Hybrid Mesh Networking via Tunnels for Firewall Bypass

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Mesh networks are limited to communicating with devices within their signal range and lack the ability to bypass firewalls, restricting communication between mesh networks that are not directly connected to the internet.

Innovation Solution

Establishing tunnels between backhaul nodes of different mesh networks and a server to encapsulate packets, allowing communication to bypass firewalls and extend the network range by using internet-connected backhaul nodes to relay messages to unreachable destinations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If mesh networks use traditional direct communication methods, then communication is simple and direct, but communication is limited to devices within signal range and cannot bypass firewalls

Engineering Contradiction:
Improvecommunication rangeVSAvoidnetwork structure
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent introduces a server as an intermediary component that facilitates communication between mesh networks. The server receives encapsulated packets from backhaul nodes, routes them to the appropriate destination mesh network, and enables communication between devices that would otherwise be unable to communicate directly due to firewall restrictions or signal range limitations.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent adds a new dimensional layer to mesh network communication by introducing internet connectivity as an additional communication dimension. Backhaul nodes with internet connectivity can route packets through the server over the internet, creating a three-dimensional communication space that combines local mesh networking with remote internet-based communication.

Inventive Principle:
Principle #17Another dimension (Dimensionality change)

2Adaptability or versatility

If mesh networks are extended to communicate beyond signal range using internet-connected backhaul nodes, then communication range is improved, but firewall blocking prevents packet delivery

Engineering Contradiction:
Improvecommunication rangeVSAvoidpacket delivery
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The server acts as a mediator that receives encapsulated packets from backhaul nodes and forwards them to the destination mesh network. This intermediary approach allows packets to bypass firewall restrictions by using the server's internet connection rather than attempting direct peer-to-peer communication through blocked ports or protocols.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent changes the network parameters by introducing encapsulation protocols that modify packet structure. Packets are encapsulated within other packets, changing their apparent destination and allowing them to traverse firewall-protected networks. The encapsulation enables packets to be routed through the server with different network layer parameters than the original direct communication would require.

Inventive Principle:
Principle #35Parameter changes

3Reliability

If tunnels are established for encapsulated packet transmission, then firewall bypass capability is improved, but network setup complexity increases

Engineering Contradiction:
Improvefirewall bypass capabilityVSAvoidtunnel establishment
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The server serves as a centralized intermediary that manages tunnel establishment and packet routing. Instead of requiring complex peer-to-peer tunnel setup between individual mesh nodes, the server centralizes the tunnel management function, receiving encapsulated packets from backhaul nodes and forwarding them appropriately. This reduces the complexity burden from individual devices to a centralized management point.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The server provides universal functionality by handling tunnel establishment, packet routing, and firewall bypass operations for all mesh networks in the system. A single server instance can serve multiple mesh networks, providing multi-functional capabilities that reduce overall system complexity compared to having separate tunnel management at each node.

Inventive Principle:
Principle #6Universality (Multi-functionality)

4Reliability

If backhaul nodes with internet connectivity are used to relay packets, then communication reliability is improved, but the number of required components increases

Engineering Contradiction:
Improvecommunication reliabilityVSAvoidnumber of backhaul nodes
Core Design Contradiction:
ReliabilityVSQuantity of substance

Solution Approach 1:

The server provides universal packet routing functionality that can serve multiple mesh networks simultaneously. A single server can handle communications between any pair of mesh networks in the system, reducing the need for dedicated backhaul nodes between each pair of networks. The server's multi-functional capability allows one server to replace what would otherwise require multiple distributed backhaul nodes.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent merges the functions of multiple potential backhaul nodes into a single centralized server. Instead of requiring separate relay infrastructure between each mesh network pair, the server combines packet reception, routing decision-making, and packet forwarding functions into one consolidated component, reducing the total number of required network elements.

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentUS12476844B2Hybrid mesh networking system
Publication Date: 2025.11.18 TRIMBLE INC
  • US12476844B2 patent drawing
  • US12476844B2 patent drawing
  • US12476844B2 patent drawing

AI summary

A method for communicating between mesh networks comprising: establishing a first tunnel to bypass a firewall, the bypass enabled by encapsulating first packets between a first backhaul node of a first local mesh network and a server, the first backhaul node of the first local mesh network having internet connectivity and receiving the first packets addressed to a destination not reachable by the first local mesh network without internet connectivity to a second local mesh network; establishing a second tunnel between a second backhaul node of a second local mesh network and the server, wherein the second backhaul node of the second local mesh network has internet connectivity; receiving at the server the encapsulated first packets from the first backhaul node via the first tunnel; and transmitting from the server the received encapsulated first packets to the second backhaul node of the second local mesh network.