Media detection of encrypted tunneled data
AssigneeOacle International Corporation
InventorRolando Herrero
Life of this patent
Estimating the term…
Abstract
A system that performs encrypted media detection for real-time communications (“RTC”) establishes a tunnel by a tunneling server with a tunneling client of a user equipment (“UE”). The system receives a request from the UE to enable the encrypted media detection for the tunnel and sends a response back to the UE to indicate that the encrypted media detection is enabled for the tunnel. For each encrypted frame transmitted over the tunnel, the system stores corresponding data that includes at least one of a payload size, an inter-frame delay or a payload entropy. Based on stored corresponding data, the system determines if the encrypted frame includes an encrypted media data frame.
Claims20
A non-transitory computer readable medium having instructions stored thereon that, when executed by a processor, cause the processor to perform encrypted media detection for real-time communications (RTC), the encrypted media detection comprising:
- establishing a tunnel by a tunneling server with a tunneling client of a user equipment (UE);
- receiving a request from the UE to enable the encrypted media detection for the tunnel;
- sending a response back to the UE to indicate that the encrypted media detection is enabled for the tunnel;
- for each encrypted frame transmitted over the tunnel, storing using a buffer corresponding data, the corresponding data comprising a payload size, an inter-frame delay and a payload entropy;
- and
- based on a computation comprising a statistical analysis that uses the payload size, inter-frame delay and payload entropy, determining when the encrypted frame comprises an encrypted media data frame comprising, for each of the payload size, inter-frame delay and payload entropy, determining a variance between the stored corresponding data and determining a mean of the stored corresponding data, the encrypted media data frame comprising at least one of voice traffic or video traffic.
A method of encrypted media detection for real-time communications (RTC), the method comprising:
- establishing a tunnel by a tunneling server with a tunneling client of a user equipment (UE);
- receiving a request from the UE to enable the encrypted media detection for the tunnel;
- sending a response back to the UE to indicate that the encrypted media detection is enabled for the tunnel;
- for each encrypted frame transmitted over the tunnel, storing corresponding data, the corresponding data comprising of a payload size, an inter-frame delay and a payload entropy;
- and
- based on a computation comprising a statistical analysis that uses the payload size, inter-frame delay and payload entropy, determining when the encrypted frame comprises an encrypted media data frame comprising, for each of the payload size, inter-frame delay and payload entropy, determining a variance between the stored corresponding data and determining a mean of the stored corresponding data, the encrypted media data frame comprising at least one of voice traffic or video traffic.
A system comprising:
- a processor;
- and
- a storage device coupled to the processor that stores an encrypted media detection module, the encrypted media detection module, when executed by the processor, implementing modules, the modules comprising:
- a tunneling module that establishes a tunnel between a tunneling client of a user equipment (UE) and a tunneling server, receives a request from the UE to enable the encrypted media detection for the tunnel and sends a response back to the UE to indicate that the encrypted media detection is enabled for the tunnel;
- and
- a media detection module that for each encrypted frame transmitted over the tunnel, stores corresponding data, the corresponding data comprising a payload size, an inter-frame delay and a payload entropy, and based on a computation comprising a statistical analysis that uses the payload size, inter-frame delay and payload entropy, determines when the encrypted frame comprises an encrypted media data frame comprising, for each of the payload size, inter-frame delay and payload entropy, determining a variance between the stored corresponding data and determining a mean of the stored corresponding data, the encrypted media data frame comprising at least one of voice traffic or video traffic.
Dependencies are inferred from the claim text.