Local Network Certified Connections via Service Component Routing
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional techniques for establishing certified connections within a local network are complex, especially when web servers need to be accessed from outside, and often lack authentication mechanisms, requiring manual reconfiguration of VPNs and lacking certificate-based authentication for internal web servers.
Innovation Solution
A system comprising a client, server, and service component that assigns host names to terminals, checks for certificates, requests them if needed, and routes data packets directly between terminals without external servers, using a routing table to determine connection origins and employing host names or IP addresses for secure, certified connections.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If VPN is used to enable external access to local network web servers, then connectivity is achieved, but configuration complexity increases and manual reconfiguration is required when server configuration changes
Solution Approach 1:
The patent introduces a service component as an intermediary between clients and end devices in the local network. This service component manages certificate issuance and connection routing, automatically handling what would otherwise require complex manual VPN configuration. The service component acts as a mediator that simplifies the connection establishment process while maintaining security through automated certificate management.
Solution Approach 2:
The system enables end devices to automatically obtain certificates from the service component without requiring manual administrator intervention. When a connection request is made, the service component automatically checks for certificates and issues them if needed, eliminating the need for manual reconfiguration when server configurations change.
2Reliability
If manual VPN configuration is used for local network access, then connectivity is established, but time consumption increases due to manual reconfiguration when server configuration changes
Solution Approach 1:
The service component performs preliminary actions by pre-issuing certificates to end devices before connection requests are made. This preliminary certificate issuance eliminates the need for time-consuming manual reconfiguration when server configurations change, as the automated system already has the necessary authentication credentials ready.
Solution Approach 2:
The system automatically manages certificate lifecycles including issuance, renewal, and revocation without requiring administrator intervention. This self-service approach significantly reduces the time required for reconfiguration when server configurations change, while maintaining reliable secure connections.
3Device complexity
If data packets are routed through the server for all connections, then centralized control is maintained, but routing efficiency decreases and data delivery is slower
Solution Approach 1:
The patent segments the routing process into two paths: packets from external clients continue to route through the server for security and authentication, while packets between authenticated end devices within the local network are routed directly without passing through the server. This segmentation improves delivery speed for internal traffic while maintaining centralized control for external access.
Solution Approach 2:
The service component acts as an intelligent intermediary that learns established connections between end devices and routes packets accordingly. Once a connection is authenticated, the service component enables direct packet forwarding between the involved end devices, reducing routing overhead and improving speed while maintaining security through the intermediary's initial authentication role.
4Ease of manufacture
If certificate authentication is not implemented for local web servers, then setup is simpler, but security is compromised
Solution Approach 1:
The service component automatically issues certificates to end devices without requiring manual configuration or administrator intervention. This automated certificate management maintains simple setup procedures while implementing robust security through certificate-based authentication, resolving the contradiction between ease of setup and security.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Embodiments of the invention relate, among other things, to a system comprising: a client; a server; a service component connected to the server; and at least one terminal device connected to the service component; wherein the server provides a hostname for each of the terminal devices, which is assigned to the respective terminal device and the service component; wherein the server is configured to forward the connection request to the service component in response to a connection request from the client or one of the terminal devices to one of the hostnames;wherein the service component is configured to forward an incoming data packet addressed to the hostname or a corresponding IP address directly to the corresponding terminal device without going through the server if a connection associated with the data packet was established by one of the terminal devices, and to forward the data packet to the server if the connection was not established by one of the terminal devices.