Dual Backup Server Architecture for VPN Connectivity Failures
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Large organizations face challenges in backing up data from client computer systems when connections to primary backup servers via virtual private networks (VPNs) are unavailable or bandwidth-limited, leading to incomplete or delayed backups due to temporary and limited VPN connections.
Innovation Solution
Implementing a system with both a privately accessible primary backup server and a publicly accessible alternate backup server, allowing client computer systems to back up data via the Internet when VPN connections are unavailable, using client-side and alternate server backup software to transfer data sets between the two servers.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If data backup is performed via VPN connection to primary backup server, then data security and privacy are protected, but backup reliability deteriorates when VPN connection is unavailable or bandwidth-limited
Solution Approach 1:
The patent introduces an alternate backup server as an intermediary when the primary backup server is inaccessible via VPN. The client system can backup data to the alternate backup server through the internet when VPN connection is unavailable, and the alternate server can later synchronize data to the primary server when VPN becomes available, thus maintaining backup reliability without compromising security.
Solution Approach 2:
The system dynamically changes the network connection parameter from VPN-only to either VPN or internet connection based on availability. The client system monitors VPN connection status and switches to internet connection for backup operations when VPN is unavailable, resolving the contradiction between security (VPN) and reliability (backup completion).
2Reliability
If data backup is performed via internet connection to alternate backup server, then backup reliability is improved when VPN is unavailable, but data security may be compromised
Solution Approach 1:
The alternate backup server acts as a secure intermediary that receives data via internet connection but enforces authentication and encryption protocols. It then synchronizes data to the primary backup server through the secure VPN connection, ensuring that data exposed to the public internet is eventually secured through the encrypted VPN channel.
Solution Approach 2:
The system performs preliminary authentication and encryption of data before transmitting it over the internet connection to the alternate backup server. This preliminary security measure ensures that even though the transmission channel is less secure, the data itself remains protected through pre-applied security measures.
3Reliability
If dual backup server system is implemented, then backup reliability is improved, but system complexity increases
Solution Approach 1:
The client system automatically monitors VPN connection availability and self-manages the selection between primary and alternate backup servers without requiring complex external control mechanisms. The alternate backup server also automatically synchronizes received data to the primary server when VPN becomes available, reducing the need for complex manual management.
Solution Approach 2:
The system dynamically adjusts its architecture by activating the alternate backup server path only when the primary VPN path is unavailable. When VPN connection is available, the system uses only the primary backup server, effectively reducing complexity to the minimal necessary level while maintaining reliability when needed.
Data Source
AI summary
A system and method for backing up data from a client computer system are described. The system may include the client computer system, a primary backup server computer system, and an alternate backup server computer system. The primary backup server computer system may be privately accessible to the client computer system via a virtual private network (VPN). The alternate backup server computer system may be accessible to the client computer system via a public or open network such as the Internet. The client computer system may be configured to backup a first set of data to the alternate backup server computer system at a particular time via the Internet in response to determining that the client computer system is not connected to the VPN at the particular time.