Cross-Network Direct Device Connection via Permission Mediation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing technologies face challenges in enabling direct device-to-device communication between cellular devices that are not in proximity or connected to the same network, particularly due to differences in mobile network operators and security regulations, which can lead to unauthorized data access and billing issues.
Innovation Solution
A method and system that allow a third device, connected to a third network, to authorize a direct connection between a first device and a second device, even if they are not operable or not in the same network, by using network nodes to manage permission requests and responses, enabling secure and controlled data exchange without requiring the second device to be operational.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If devices are connected to different mobile network operators or behind different firewalls, then direct device-to-device communication is blocked for security reasons, but this prevents legitimate communication between devices that are not in proximity or on the same network
Solution Approach 1:
The patent introduces an online service as an intermediary that facilitates connection requests between devices on different networks. The service receives connection requests, identifies target devices, and enables direct connections while maintaining security controls. This mediator allows devices behind different firewalls and on different mobile network operators to communicate without compromising security.
Solution Approach 2:
The connection establishment process is segmented into distinct phases: request initiation, online service mediation, permission verification, and direct connection establishment. This segmentation allows security checks to be performed at appropriate stages while enabling legitimate communications to proceed through the controlled intermediary channel.
2Adaptability or versatility
If firewalls are removed to enable direct device addressability, then device-to-device communication becomes possible, but unauthorized data access and unsolicited data usage occur leading to billing issues and security vulnerabilities
Solution Approach 1:
The system performs preliminary actions by requiring explicit permission requests and approvals before establishing direct connections. The online service verifies device identities and obtains authorization in advance, ensuring that only approved connections are established. This preliminary permission mechanism prevents unauthorized data access while maintaining device addressability.
Solution Approach 2:
The system implements feedback mechanisms where the online service monitors connection requests, verifies permissions, and provides control over incoming data flows. This feedback loop ensures that devices only receive data from authorized sources, preventing unsolicited data usage and allowing operators to charge appropriately for data services.
3Reliability
If devices use proximate direct mode communication, then secure direct connection is achieved, but devices must be in physical proximity which limits communication range and applicability
Solution Approach 1:
The patent merges the security benefits of direct mode communication with the extended reach of network infrastructure. Devices establish direct wireless connections (maintaining security) while using network infrastructure (mobile networks, gateways) to bridge distance gaps. This combination allows devices not in physical proximity to communicate securely through a hybrid approach.
Solution Approach 2:
Network infrastructure elements (base stations, gateways, online services) act as mediators that enable direct connections between devices that are not in proximity. The intermediary infrastructure facilitates the initial connection setup and permission verification, after which direct secure communication can be established between remote devices.
4Adaptability or versatility
If online services are used to relay data between devices, then communication between devices on different networks is enabled, but data exchange efficiency decreases and additional billing complexity is introduced
Solution Approach 1:
The online service performs preliminary actions by establishing connection permissions and routing information in advance. Once permissions are verified and direct connection parameters are determined, devices can exchange data directly without continuous online service involvement. This preliminary setup reduces ongoing relay overhead and improves data exchange efficiency.
Solution Approach 2:
The online service acts as a lightweight mediator that only intervenes for connection establishment and permission verification, not for ongoing data relay. After the initial setup, devices communicate directly, minimizing the efficiency impact of online service involvement while still enabling cross-network communication.
Data Source
AI summary
Methods and systems are disclosed enabling establishment of a direct connection between a first device connected to a first network and a second device connected to a second network upon finding a permission response from a third device connected to a third network. Establishment of the direct connection is controlled by a second network node associated with the second network. A connection request is received from the first device at at least one of the second network node or a third network node associated with the third network and a permission indication is found indicating that a connection with the second device is subject to permission from the third device. A permission response may be found from the third device to permit the connection request for enabling establishment of the direct connection. Establishing of the direct connection is enabled between the first device and the second device in response to finding the permission response.