Gateway Server Tunneling for Bidirectional Home Network Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In the current IPv4 environment, achieving bidirectional communications between home networks and the Internet is challenging due to limitations in device identification, routing, and security, making it difficult for client terminal devices to create added value, and existing solutions like dedicated routers or polling methods increase costs and reduce system versatility.
Innovation Solution
A method involving a client device, a relay device, and a server connected through the Internet, where the relay device establishes a tunneling connection with the server using the client device's IP address, creating a virtual private network for multiple devices to communicate securely and efficiently, regardless of carrier or ISP, and assigns a global IPv4 address for unique identification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a dedicated router is used to control network home appliances, then access control and security are improved, but system versatility decreases and cost increases
Solution Approach 1:
The invention introduces a gateway server as an intermediary component that mediates between the home network and the external network. The gateway server handles access control, authentication, and routing functions centrally, allowing individual home appliances to remain simple without dedicated routers. This intermediary approach maintains security while improving system versatility and reducing costs.
2Device complexity
If polling method is used to retrieve control information, then system complexity is reduced, but access real-time capability decreases and network load increases
Solution Approach 1:
The invention inverts the traditional polling approach by implementing a push-based notification system. Instead of the external network continuously polling home appliances for control information, the gateway server receives control information from external sources and actively pushes notifications to the appropriate home appliances. This inversion maintains low system complexity while achieving real-time access capability and reducing unnecessary network traffic.
3Adaptability or versatility
If IPv6 is implemented to achieve bidirectional access, then device identification and routing are improved, but deployment time and cost increase significantly
Solution Approach 1:
The invention implements a virtual IPv6 environment by creating an IPv6 network namespace within the IPv4 infrastructure. The gateway server translates and tunnels IPv6 packets over the IPv4 network, allowing home appliances to obtain and use global IPv6 addresses for unique identification and routing without requiring actual IPv6 network infrastructure. This copying approach provides IPv6 capabilities immediately while maintaining compatibility with existing IPv4 networks.
4Reliability
If private IP addresses are used in home networks, then network security is improved, but bidirectional access capability deteriorates
Solution Approach 1:
The invention segments the network architecture into distinct functional layers: the home network segment uses private IP addresses for secure internal communication, while the gateway server provides a translation and tunneling layer that enables bidirectional access to the external network. This segmentation allows each segment to maintain its security characteristics while achieving overall bidirectional connectivity through the gateway's IPv6-over-IPv4 tunneling mechanism.
Data Source
AI summary
The purpose of the present invention is to provide an Internet connection system capable of performing bidirectional communications between a home network and the Internet by relatively simple means and enabling manufacturers of client-side home network appliances to find a unique added value.In order to attain the above object, according to a first primary aspect of the present invention, there is provided a method for connecting a client device to a server, comprising the steps of: (a) notifying a relay device of an IP address of the server; (b) establishing a TCP/IP session by a tunneling connection between the relay device and the server using the notified IP address; and (c) based on information of the relay device or the client device, grouping by the server a plurality of relay devices or client devices for each of which a tunneling connection with the server is established.