IoT Message Broker Protocol Wrapping for Secure Remote Access

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In decentralized IoT applications, accessing IoT devices from external networks for maintenance is hindered by security concerns and the complexity of managing numerous device connections, which is exacerbated by the high cost and complexity of VPN solutions and public cloud services.

Innovation Solution

A communication method and system that utilizes an existing IoT message broker to establish a secure and efficient channel for accessing remote IoT devices, wrapping packets of one communication protocol into another supported by the message broker, eliminating the need for additional VPN servers or security mechanisms and simplifying connection management.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If VPN is used to access IoT devices from external network, then security and reliable transmission channel are improved, but device complexity and system cost increase due to need for VPN server and client connections

Engineering Contradiction:
Improvetransmission channel reliabilityVSAvoidconnection management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces a message broker as an intermediary component that sits between the external network and IoT devices. The broker receives messages from external users, validates them against security policies, and forwards approved messages to the appropriate IoT devices. This mediator approach maintains security and reliability while avoiding the complexity of full VPN implementations, as the broker handles connection management centrally rather than requiring individual VPN client installations on each device.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If public cloud services are used for remote IoT device access, then access convenience is improved, but utilization restrictions and complexity are introduced due to business model limitations and undisclosed channel technology

Engineering Contradiction:
Improveremote access convenienceVSAvoidsystem design complexity
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The patent implements a self-service message broker system that can be deployed and configured by the organization itself rather than relying on external cloud providers. The broker uses open standards and protocols, allowing the organization to maintain full control over the access mechanism. This self-hosted approach eliminates utilization restrictions imposed by cloud service business models and avoids the complexity of integrating with proprietary cloud channel technologies, while still providing convenient remote access capabilities.

Inventive Principle:
Principle #25Self-service

3Reliability

If additional security components and VPN infrastructure are added, then access security is improved, but maintenance complexity and performance requirements for IoT devices increase

Engineering Contradiction:
Improveaccess securityVSAvoidsystem maintenance ease
Core Design Contradiction:
ReliabilityVSEase of repair

Solution Approach 1:

The patent extracts the security and connection management functionality from the IoT devices themselves and places it in a centralized message broker. Instead of requiring each IoT device to run VPN client software or security agents, the broker handles all security validation, authentication, and message routing centrally. This extraction reduces the performance requirements and maintenance burden on individual IoT devices while maintaining strong security controls through the broker's centralized policy enforcement.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentEP4395279B1Communication method and communication system
Publication Date: 2025.01.15 MOXA INC
  • EP4395279B1 patent drawingFigure 1
  • EP4395279B1 patent drawingFigure 2
  • EP4395279B1 patent drawingFigure 3

AI summary

A communication method for a user terminal (220) and a device terminal (200) to exchange packets through a message broker (222), comprises the user terminal wrapping a first packet (P1) of a first communication protocol into a second packet (P2) with a second communication protocol and sending the second packet to the message broker, and the device terminal receiving the second packet from the message broker and obtaining the first packet wrapped in the second packet; or the device terminal wrapping a third packet (P3) of the first communication protocol into a fourth packet (P4) with the second communication protocol and sending the fourth packet to the message broker, and the user terminal receiving the fourth packet from the message broker and obtaining the third packet wrapped in the fourth packet . The second communication protocol is a communication protocol supported by the message broker.