Decentralized Peer-to-Peer Chat Architecture for Secure IoT Communication

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional systems for accessing private cloud storage and services from Smart Device Clients face challenges such as cumbersome setup, high costs, complexity, and security concerns due to reliance on public cloud-based routing servers, especially in consumer-oriented environments where fixed IP addresses are not available and IoT device fragmentation is prevalent.

Innovation Solution

A decentralized peer-to-peer communication architecture is established using public cloud portals, virtual machine servers, private cloud VPN servers, and private metaverses, enabling secure and private communication between Smart Device Clients and IoT devices without the need for public cloud-based routing servers, utilizing VPN tunnels for secure access and interoperability across different IoT platforms.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If public cloud-based routing servers are used for accessing private cloud services, then connectivity and service access are improved, but security and privacy are worsened due to reliance on public intermediaries

Engineering Contradiction:
Improveservice accessVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent extracts and removes the public cloud routing server intermediary from the communication path. Instead of routing traffic through public cloud servers, the system establishes direct peer-to-peer connections between client devices and private cloud services, eliminating the security risk associated with public intermediaries while maintaining connectivity

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent introduces a local routing server deployed within the private network infrastructure as a replacement for public cloud routing servers. This local intermediary maintains the necessary routing and connection management functions while keeping traffic within the private network boundary, thus preserving security while enabling service access

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If fixed IP addresses and port forwarding are configured for router access, then direct device access is improved, but setup complexity and cost are worsened

Engineering Contradiction:
Improvedevice accessVSAvoidsetup complexity
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The patent implements automatic connection establishment where client devices autonomously discover and connect to private cloud services without manual configuration. The system performs self-service functions including automatic IP address assignment, dynamic port allocation, and connection routing, eliminating the need for users to manually configure fixed IP addresses and port forwarding rules

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The patent performs preliminary configuration actions during system initialization and device onboarding. Network parameters, routing rules, and access policies are pre-configured automatically when devices join the network, so that subsequent access operations require no additional setup complexity from users

Inventive Principle:
Principle #10Preliminary action

3Reliability

If VPN tunnels are established for secure access, then security is improved, but connection setup time and complexity are worsened

Engineering Contradiction:
ImprovesecurityVSAvoidconnection setup time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent merges the VPN tunnel establishment process with the existing connection initialization流程. Instead of treating VPN setup as a separate, time-consuming step, the system integrates encryption and tunnel formation into the initial connection handshake, allowing security protocols to be established concurrently with connection routing without adding incremental setup time

Inventive Principle:
Principle #5Merging (Combining)

Solution Approach 2:

The patent performs preliminary VPN configuration and encryption setup during network initialization and device onboarding. Security certificates, encryption keys, and tunnel parameters are pre-established before actual data transmission begins, so that when connections are needed, the secure pathway is already in place and ready for immediate use

Inventive Principle:
Principle #10Preliminary action

4Adaptability or versatility

If multiple IoT platforms are supported for interoperability, then versatility is improved, but system complexity and integration difficulty are worsened

Engineering Contradiction:
ImproveinteroperabilityVSAvoidintegration difficulty
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent introduces a platform-agnostic messaging layer and standardized protocol translator that mediates between different IoT platforms. This intermediary component receives messages from various IoT devices regardless of their native platform, translates them into a unified internal format, and routes them appropriately, enabling multi-platform interoperability without requiring complex direct integrations between each platform pair

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS20230254292A1Private and Secure Chat Connection Mechanism for Use in a Private Communication Architecture
Publication Date: 2023.08.10 PRIMES LAB INC
  • US20230254292A1 patent drawing
  • US20230254292A1 patent drawing
  • US20230254292A1 patent drawing

AI summary

A method for establishing a secure chat includes a host sending a client credential to at least one invitee through a virtual machine server, the host and the at least one invitee signing in with the client credential to a secure chat portal, establishing a peer-to-peer communication channel between the host and at least one invitee through the secure chat portal, the host launching a secure chat application, the host starting a secure chatroom with a chatroom credential of the secure chatroom, the host sending the chatroom credential to the at least one invitee, the at least one invitee launching a secure chat application, the at least one invitee signing in the secure chatroom with the chatroom credential, and the host authenticating the at least one invitee with the chatroom credential, the secure chat comprising applications in text, audio, video, file sharing, screen sharing, storage access, and crypto currency transaction.