WLAN Tunnel Establishment Threshold Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for establishing tunnels in WLANs are inefficient as they fail to effectively control tunnel establishment, leading to unnecessary rejections of tunnel requests due to mismatched parameters between the maximum number of IPsec SA tunnels per IKE and the per-user count.
Innovation Solution
Implementing a method and system that use first and second thresholds to determine whether to establish a tunnel based on the number of tunnels already established in an IKE Security Association (SA) and the number of tunnels for a user, allowing rational and valid tunnel establishment by querying these thresholds during the request process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the current method uses a single per user count parameter to control tunnel establishment, then the system is simple to operate, but it causes unnecessary rejections of tunnel requests due to parameter mismatch between Max number of IPsec SA per IKE and per user count
Solution Approach 1:
The patent segments the single per user count parameter into two distinct threshold parameters: first threshold (Max number of IPsec SA per IKE) and second threshold (per user count). This segmentation allows independent control of tunnel establishment at different levels (IKE SA level and user level), preventing unnecessary rejections by checking both thresholds separately rather than using a single aggregated parameter.
2Productivity
If the system checks both first threshold and second threshold before establishing tunnels, then tunnel establishment accuracy improves, but the control process becomes more complex
Solution Approach 1:
The patent implements preliminary checking of both first threshold and second threshold parameters before tunnel establishment is attempted. By performing these checks in advance (before the actual tunnel setup), the system avoids unnecessary rejections and establishes tunnels more efficiently, even though it requires checking multiple parameters. The preliminary action prevents wasted processing on tunnel requests that would be rejected anyway.
Data Source
AI summary
A method and a system for establishing a tunnel in a wireless local area network (WLAN) are described. The method includes the following steps. A WLAN terminal initiates a tunnel establishment request in an Internet Key Exchange Security Association (IKE SA) that has been established. It is judged whether the number of tunnels already established in the IKE SA reaches a corresponding first threshold or not, if the number of tunnels does not reach the corresponding first threshold, establishing the tunnel for the WLAN terminal; otherwise, rejecting the establishment of the tunnel for the WALN terminal. It is decided whether to establish the tunnel for the WLAN terminal or not by judging whether the number of the tunnels already established in each IKE SA reaches the corresponding threshold or not during the tunnel establishment of the WLAN terminal, thereby effectively controlling the rationality and validity about the tunnel establishment.