Private Cloud Routing Server for Secure Smart Device Access
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional methods for Smart Device Clients to access Private Cloud Servers are cumbersome, requiring complex setups, costly fixed IP addresses, or reliance on public cloud-based routing servers, which compromise security and privacy, and pose business risks due to single-point failures.
Innovation Solution
A system and method that sets up a Private Cloud Routing Server and Smart Device Client in a client-server relationship, using session-based messaging to authenticate and establish secure communication channels without relying on public cloud-based routing servers, allowing direct access to Private Network Services behind firewalls with dynamic IP addresses and eliminating the need for additional router setups.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a public cloud-based routing server is used to enable Smart Device Clients to access Private Cloud Servers, then connectivity and service access are improved, but security and privacy are compromised due to the public nature of the routing server
Solution Approach 1:
The patent introduces a private cloud routing server as an intermediary component that operates within the user's private network infrastructure rather than relying on public cloud-based routing servers. This private routing server mediates between smart device clients and private cloud servers, enabling secure service access while maintaining the confidentiality and security of the private network. The intermediary is deployed locally (on-premises) and works in conjunction with existing network infrastructure including firewalls and routers, thus providing the necessary routing functionality without compromising security by using public cloud services.
2Ease of operation
If fixed IP addresses and port forwarding are configured to enable external access to Private Cloud Servers, then service accessibility is improved, but device complexity and setup difficulty increase
Solution Approach 1:
The private cloud routing server implements automatic discovery and connection mechanisms that eliminate the need for manual configuration of fixed IP addresses and port forwarding rules. The system performs self-service by automatically detecting the presence of private cloud servers on the network, establishing appropriate routing paths, and managing connections between smart device clients and servers without requiring users to manually configure network parameters. This automation significantly reduces setup complexity while maintaining full service accessibility.
3Adaptability or versatility
If dynamic DNS services are used to locate Private Cloud Servers without fixed IP addresses, then adaptability to dynamic networking is improved, but reliance on external services increases security risks
Solution Approach 1:
The private cloud routing server acts as a local intermediary that implements its own discovery and location mechanisms independent of external dynamic DNS services. Instead of relying on public cloud-based DNS infrastructure, the system uses the private routing server to maintain knowledge of server locations and facilitate connections. This approach provides adaptability to dynamic IP addressing while eliminating security risks associated with external DNS services, as all resolution and routing occurs within the private network boundary.
4Reliability
If VPN or RDP protocols are used to penetrate firewalls and access Private Cloud Servers, then secure communication is achieved, but device complexity and configuration difficulty increase
Solution Approach 1:
The patent merges the routing functionality with the existing firewall and network infrastructure rather than implementing separate VPN or RDP solutions. The private cloud routing server integrates seamlessly with the current network architecture, working in conjunction with existing firewalls and routers to provide both secure communication and simplified access. This consolidation eliminates the need for additional complex protocol configurations while maintaining security, as the routing server operates within the established security perimeter.
Data Source
AI summary
A method for use with a public cloud network is disclosed. The method includes setting up a private cloud routing server and a smart device client in a client server relationship. The private cloud routing server includes a first message box. The smart client includes a second message box. The first and second message boxes are located on the public cloud network. The method also includes passing an authenticated session based message between the first and the second message boxes in a secure manner. The smart device client and the private cloud routing server can communicate with each other after authentication to provide security. The method also includes setting up another smart device client in a client server relationship with the private cloud routing server. The two smart device clients can privately and securely communicate with each other through the public cloud network.