Gateway Server Mediating Cross-Domain Data Retrieval
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current mashup service providers face challenges in combining data from internal company servers and external servers due to firewall restrictions and cross-domain issues, which prevents the creation of customized web pages that include data from both sources, and existing solutions may compromise security.
Innovation Solution
A system that includes a providing apparatus and internal server configuration, allowing data from external and internal servers to be retrieved and combined into a single web page, with the internal server data being encrypted and transmitted securely through an encryption key, enabling secure data sharing across networks while avoiding direct access from external networks.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a firewall is used to protect internal servers from external networks, then security is improved, but data access from external servers is blocked
Solution Approach 1:
The patent introduces a gateway server as an intermediary component that mediates between external mashup servers and internal company servers. The gateway server receives data requests from external servers, forwards them to internal servers, and returns the responses. This allows external servers to access internal data without directly penetrating the firewall, thus maintaining security while enabling data access for mashup services.
2Adaptability or versatility
If data from multiple servers is combined into one web page, then customization is improved, but cross-domain security restrictions prevent data retrieval
Solution Approach 1:
The gateway server acts as a trusted intermediary that handles cross-domain data retrieval. Instead of allowing direct cross-domain requests from external servers (which browsers block for security), the gateway server retrieves data from internal servers on behalf of external servers. This maintains the ability to create customized mashup pages while adhering to cross-domain security policies.
Solution Approach 2:
The system creates a copy of the internal server's data interface through the gateway server. External servers interact with the gateway server as if it were the internal server, but the actual data retrieval is performed by the gateway. This copying approach allows external servers to access internal data without establishing direct connections, thus maintaining security while enabling customization.
3Ease of operation
If direct access to internal servers is allowed from external networks, then data retrieval is simplified, but security is compromised
Solution Approach 1:
The gateway server serves as a controlled intermediary that simplifies data retrieval for external servers while maintaining security. External servers send requests to the gateway server, which then retrieves data from internal servers using authorized credentials. This approach maintains security by preventing direct external access to internal servers while still enabling simplified data retrieval through the gateway's standardized interface.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Problem To display pieces of data provided by different servers in one page. Solving Means There is provided a providing apparatus for providing a page to a client terminal, the page including data retrieved from a server. The providing apparatus includes: a page return unit for, upon receipt of a page retrieval request from the client terminal, returning a page including code to the client terminal, the code to be executed on the client terminal, the code causing the client terminal to transmit a data transmission instruction to the server, the data transmission instruction instructing the server to transmit the data to the providing apparatus; a data reception unit for receiving the data transmitted by the server, the server having received the data transmission instruction from the client terminal; and a transfer unit for transferring the data received from the server, to the client terminal.