control parameter that modifies the renegotiation behavior: high priority values result in suspended or extended renegotiation intervals, while low priority values result in normal periodic renegotiation. This parameter-based control resolves the contradiction by allowing continuous connections for VOIP while maintaining security renegotiation for other traffic.
3Reliability
If VPN renegotiation is suspended during VOIP calls, then call reliability is improved, but security monitoring capability deteriorates
Solution Approach 1:
The patent implements selective security monitoring by priority stream type. The VPN concentrator maintains full security monitoring and renegotiation capability for low-priority data streams while suspending these operations only for high-priority VOIP streams. The priority indicator mechanism allows the system to locally differentiate between streams that require active security monitoring and those that require uninterrupted connectivity, resolving the contradiction between monitoring capability and call reliability.
Data Source
AI summary
A method and system for conducting communications over a network is provided. An embodiment includes a server that is connectable to a client machine via a virtual private network that includes a VPN concentrator. The client machine and the VPN concentrator are configured to delay renegotiation of the VPN link in the event that an important stream is being carried over the VPN link.