Gateway-Mediated Queries for Secure Remote Data Access

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing technologies face challenges in securely and remotely accessing data within a secure network without compromising security or scalability.

Innovation Solution

A system is implemented where a user workstation acts as a bridge to query and process data on a secure network using Software as a Service (SaaS) tools, enabling secure data processing on the host environment while maintaining low latency and scalability by leveraging third-party technologies without direct network installation.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If direct access to data is provided to third-party applications, then ease of operation is improved, but security is worsened

Engineering Contradiction:
Improveease of operationVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent introduces a gateway server as an intermediary component between the secure network and external applications. This gateway receives requests from third-party applications, translates them into queries executable by the database, and returns results without allowing direct access to the database. This mediator approach enables third-party applications to query data securely while maintaining network security boundaries.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system architecture is segmented into distinct components: a secure internal network containing the database, a gateway server acting as a boundary, and external applications. This segmentation isolates the database from direct external access while allowing controlled data queries through the gateway, thus maintaining security while enabling operational ease for authorized applications.

Inventive Principle:
Principle #1Segmentation

2Productivity

If data processing is performed on the host environment, then productivity is improved, but device complexity is worsened

Engineering Contradiction:
ImproveproductivityVSAvoiddevice complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

Instead of installing complex processing applications directly on the host database servers, the patent uses a gateway server that copies and translates queries from external applications into database-executable formats. This allows processing capabilities to be distributed without requiring complex local installations on each host environment, maintaining productivity while reducing individual device complexity.

Inventive Principle:
Principle #26Copying

3Adaptability or versatility

If SaaS tools are used to query data, then adaptability is improved, but reliability is worsened

Engineering Contradiction:
ImproveadaptabilityVSAvoidreliability
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The gateway server is designed with universal functionality to handle multiple types of queries from different SaaS applications and translate them into appropriate database commands. This multi-functional approach enables various third-party applications to access the database through a single reliable interface, improving adaptability while maintaining reliability through centralized query management.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS20250286868A1Remotely Query Secured Data
Publication Date: 2025.09.11 DVSUM LLC
  • US20250286868A1 patent drawing
  • US20250286868A1 patent drawing
  • US20250286868A1 patent drawing

AI summary

A request is received at an assistant computing device over a network from a requesting computing device to query a dataset located on a remote computing device. The remote computing device resides in a secured data center. Encrypted access credentials are communicated to the requesting computing device. The encrypted access credentials are configured to allow the requesting computing device to access the remote computing device. At least one set of encrypted results are received from the requesting computing device. The encrypted results are decrypted to obtain results. The results are communicated to the requesting computing device.