Encrypted traffic detection
AssigneeLenovo (Singapore) Pte. Ltd.
InventorsApostolis Salkintzis, Dimitrios Karampatsis
Life of this patent
Estimating the term…
Abstract
Apparatuses, methods, and systems are disclosed for associating the start of an encrypted data flow with an application. One apparatus includes a transceiver that communicates with a mobile communication network and a processor. The processor performs an authentication with a network encrypted traffic detection function and detects a data packet generated by a first application. The processor determines whether the data packet is associated with the start of an encrypted data flow for the first application and modifies the data packet to include detection information. The transceiver sends the modified data packet to the mobile communication network.
Claims14
An apparatus, comprising:
- a transceiver that communicates with a mobile communication network;
- and
- a processor that:
- performs an authentication with a network encrypted traffic detection function (“NW-ETDF”);
- detects a data packet generated by a first application running on the apparatus;
- determines whether the data packet is associated with a start of an encrypted data flow for the first application;
- modifies the data packet to include detection information and sends the modified data packet to the mobile communication network in response to determining that the data packet is associated with the start of the encrypted data flow for the first application;
- and
- sends the data packet to the mobile communication network without the detection information in response to determining that the data packet is not the start of the encrypted data flow for the first application.
A method of a remote unit, the method comprising:
- performing an authentication of the remote unit with a network encrypted traffic detection function (“NW-ETDF”);
- detecting a data packet generated by a first application running on the remote unit;
- determining, by the remote unit, whether the data packet is associated with a start of an encrypted data flow for the first application;
- modifying, by the remote unit, the data packet to include detection information in response to determining that the data packet is associated with the start of the encrypted data flow for the first application;
- transmitting the modified data packet to a mobile communication network;
- and
- transmitting the data packet to the mobile communication network without the detection information in response to determining that the data packet is not the start of the encrypted data flow for the first application.
Dependencies are inferred from the claim text.