Mailbox Migration via Outbound HTTP Peering Through Firewalls

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Software as a service systems, such as mailbox migration services, face challenges in accessing client systems behind firewalls or without web APIs, as firewalls block network connections and some systems like Lotus Domino do not support remote API access without a VPN, making it difficult to migrate messaging system content between different types of messaging systems.

Innovation Solution

A data transmission mechanism is provided using a peering technique that operates through firewalls, employing an extractor component on the client system to establish communication with the software hosting system via HTTP, allowing mailbox migration between various messaging systems, including those without web APIs, by initiating a peering connection through a firewall and using a coordinator to manage migrators for concurrent migrations.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If traditional API-dependent access methods are used, then software hosting systems can access client systems with web APIs, but client systems behind firewalls or without web APIs cannot be accessed

Engineering Contradiction:

Improveaccess capabilityVSAvoidaccess reliability

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent introduces a peering connection mechanism that acts as an intermediary between the software hosting system and client systems. The extractor component on the client system initiates an outbound HTTP connection to the hosting system, creating a peer-to-peer communication channel that bypasses firewall restrictions. This intermediary approach enables access to previously unreachable systems while maintaining compatibility with both API-equipped and API-less client systems.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

Instead of the software hosting system initiating connections to client systems (which fails behind firewalls), the invention inverts the connection direction by having the extractor on the client system initiate outbound HTTP connections to the hosting system. This reversal of connection initiation resolves the firewall blocking issue while maintaining reliable data transmission.

Inventive Principle:

Principle #13The other way round (Inversion)

2Object-affected harmful factors

If firewalls block network connections, then client systems are protected from unauthorized access, but mailbox migration services cannot access these protected systems

Engineering Contradiction:

Improvefirewall protectionVSAvoidmigration accessibility

Core Design Contradiction:

Object-affected harmful factorsVSEase of operation

Solution Approach 1:

The patent converts the harmful effect of firewalls (blocking access) into a beneficial security feature by using outbound HTTP connections that are universally permitted through firewalls. The extractor initiates connections from the protected network outward, leveraging the fact that firewalls typically allow outbound traffic. This approach maintains firewall protection while enabling legitimate migration operations.

Inventive Principle:

Principle #22Blessing in disguise (Convert harm into benefit)

Solution Approach 2:

The invention changes the communication parameter from direct inbound connections (blocked by firewalls) to outbound HTTP connections (permitted by firewalls). By changing the connection initiation direction and protocol type to standard HTTP, the system achieves firewall penetration without compromising security, enabling migration services to access protected client systems.

Inventive Principle:

Principle #35Parameter changes

3Reliability

If systems like Lotus Domino do not support remote API access, then system security is maintained, but mailbox migration becomes difficult without VPN

Engineering Contradiction:

Improvesystem securityVSAvoidmigration complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The extractor component serves as an intermediary that runs locally on the client system (such as Lotus Domino) and provides the necessary migration functionality without requiring external API access or VPN connections. This local intermediary enables the hosting system to access migration data through standard HTTP protocols while maintaining the client system's security model and avoiding complex VPN infrastructure.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The extractor on the client system performs migration operations self-servingly by initiating outbound HTTP connections to the hosting system and transmitting data directly. This self-service approach eliminates the need for external API support or VPN infrastructure on the client system, reducing migration complexity while maintaining security through the client system's existing security model.

Inventive Principle:

Principle #25Self-service

Data Source

PatentUS9654436B2Systems and methods for migrating mailbox data from systems with limited or restricted remote access

Publication Date: 2017.05.16 BITTITAN

AI summary

Examples described include software hosting systems able to provide software as a service to client systems through a firewall and/or to client systems which do not have web service capability. Examples include mailbox migration systems for migrating mailboxes from a source messaging system (e.g. a Lotus Notes system) to a destination messaging system. Software hosting systems described herein may maintain an action buffer including a next action to be performed by the source messaging system, and wait for data (e.g. messaging system content) to be returned and stored in a data buffer. Communication between the software hosting system and the source messaging system may occur over a communication channel which may be operated through a firewall using HTTP.