Gateway Server Mediating Cross-Domain Data Retrieval

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current mashup service providers face challenges in combining data from internal company servers and external servers due to firewall restrictions and cross-domain issues, which prevents the creation of customized web pages that include data from both sources, and existing solutions may compromise security.

Innovation Solution

A system that includes a providing apparatus and internal server configuration, allowing data from external and internal servers to be retrieved and combined into a single web page, with the internal server data being encrypted and transmitted securely through an encryption key, enabling secure data sharing across networks while avoiding direct access from external networks.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a firewall is used to protect internal servers from external networks, then security is improved, but data access from external servers is blocked

Engineering Contradiction:
ImprovesecurityVSAvoiddata access
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent introduces a gateway server as an intermediary component that mediates between external mashup servers and internal company servers. The gateway server receives data requests from external servers, forwards them to internal servers, and returns the responses. This allows external servers to access internal data without directly penetrating the firewall, thus maintaining security while enabling data access for mashup services.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Adaptability or versatility

If data from multiple servers is combined into one web page, then customization is improved, but cross-domain security restrictions prevent data retrieval

Engineering Contradiction:
ImprovecustomizationVSAvoidsecurity
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The gateway server acts as a trusted intermediary that handles cross-domain data retrieval. Instead of allowing direct cross-domain requests from external servers (which browsers block for security), the gateway server retrieves data from internal servers on behalf of external servers. This maintains the ability to create customized mashup pages while adhering to cross-domain security policies.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system creates a copy of the internal server's data interface through the gateway server. External servers interact with the gateway server as if it were the internal server, but the actual data retrieval is performed by the gateway. This copying approach allows external servers to access internal data without establishing direct connections, thus maintaining security while enabling customization.

Inventive Principle:
Principle #26Copying

3Ease of operation

If direct access to internal servers is allowed from external networks, then data retrieval is simplified, but security is compromised

Engineering Contradiction:
Improvedata retrievalVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The gateway server serves as a controlled intermediary that simplifies data retrieval for external servers while maintaining security. External servers send requests to the gateway server, which then retrieves data from internal servers using authorized credentials. This approach maintains security by preventing direct external access to internal servers while still enabling simplified data retrieval through the gateway's standardized interface.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentEP2365443B1Data providing device, system, server device, program, and method
Publication Date: 2018.07.04 INTERNATIONAL BUSINESS MACHINE CORPORATION
  • EP2365443B1 patent drawingFigure 1
  • EP2365443B1 patent drawingFigure 2
  • EP2365443B1 patent drawingFigure 3

AI summary

Problem To display pieces of data provided by different servers in one page. Solving Means There is provided a providing apparatus for providing a page to a client terminal, the page including data retrieved from a server. The providing apparatus includes: a page return unit for, upon receipt of a page retrieval request from the client terminal, returning a page including code to the client terminal, the code to be executed on the client terminal, the code causing the client terminal to transmit a data transmission instruction to the server, the data transmission instruction instructing the server to transmit the data to the providing apparatus; a data reception unit for receiving the data transmitted by the server, the server having received the data transmission instruction from the client terminal; and a transfer unit for transferring the data received from the server, to the client terminal.