Gateway Ping Protocol for Firewall Communication Reliability

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Configuring firewalls is challenging for both average-skilled and expert users due to the complexity of various configurations, often leading to rejected commands from servers even when configured correctly.

Innovation Solution

A system comprising a server and a gateway that periodically sends a ping message to determine readiness for communication, using a message frame with portions converted by different protocols to query the server's status and validate message formats, reducing the need for complex firewall configurations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a firewall is configured to secure the computer system, then security is improved, but communication reliability deteriorates due to command rejection

Engineering Contradiction:
Improvecommunication reliabilityVSAvoidfirewall rejection
Core Design Contradiction:
ReliabilityVSObject-affected harmful factors

Solution Approach 1:

The gateway sends a ping message before sending actual commands to check if the server is ready to receive commands. This preliminary action prevents firewall rejection of subsequent commands by ensuring the server is in a ready state, thus improving communication reliability without compromising security.

Inventive Principle:
Principle #10Preliminary action

2Adaptability or versatility

If firewall configuration is made complex to handle various scenarios, then security coverage is improved, but ease of operation deteriorates

Engineering Contradiction:
Improvefirewall configuration coverageVSAvoidfirewall configuration difficulty
Core Design Contradiction:
Adaptability or versatilityVSEase of operation

Solution Approach 1:

The system performs self-verification through ping messages, where the gateway automatically checks server readiness before command transmission. This eliminates the need for manual firewall configuration tuning by users, as the system adapts to server states autonomously, maintaining security coverage while greatly simplifying operation.

Inventive Principle:
Principle #25Self-service

3Adaptability or versatility

If protocol conversion is applied to message frames, then communication compatibility is improved, but device complexity increases

Engineering Contradiction:
Improveprotocol compatibilityVSAvoidmessage frame processing
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The message frame is divided into two portions: the first portion is converted using a first protocol and the second portion using a second protocol. This segmentation allows different parts of the message to be processed with appropriate protocols, improving communication compatibility while managing complexity through structured division rather than monolithic processing.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS7660873B2Systems and methods for communicating messages
Publication Date: 2010.02.09 UTC FIRE & SECURITY AMERICAS CORPORATION INC
  • US7660873B2 patent drawing
  • US7660873B2 patent drawing
  • US7660873B2 patent drawing

AI summary

A system for communicating messages is described. The system includes a server and a gateway. The gateway sends a first message to the server. The first message queries the server to determine whether the server is ready to communicate with the gateway.