Gateway Push Channel for Instant Mobile Message Delivery
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile clients are often unreachable from the public internet due to Network Address Translation and firewall filtering, leading to asymmetric connectivity and preventing servers from initiating connections or sending messages instantly to clients.
Innovation Solution
A system and method for authentication and authorization between a client, server, and gateway, allowing message communication through the gateway by registering the client, forming a push channel, and using an address space or token for secure message forwarding.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Speed
If the server attempts to send messages directly to the mobile client, then message delivery speed is improved, but connectivity is blocked due to Network Address Translation and firewall filtering
Solution Approach 1:
The patent introduces a gateway server as an intermediary component that receives messages from the application server and forwards them to the mobile client. This gateway acts as a mediator that bypasses the connectivity restrictions imposed by NAT and firewalls, allowing the server to send messages instantly without direct server-client connectivity. The gateway maintains a persistent connection with the client and relays messages through this established channel.
2Ease of operation
If the client initiates connections to the server, then message communication is enabled, but the server cannot send messages instantly to the client
Solution Approach 1:
The patent implements a push channel registration mechanism where the client pre-registers with the gateway before message transmission is needed. This preliminary action establishes a persistent push channel connection between the client and gateway, enabling the gateway to push messages to the client instantly when the server has content to send, eliminating the need to wait for the client to initiate a connection.
3Speed
If a push channel is formed between client and gateway, then instant message delivery is enabled, but authentication and authorization complexity increases
Solution Approach 1:
The patent segments the authentication and authorization processes into distinct modular components: push channel registration, token generation, token validation, and authorization checking. The gateway is divided into separate functional modules including a push channel controller for connection management, a token validation module for security verification, and an authorization module for permission checking. This segmentation makes the complex authentication system more manageable and maintainable.
4Productivity
If the gateway maintains client status information, then message delivery efficiency is improved, but information security requirements increase
Solution Approach 1:
The patent implements a feedback mechanism where the gateway continuously monitors and maintains client status information (online/offline states, device identifiers, location information) and uses this feedback to optimize message delivery. The gateway checks client status before pushing messages, ensuring messages are only sent when the client is available, thereby improving delivery efficiency while the token-based security framework protects the敏感性 information being collected.
Data Source
AI summary
Systems and methods of authentication and authorization between a client, a server, and a gateway to facilitate communicating a message between a client and a server through a gateway. The client has a trusted relationship with each of the gateway and the server. A method includes registering the client with the gateway. The client also constructs the address space identifying the gateway and the client. The client communicates the address space to the server. The client receives an identity identifying the server. If the client authorizes to receive a message from the server through the gateway, the client informs the authorization to the gateway. The client puts the identity identifying the server on a list of servers which are authorized to send messages to the client. In addition, the client communicates the list of servers to the gateway.