Methods and Systems for Controlling Traffic on a Communication Network

• US 20110107098A1
• Filed: 07/02/2009
• Published: 05/05/2011
• Est. Priority Date: 07/03/2008
• Status: Active Grant

• Current Assignee: Trustees Of Columbia University In The City Of New York (Columbia University)
• Original Assignee: Trustees Of Columbia University In The City Of New York (Columbia University)
• Inventors: Hong, Se Gi, Schulzrinne, Henning
• Granted Patent: US 8,995,274 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 2463/143 Denial of service attacks involving systematic or selective dropping of packets
• CPC Class Codes: H04L 45/00 Routing or path finding of packets in data switching networks routing or path finding in wireless networks H04W40/00
• CPC Class Codes: H04L 45/22 Alternate routing
• CPC Class Codes: H04L 45/304 Route determination for signalling traffic
• CPC Class Codes: H04L 63/1416 Event detection, e.g. attack signature detection
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002
• CPC Class Codes: H04L 63/1458 Denial of Service

Abstract

Methods and systems for controlling traffic on a communication network are provided. In accordance with some embodiments, methods for controlling traffic on a communication network are provided, the methods comprising—receiving, at a processor in a receiver, a query message for permission to send a data flow to the receiver; sending a permission message from the receiver; defecting that at least one of a message and a data packet being sent to the receiver has been dropped; and causing the path for sending the data flow to be changed.

Claims

1. A method for controlling traffic on a communication network, comprising:

receiving, at a processor in a receiver, a query message for permission to send a data flow to the receiver;

sending a permission message from the receiver;

detecting that at least one of a message and a data packet being sent to the receiver has been dropped; and

causing the path for sending the data flow to be changed.

2. The method of claim 1, wherein the path is changed to use a relay mode.

3. The method of claim 1, wherein the path is changed using multi-homing.

4. A method for controlling traffic on a communication network, comprising:

passing a query message for permission to send a data flow to a receiver;

passing a permission message that authorizes the sender to send a given amount of traffic flow; and

determining, using a processor, whether data packets are authorized based on the given amount of traffic flow.

5. The method of claim 4, further comprising dropping the data packets that are determined to not be authorized.

6. A method for controlling traffic on a communication network, comprising:

passing a query message for permission to send a data flow to a receiver;

passing a permission message that indicates a security protocol to be used when transmitting packets to the receiver; and

determining, using a processor, that a data packet being sent to the receiver violates the security protocol.

7. The method of claim 6, further comprising blocking the data packet from being received at the receiver.

8. The method of claim 6, wherein the security protocol is IPSec AH.

9. The method of claim 6, further comprising changing an encryption technique used in the security protocol.

10. The method of claim 9, wherein the encryption technique is changed from symmetric key encryption to public key encryption.

11. A method for controlling traffic on a communication network, comprising:

receiving, at a processor in a receiver, a query message for permission to send a data flow to the receiver;

sending a permission message that indicates a security protocol to be used when transmitting packets to the receiver; and

detecting that a data packet being sent to the receiver violates the security protocol.

12. The method of claim 11, further comprising ignoring the data packet at the receiver.

13. The method of claim 11, wherein the security protocol is IPSec AH.

14. The method of claim 11, further comprising changing an encryption technique used in the security protocol.

15. The method of claim 14, wherein the encryption technique is changed from symmetric key encryption to public key encryption.

16. A system for controlling traffic on a communication network, comprising:

a receiver having a processor that;

receives a query message for permission to send a data flow to the receiver;

sends a permission message from the receiver;

detects that at least one of a message and a data packet being sent to the receiver has been dropped; and

causes the path for sending the data flow to be changed.

17. The system of claim 16, wherein the path is changed using a relay node.

18. The system of claim 16, wherein the path is changed using multi-homing.

19. A system for controlling traffic on a communication network, comprising:

a processor that;

passes a query message for permission to send a data flow to a receiver;

passes a permission message that authorizes the sender to send a given amount of traffic flow; and

determines whether data packets are authorized based on the given amount of traffic flow.

20. The system of claim 19, wherein the processor drops the data packets that are determined to not be authorized.

21. A system for controlling traffic on a communication network, comprising:

a processor that;

passes a query message for permission to send a data flow to a receiver;

passes a permission message that indicates a security protocol to be used when transmitting packets to the receiver; and

detects that a data packet being sent to the receiver violates the security protocol.

22. The system of claim 21, wherein the processor also blocks the data packet from being received at the receiver.

23. The system of claim 21, wherein the security protocol is IPSec AH.

24. The system of claim 21, wherein the processor also causes an encryption technique used in the security protocol to be changed.

25. The system of claim 24, wherein the encryption technique is changed from symmetric key encryption to public key encryption.

26. A system for controlling traffic on a communication network, comprising:

a receiver having a processor that;

receives a query message for permission to send a data flow to the receiver;

sends a permission message that indicates a security protocol to be used when transmitting packets to the receiver; and

detects that a data packet being sent to the receiver violates the security protocol.

27. The system of claim 26, wherein the receiver also ignores the data packet at the receiver.

28. The system of claim 26, wherein the security protocol is IPSec AH.

29. The system of claim 26, wherein the processor also causes an encryption technique used in the security protocol to be changed.

30. The system of claim 26, wherein the encryption technique is changed from symmetric key encryption to public key encryption.