Public Cloud Server Tunnel Endpoint for Private Cloud Data Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing systems face challenges in accessing data stored in a private cloud that is separated from a public cloud server by a firewall, as direct communication is restricted, hindering data access and retrieval for clients.
Innovation Solution
A public cloud server establishes a secure socket layer (SSL) connection with the private cloud and creates a virtual private network (VPN) including the client, public cloud server, and private cloud, enabling secure data transmission across the firewall, with each client having a separate SSL connection and VPN for data access and backup purposes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a firewall separates the public cloud server from the private cloud to ensure security, then data security is improved, but data access capability deteriorates
Solution Approach 1:
The patent introduces a tunnel endpoint on the public cloud server as an intermediary component. This endpoint establishes a tunnel connection through the firewall to the private cloud, acting as a mediator that enables data access while maintaining firewall security restrictions. The tunnel endpoint receives data access requests from clients and forwards them through the established tunnel to the private cloud storage, thus resolving the contradiction between security and accessibility.
2Ease of operation
If direct connection is established between client and private cloud to enable data access, then data access capability is improved, but system complexity increases
Solution Approach 1:
The patent makes the public cloud server multi-functional by enabling it to perform both its original cloud server functions and act as a tunnel endpoint for private cloud access. This universal approach allows the public cloud server to handle multiple types of requests (direct client requests and tunnel-based private cloud requests) through a single infrastructure, avoiding the need for separate dedicated access systems and thereby reducing overall system complexity.
3Speed
If firewall restrictions are removed to allow direct data transmission, then data access speed is improved, but security risk increases
Solution Approach 1:
The patent implements preliminary action by pre-establishing tunnel connections through the firewall before data transmission begins. The tunnel endpoint creates authenticated, encrypted tunnel connections in advance, and these pre-established tunnels are then used for data transmission. This preliminary setup allows fast data transfer through the tunnels while maintaining security, as the firewall rules and authentication are already configured before any actual data access occurs.
Data Source
AI summary
A public cloud includes a processor. The processor obtains, from a client via a first network connection, a data access request that specifies data stored in a private cloud separated from the public cloud server by a firewall; sends the data access request to the private cloud through the firewall via a second network connection; receives the data stored in the private cloud via the second network connection; and forwards the received data stored in the private cloud to the client.