VPN Renegotiation Control for VoIP Reliability
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing network architectures face challenges in providing reliable, secure, and delay-tolerant voice over Internet Protocol (VoIP) communications, particularly in wireless environments, where traditional data networks are not suited for voice traffic and often result in dropped calls due to frequent renegotiation of VPN connections.
Innovation Solution
A method and system that establish a virtual private network (VPN) connection between a client machine and a server, where the client periodically determines if the data stream is non-delay tolerant, such as a voice call, and instructs the VPN concentrator to cease or resume renegotiation of the VPN connection accordingly, using a priority indicator and renegotiation control messages to manage the VPN connection effectively.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If VPN connection renegotiation is performed frequently to maintain security, then data security is improved, but voice call reliability deteriorates due to dropped calls
Solution Approach 1:
The system dynamically adjusts the VPN renegotiation interval based on the type of data stream being transmitted. For delay-tolerant data streams, frequent renegotiation maintains security. For non-delay-tolerant voice streams, the system extends the renegotiation interval or suspends it temporarily, allowing the voice call to maintain connectivity without interruption while security is preserved at an appropriate level.
2Ease of operation
If VPN connection is maintained continuously for voice calls, then call reliability is improved, but security deteriorates due to lack of renegotiation
Solution Approach 1:
The system implements periodic VPN renegotiation with adjustable intervals based on stream characteristics. For voice streams, renegotiation occurs at extended intervals or is suspended during active calls to maintain continuity. For data streams, standard periodic renegotiation maintains security. This selective periodic action balances security requirements with operational continuity needs.
3Reliability
If VPN renegotiation is suspended for non-delay tolerant streams, then service quality is improved, but security monitoring capability deteriorates
Solution Approach 1:
The system implements feedback mechanisms where the VPN concentrator receives information about active streams and their delay tolerance characteristics. Based on this feedback, the concentrator dynamically adjusts renegotiation timing. The system monitors stream status and provides feedback to the VPN management system, enabling informed decisions about when to suspend or resume renegotiation while maintaining security awareness.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
A method and system for conducting communications over a network is provided. An embodiment includes a server that is connectable to a client machine via a virtual private network that includes a VPN concentrator. The client machine and the VPN concentrator are configured to delay renegotiation of the VPN link in the event that an important stream is being carried over the VPN link.