Connection Box for Secure External LAN Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users outside an organization face inconvenience and security risks when trying to connect to an internal local area network (LAN) due to the complexity and inefficiency of existing methods, which often require network reconstruction, low usage guest networks, and insecure wireless LAN setups.
Innovation Solution
A communication system comprising a connection box with a Wi-Fi communication unit, a switch unit, an IP adding unit, a LAN interface, and a connection management unit that controls the connection between a terminal device and the LAN, using pre-notified identification information to securely establish and manage connections, allowing users to connect via a secure and easy process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a dedicated guest network is established to permit external users to connect, then external users can access internal devices, but network complexity increases due to reconstruction and resetting requirements
Solution Approach 1:
The patent applies preliminary action by pre-configuring the connection box with authentication capabilities and identification information storage before external users need to connect. The connection box is预先 equipped with the ability to authenticate terminal devices and manage connection states, eliminating the need for network reconstruction when external users need to connect.
Solution Approach 2:
The connection box serves as an intermediary device between terminal devices and the internal LAN. It mediates authentication, manages connection states, and controls access without requiring changes to the existing network infrastructure, thus avoiding network complexity while enabling external access.
2Ease of operation
If a guest network is established for external users, then external devices can connect to the LAN, but power consumption increases due to continuous network availability
Solution Approach 1:
The connection box implements periodic action by dynamically establishing connections only when needed. It authenticates terminal devices on-demand and manages connection states, allowing the network to remain inactive (low power) when no external users are connecting, and activate only when authentication is required, thus reducing continuous power consumption.
3Reliability
If wireless LAN communication is provided for guests with security settings, then connection security is improved, but operation burden increases due to setting notification requirements
Solution Approach 1:
The connection box implements self-service by automatically managing authentication and connection security. It stores identification information, performs authentication of terminal devices, and controls connection states without requiring manual configuration or notification to users. The system handles security settings autonomously, reducing operational burden while maintaining security.
4Ease of operation
If no security setting is applied to guest wireless LAN, then operation burden is reduced, but security exposure increases to wiretap threats
Solution Approach 1:
The connection box acts as a secure intermediary that all communication must pass through. It implements authentication by verifying identification information from terminal devices and controls the opening/closing of connections. This mediator approach maintains network security without requiring complex security settings at the wireless LAN level, as the connection box enforces security policies centrally.
Data Source
AI summary
In the present invention, a connection controller controls opening/closing of connection between a first communication unit that communicates with a terminal device and a second communication unit that communicates via a network. A connection setting unit instructs opening/closing of the connection to the connection controller in accordance with a user input received by an input unit in accordance with first identification information output from the terminal device displayed on a display unit.