US 12,489,780 B2
Methods, devices, and systems for providing dynamic protection against amplification attacks
Tolga Asvaren, Bordentown, NJ (US); and Subhransu S. Nayak, Acton, MA (US)
Assigned to Ribbon Communications Operating Company, Inc., Plano, TX (US)
Filed by Ribbon Communications Operating Company, Inc., Plano, TX (US)
Filed on Aug. 10, 2022, as Appl. No. 17/884,846.
Prior Publication US 2024/0056474 A1, Feb. 15, 2024
Int. Cl. H04L 9/40 (2022.01); H04L 65/1104 (2022.01)
CPC H04L 63/1441 (2013.01) [H04L 65/1104 (2022.05)] 19 Claims
OG exemplary drawing
 
1. A communications method, the communications method comprising:
receiving, at a session border controller (SBC), a first request message from a peer device that does not have an assigned trust level;
determining, based on a type of communication that is received from the peer device, whether to classify the peer device as an untrusted level, semi-trusted level, or trusted level peer device;
assigning the classification to the peer device for use in subsequent communications with the peer device;
processing a packet flow from the peer device using a policer corresponding to the assigned classification;
processing the packet flow from the policer and a number of packet flows from a number of policers using an aggregate policer, wherein a plurality of policers include the policer and the number of policers and a plurality of packet flows include the packet flow from the policer and the number of packet flows from the number of policers, wherein the policer admits the packet flow and the number of policers admit the number of packet flows, and wherein the aggregate policer adds a mark to a different number of packet flows of the plurality of packet flows which evaluates from which of the plurality of policers fill rate violations occur;
limiting an aggregate fill rate of the plurality of packet flows to a maximum rate of packet flows using the aggregate policer, wherein the maximum rate of packet flows is a maximum rate for downstream application processing; and
admitting the packet flow of the plurality of packet flows based on the packet flow from the policer using the aggregate policer.