Classifications

• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L45/00—Routing or path finding of packets in data switching networks
  • H04L45/54—Organization of routing tables
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L63/00—Network architectures or network communication protocols for network security
  • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
  • H04L63/0892—Network architectures or network communication protocols for network security for authentication of entities by using authentication-authorization-accounting [AAA] servers or protocols
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L65/00—Network arrangements, protocols or services for supporting real-time applications in data packet communication
• • H—ELECTRICITY
  • H04—ELECTRIC COMMUNICATION TECHNIQUE
  • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
  • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
  • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Definitions

• the subject matter described herein relates to routing network traffic in a DIAMETER network. More specifically, the subject matter relates to methods, systems, and computer readable media for providing dynamic origination-based routing key registration in a diameter network.
• DIAMETER node such as a DIAMETER relay node or DIAMETER routing node
• IETF Internet engineering task force
• RRCs request for comments
• hub provider A must manually gather origin-based routing information and update its routing tables.
• a human user may be required to manually log into a terminal associated with one or more DIAMETER nodes in the hub provider's network and add origin-based rules to the routing tables.
• DNS domain name system
• network operator X if network operator X wishes to know the networks (i.e., realms or hosts) to which he can route traffic, operator X sends a DNS query to a DNS server that maintains this information. Based on the information included in the DNS response, network operator X (i.e., the DIAMETER node in realm X that initiated the DNS query) may automatically update its routing tables with the destination-based routing information.
• networks i.e., realms or hosts
• one drawback to conventional methods for populating or updating routing information in DIAMETER nodes is that automatic routing table population is only available for destination-based routing information.
• a corollary drawback of conventional methods is therefore that populating and/or updating routing information for DIAMETER nodes is a manual process that may be slow and prone to error.
• origin-based routing information is received, at a first DIAMETER node, from a second DIAMETER node.
• the origin-based routing information specifies one or more sources such that traffic originating from one of the one or more sources should be routed to the second DIAMETER node.
• a routing rule is automatically generated, at the first DIAMETER node, based on the received origin-based routing information.
• a DIAMETER node for providing dynamic origination-based routing key registration in a DIAMETER network includes a communications module for receiving, from a second DIAMETER node, origin-based routing information, where the origin-based routing information specifies one or more sources such that traffic originating from one of the one or more sources should be routed to the second DIAMETER node.
• the DIAMETER node also includes a rule generation module for automatically generating a routing rule based on the received origin-based routing information.
• the subject matter described herein for providing dynamic origination- based routing key registration in a DIAMETER network may be implemented using a non-transitory computer readable medium to having stored thereon executable instructions that when executed by the processor of a computer control the processor to perform steps.
• Exemplary non-transitory computer readable media suitable for implementing the subject matter described herein include chip memory devices or disk memory devices accessible by a processor, programmable logic devices, and application specific integrated circuits.
• a computer readable medium that implements the subject matter described herein may be located on a single computing platform or may be distributed across plural computing platforms.
• Figure 1 is a network diagram illustrating an exemplary communications in a DIAMETER network for providing dynamic origination- based routing key registration according to an embodiment of the subject matter described herein;
• Figure 2 is a flow chart illustrating an exemplary process for providing dynamic origination-based routing key registration according to an embodiment of the subject matter described herein;
• Figure 3 is a network diagram illustrating using a modified DIAMETER CEA message in an exemplary DIAMETER network for providing dynamic origination-based routing key registration according to an embodiment of the subject matter described herein;
• Figure 4 is a diagram illustrating contents of an exemplary modified
• DIAMETER CER for providing dynamic origination-based routing key registration according to an embodiment of the subject matter described herein;
• Figure 5 is a network diagram illustrating using a modified DIAMETER CEA message in an exemplary DIAMETER network for providing dynamic origination-based routing key registration according to an embodiment of the subject matter described herein;
• Figure 6 is a diagram illustrating contents of an exemplary modified DIAMETER CER message for providing dynamic origination-based routing key registration according to an embodiment of the subject matter described herein;
• Figure 7 is a network diagram illustrating authentication and origin- based routing information sharing among DIAMETER nodes in an exemplary DIAMETER network for providing dynamic origination-based routing key registration according to an embodiment of the subject matter described herein;
• FIG. 8 is a network diagram illustrating an exemplary DIAMETER network where DIAMETER nodes are located within the same realm for providing dynamic origination-based routing key registration according to an embodiment of the subject matter described herein;
• Figure 9 is an exemplary peer routing table illustrating exemplary routing rules that may be generated based on origin-based routing information for providing dynamic origination-based routing key registration according to an embodiment of the subject matter described herein.
• Methods, systems, and computer readable media for providing dynamic origination-based routing key registration in a DIAMETER network are disclosed.
• registering which origin-hosts and/or origin-realms should direct traffic toward a DIAMETER node allows for automatic generation of routing rules and population of routing tables in DIAMETER nodes specifying one or more sources such that traffic originating from one of the one or more sources should be routed to a DIAMETER node submitted a notification message.
• the notification message may include a new peer-to-peer message or, alternatively, the notification message may include an enhanced (i.e., modified) version of a DIAMETER capabilities exchange message.
• a first DIAMETER node i.e., sender
• a second DIAMETER node i.e., receiver
• populating and/or updating routing information for DIAMETER nodes to include origin-based routing information is an automatic process that may be faster and less prone to error than conventional, manual methods.
• a peer DIAMETER node may specify, to a DIAMETER relay or routing node, that when the DIAMETER relay or routing node receives traffic from a particular originating host or originating realm, the traffic should be directed to the peer DIAMETER node.
• FIG. 1 is a network diagram illustrating exemplary communications in a DIAMETER network for providing dynamic origination-based routing key registration according to an embodiment of the subject matter described herein.
• DIAMETER server 100 may include a DIAMETER agent, DIAMETER relay, DIAMETER proxy, or other DIAMETER node capable of processing and routing DIAMETER messages.
• the DIAMETER protocol is designed as a peer-to-peer architecture, and every host that implements the DIAMETER protocol can act as either a client or a server depending on network deployment.
• the term DIAMETER node may refer to a DIAMETER client, a DIAMETER server, or a DIAMETER agent.
• DIAMETER agents include a relay agent, a proxy agent, and a redirect agent.
• a DIAMETER relay agent may be used to forward a message to the appropriate destination, depending on the information contained in the message.
• a DIAMETER relay agent may aggregate requests from different realms (or regions) to a specific realm.
• a DIAMETER proxy agent may also be used to forward messages, but unlike a DIAMETER relay agent, a DIAMETER proxy agent can modify the message content and, therefore, provide value- added services, enforce rules on different messages, or perform administrative tasks for a specific realm.
• a DIAMETER redirect agent may act as a centralized configuration repository for other DIAMETER nodes. When a DIAMETER redirect agent receives a message, it may check its routing table and return a response message along with redirection information to its original sender.
• DIAMETER server 100 may wish for traffic that meets certain criteria to be routed to DIAMETER server 100.
• DIAMETER server 100 may inform neighboring DIAMETER signaling routers (DSR) of the origin-based routing information via one (or more) messages.
• DSR DIAMETER signaling routers
• DIAMETER server 100 may send message 102 to DSR 104, which includes origin-based routing information that specifies one or more sources, such that traffic originating from one of the one or more sources should be routed to a second DIAMETER node.
• message 102 may include a new message type for providing origin-based routing information or may leverage existing message formats without departing from the scope of the subject matter described herein.
• Message 102 may identify DIAMETER server 100 by an origin host identifier and an origin realm identifier.
• message 102 may include information identifying an application identifier specifying an application type such that traffic originating from an application of the specified application type should be routed to DIAMETER server 100.
• message 102 may include an origin-based routing key for indicating, to DSR 104, the identities of the realms or hosts from which traffic originating at those hosts or realms should be routed to DIAMETER server 100.
• DSR 104 may automatically generate one or more routing rules based on the origin-based routing information received in message 102. DSR 104 may then populate or update routing rules 106 with the newly generated rule(s) and route traffic using routing rules 106.
• FIG. 2 is a flow chart illustrating an exemplary process for providing dynamic origination-based routing key registration according to an embodiment of the subject matter described herein.
• the steps may be performed at a DIAMETER node, such as DSR 104 of Figure 1.
• origin-based routing information is received from a second DIAMETER node, where the origin-based routing information includes information specifying one or more sources such that traffic originating from one of the one or more sources should be routed to the second DIAMETER node.
• an origin- based routing key i.e., realm Y, realmZ, hostY, or hostZ
• message 102 received by DSR 104 sent from DIAMETER server 100.
• the first DIAMETER node may automatically generate a routing rule based on the received origin-based routing information.
• Figure 3 is a network diagram illustrating using a modified DIAMETER CEA message in an exemplary DIAMETER network for providing dynamic origination-based routing key registration according to an embodiment of the subject matter described herein.
• realm X 300 may be connected to realm Y 302 and realm Z 304 via hub provider network 306.
• DSR 308 located at the edge of hub provider network 306 may be connected to DIAMETER server 310 in realm Y 302.
• DSR 312 located at the edge of hub provider network 306 may be connected to DIAMETER server 314 in realm Z 304.
• DSRs 104, 308, and 312 may communicate with each other via signaling DIAMETER links (shown as dashed lines).
• realm X 300 wishes for all traffic for application ID X originating from realm Y 302 and realm Z 304 to be routed to realm X 300.
• realm Y 302 could specify the realms it wished to route traffic to
• the subject matter described herein allows for the reverse scenario, namely for a destination to specify those realms, hosts, or applications from which traffic originating from those realms, hosts, or application should be routed.
• a capabilities exchange message allows the discovery of a peer's identity and its capabilities (e.g., protocol version number, supported Diameter applications, security mechanisms, etc.)
• the initiator may send a capabilities exchange request (CER) message and the responder will reply with a capabilities exchange answer (CEA) message.
• CER capabilities exchange request
• CEA capabilities exchange answer
• Figure 3 shows a scenario in which DSR 104 has been designated as the initiator and therefore, may send CER message 316 when the SCTP association is set up.
• DIAMETER server 100 may be configured to generate and send a modified CER message that includes an origin-based routing key and origin-based routing information.
• DIAMETER server 100 may send modified CEA message 318 indicating "send me all appX traffic originating from realms Y and Z" to DSR 104.
• modified CEA message 318 indicating "send me all appX traffic originating from realms Y and Z" to DSR 104.
• FIG. 4 is a diagram illustrating contents of an exemplary modified DIAMETER CER message for providing dynamic origination-based routing key registration according to an embodiment of the subject matter described herein.
• a conventional CEA message indicated by the Command-Code set to 257 and the Command Flags' 'R' bit cleared, may be sent in response to a CER message.
• the vendor-ID attribute value pair (AVP) (AVP Code 266) is an unsigned 32-bit integer (of type Unsigned32) and contains the Internet assigned numbers authority (IANA) "SMI Network Management Private Enterprise Codes" value assigned to the vendor of the DIAMETER application.
• the vendor-ID may be used to determine which vendor specific attributes may be sent to the peer.
• the Firmware- Revision AVP (AVP Code 267) is also of type Unsigned32 and may be used to inform a DIAMETER peer of the firmware revision of the issuing device. For devices that do not have a firmware revision (e.g., general purpose computers running DIAMETER software modules, for instance), the revision of the DIAMETER software module may be reported instead.
• the Host-IP- Address AVP (AVP Code 257) is of type Address and may be used to inform a DIAMETER peer of the sender's IP address.
• the Supported-Vendor-ID AVP (AVP Code 265) is of type Unsigned32 and may contain the IANA "SMI Network Management Private Enterprise Codes" value assigned to a vendor other than the device vendor.
• the Supported-Vendor-ID may be used in CER and CEA messages to inform a DIAMETER peer that the sender supports (a subset of) the vendor-specific AVPs defined by the vendor identified in the Supported-Vendor-ID AVP.
• the Product-Name AVP (AVP Code 269) is of type UTF8String, and may contain the name of the product assigned by the vendor.
• modified DIAMETER CEA message 318 may also include an origin-based routing key and origin-based routing information.
• modified CEA message 318 may include a newly defined parameter including the tuple ⁇ host X, realm X, application> for indicating what traffic DSR X wants to receive and from whom.
• the routing key may describe a set of parameters and their values, which may then be used to identify what signaling traffic is to be sent to a specific destination.
• the routing key may be a set of parameters used to filter incoming DIAMETER messages for routing purposes. It is appreciated that the origin-based routing key may be made up of several different combinations, which may be implementation-specific.
• Figure 5 is a network diagram illustrating using a modified DIAMETER CEA message in an exemplary DIAMETER network for providing dynamic origination-based routing key registration according to an embodiment of the subject matter described herein.
• realm X 300 may be connected to realm Y 302 and realm Z 304 via hub provider network 306.
• DSR 308 in hub provider network 306 may be connected to DIAMETER server 310 in realm Y 302.
• DSR 312 in hub provider network 306 may be connected to DIAMETER server 314 in realm Z 304.
• DSRs 104, 308, and 312 may communicate with each other via signaling DIAMETER links (shown as dashed lines).
• realm X 300 wishes for all traffic for application ID X originating from realm Y 302 and realm Z 304 to be routed to realm X 300.
• realm Y 302 could specify the realms it wished to route traffic to
• the subject matter described herein allows for the reverse scenario, namely for a destination to specify those realms, hosts, or applications from which traffic originating from those realms, hosts, or application should be routed.
• FIG. 5 shows a scenario in which DIAMETER server 100 has been designated as the initiator and DSR 104 has been designated as the responder. Therefore, DIAMETER server 100 may send a CER message to DSR 104. However, rather than sending a conventional CER message, DIAMETER server 100 may send a modified CER message 500 when a SCTP association is set up. DSR 104 may be configured to generate and return a conventional CER message. For example, DIAMETER server 100 may send modified CEA message 502 indicating "send me all appX traffic originating from realms Y and Z" to DSR 104.
• modified CER message 500 will now be described in greater detail below with respect to Figure 6.
• FIG. 6 is a diagram illustrating contents of an exemplary modified DIAMETER CER message for providing dynamic origination-based routing key registration according to an embodiment of the subject matter described herein.
• CER message 500 may include a vendor-ID AVP (AVP Code 266), a vendor-ID, a Firmware-Revision AVP (AVP Code 267), a Host-IP- Address AVP (AVP Code 257), a Supported-Vendor-ID AVP (AVP Code 265) and a Product-Name AVP (AVP Code 269) is of type UTF8String, and may contain the name of the product assigned by the vendor.
• modified DIAMETER CER message 500 may include an origin-based routing key and origin-based routing information.
• modified CER message 500 may include a newly defined parameter including a tuple indicating what traffic DSR X wants to receive and from whom.
• Figure 7 is a network diagram illustrating authentication and origin- based routing information sharing among DIAMETER nodes in an exemplary DIAMETER network for providing dynamic origination-based routing key registration according to an embodiment of the subject matter described herein.
• DIAMETER server 100 may send message 102 including origin-based routing information indicating that all traffic received by DSR 104 in hub provider network 306 for appX from realm y 302 and realm Z 304 should be sent to DIAMETER server 100 in realm X 300.
• DSR 104 may authenticate the origin-based routing information provided in message 102 before generating any routing rules or routing traffic based on the routing rules. For example, reception of message 102 may trigger DSR 104 to generate and send an authentication message 700 to authentication server 702.
• authentication server 702 may return an authentication response 704 to DSR 104 indicating that the origin-based routing information is authenticated. DSR 104 may then generate routing rules based on the origin-based routing information and route traffic accordingly.
• FIG. 7 illustrates an exemplary method for sharing origin-based routing information among DIAMETER nodes in the same network.
• DSR 104 may forward the received origin-based routing information to DSR 308 via origin-based routing information update notification message 706A and to DSR 312 via origin-based routing information update notification message 706B.
• FIG 8 is a network diagram illustrating an exemplary DIAMETER network where DIAMETER nodes are located within the same realm for providing dynamic origination-based routing key registration according to an embodiment of the subject matter described herein.
• DIAMETER server 800 may wish for traffic that meets certain criteria to be routed to DIAMETER server 802.
• DIAMETER server 800 may inform DSR 804 within the same realm of the origin-based routing information via one (or more) messages.
• DIAMETER server 800 may send message 806 to DSR 804, which includes origin-based routing information that specifies one or more sources, such that traffic originating from one of the one or more sources should be routed to a second DIAMETER node.
• Message 806 may include origin-based routing information.
• DSR 804 may automatically generate one or more routing rules based on the origin-based routing information received in message 806. DSR 804 may then populate or update routing rules with the newly generated rule(s) and route traffic using routing rules.
• Figure 9 is an exemplary peer routing table illustrating exemplary routing rules that may be generated based on origin-based routing information for providing dynamic origination-based routing key registration according to an embodiment of the subject matter described herein.
• PRT peer routing table
• the PRT may be part of routing rules 106 which may be associated with DSR 104.
• Column 900 may include a destination realm identifier.
• the destination realm identifier may include either a specific realm (e.g., myNW.com) or may include a "don't care" condition.
• a "don't care" condition is a logical condition in which the output is independent of the state of a set of given inputs. In other words, any realm will satisfy a don't care condition located in destination realm identifier column 900.
• Column 904 specifies a destination host identifier for identifying a particular host.
• Column 906 specifies an originating realm identifier for identifying a particular realm.
• Column 908 specifies an originating host identifier.
• an originating realm ID and/or an originating host ID may comprise origin-based routing information for specifying one or more sources such that traffic originating from one of these sources should be routed to the second DIAMETER node. It is appreciated that conventional PRTs do not include the origin-based routing information shown in columns 906 or 908. As such, the inclusion of columns 906 and 908 is an important aspect of the subject matter described herein.
• Column 910 specifies a routing action to be taken. Exemplary actions may include routing the message to the specified peer or returning an error message indicating that the message cannot be routed.
• Route list name specifies a route list name for identifying a route list.
• the route list may include one or more route names indicating the nodes over which messages should be routed.
• route list names may include TKLC_NW, HSS1 , MME2, or— for indicating route lists associated with Tekelec Northwest, Home Subscriber Server number 1 , mobility management entity number 2, or an unnamed default route list, respectively.
• route list name TKLC_NW may include route names TKLC_PEER1 , TKLC_PEER2, TKLC_PEER3, and TKLC_PEER4, where TKLCJPEER1 and TKLC_PEER2 are an active route group and are associated with a high priority value (e.g., 1) while TKLC_PEER3, TKLC_PEER4 are a standby route group and are associated with a lower priority value (e.g., 2).
• Column 914 specifies a priority for the rule. For given origin-based routing information, multiple routing rules may be generated. For example, a primary routing rule may specify that all traffic originating from host Z in realm Z should be routed to DIAMETER server 100. A secondary routing rule, having a lower priority, may specify that all traffic originating from realm Z should be routed to DIAMETER server 100. Finally, a default routing rule, having a lowest priority, may specify that all traffic originating from realm Z should be discarded and an error message returned to the sender.
• Routing rule 916 illustrates that traffic originating from realmY.net and appX should be routed to TKLC_NW, regardless of its destination realm or destination host.
• Routing rule 918 illustrates that traffic originating from realmZ.net and appX should be routed to TKLC_NW, regardless of its destination realm or destination host.
• Routing rule 924 illustrates a default rule specifying that that traffic originating from realm orange.com should not be routed and an answer X should be sent, regardless of its originating host, application, destination realm, or destination host.
• route lists may be further differentiated by assigning a weight value to each rule and applying the combination of priority and weight values.
• priority and weight values to differentiate between route entries (e.g., throttling traffic to an IP network server using alias hostname identifiers assigned to the IP network server with DNS) is more fully described in pending U.S. Patent Application No. 12/512,971, which is incorporated herein by reference in its entirety.

Landscapes

• Engineering & Computer Science (AREA)
• Computer Networks & Wireless Communication (AREA)
• Signal Processing (AREA)
• Computer Security & Cryptography (AREA)
• Business, Economics & Management (AREA)
• Accounting & Taxation (AREA)
• Computer Hardware Design (AREA)
• Computing Systems (AREA)
• General Engineering & Computer Science (AREA)
• Multimedia (AREA)
• Data Exchanges In Wide-Area Networks (AREA)
• Telephonic Communication Services (AREA)

Priority Applications (4)

Applications Claiming Priority (2)

Publications (2)

Family

ID=45329681

Family Applications (1)

Country Status (6)

Cited By (2)

Families Citing this family (91)

Citations (2)

Family Cites Families (62)

• 2011
  • 2011-06-15 IN IN10350CHN2012 patent/IN2012CN10350A/en unknown
  • 2011-06-15 EP EP11796367.8A patent/EP2583415B1/en active Active
  • 2011-06-15 KR KR1020127034450A patent/KR101409384B1/ko active IP Right Grant
  • 2011-06-15 US US13/161,443 patent/US8566474B2/en active Active
  • 2011-06-15 CN CN201180034808.6A patent/CN102986170B/zh active Active
  • 2011-06-15 WO PCT/US2011/040525 patent/WO2011159799A2/en active Application Filing

Patent Citations (2)

Also Published As

Similar Documents

Legal Events