Media Processing Device Persistent Connection Architecture

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Media processing devices face challenges in establishing secure remote connections without modifying network firewall settings or setting up a VPN, as network firewalls often block external connection requests, posing security risks due to persistent connections that allow malicious actors to control operations.

Innovation Solution

Establishing multiple persistent connections between the media processing device and external machines, with one connection for operational control and another for observational data, using WebSocket protocols to enable secure and controlled communication while restricting data types and directions to prevent unauthorized control.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If network firewalls block external connection requests to secure the media processing device, then security is improved, but remote access capability deteriorates

Engineering Contradiction:

ImprovesecurityVSAvoidremote access capability

Core Design Contradiction:

ReliabilityVSEase of operation

Solution Approach 1:

Instead of allowing external machines to initiate connections to the media processing device (which would be blocked by firewalls), the invention inverts the connection initiation direction by having the media processing device itself initiate connections to external machines. This resolves the contradiction by enabling remote access capability while maintaining firewall security settings, as the device proactively establishes connections rather than waiting for incoming connections that would be blocked.

Inventive Principle:

Principle #13The other way round (Inversion)

Solution Approach 2:

The invention introduces WebSocket as an intermediary protocol that facilitates secure communication between the media processing device and external machines. WebSocket acts as a mediator that enables persistent connections while working within the constraints of network firewalls, allowing the device to maintain security while achieving remote access capability through this intermediate communication layer.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Productivity

If persistent connections are established for remote access, then communication efficiency is improved, but security risks worsen due to potential malicious control

Engineering Contradiction:

Improvecommunication efficiencyVSAvoidsecurity risks

Core Design Contradiction:

ProductivityVSObject-affected harmful factors

Solution Approach 1:

The invention segments the communication connection into distinct functional channels: an operational control connection for bidirectional communication and management, and a separate observational data connection for unidirectional data transmission. This segmentation resolves the contradiction by maintaining communication efficiency through persistent connections while reducing security risks through functional separation, as the observational connection cannot be used for malicious control operations.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The invention applies different quality characteristics to different connection channels: the operational control connection allows full bidirectional interaction for device management, while the observational data connection is restricted to unidirectional data transmission only. This local quality differentiation resolves the contradiction by optimizing communication efficiency for management operations while limiting the potential harm from malicious actors who can only observe rather than control through the observational connection.

Inventive Principle:

Principle #3Local quality

3Ease of operation

If multiple persistent connections are established for separate operational control and observation, then communication control is improved, but device complexity worsens

Engineering Contradiction:

Improvecommunication controlVSAvoidconnection management

Core Design Contradiction:

Ease of operationVSDevice complexity

Solution Approach 1:

The invention implements WebSocket as a universal communication protocol that handles both operational control and observational data functions. By using a single WebSocket-based infrastructure for both connection types, the system achieves improved communication control through functional separation while minimizing the increase in device complexity, as both connections share common protocols, authentication mechanisms, and error handling frameworks.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Data Source

PatentUS10764466B2Method and apparatus to communicate data associated with media processing devices

Publication Date: 2020.09.01 ZEBRA TECHNOLOGIES CORP

AI summary

A disclosed example is a server residing on a first network. The server has an observer. The observer receives observational data from a media processing device residing on a second network via a first persistent connection between the media processing device and the server. The observer provides, via the first persistent connection, a configuration file to the media processing device that defines a type of the observational data to be collected by the media processing device. The observer is prevented from communicating an operational instruction to the media processing device. The operational instruction is to control media processing hardware of the media processing device.