Multi-Carrier Private WAN Architecture for VPN-Free Mobile Failover
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing VPN connections in 4G mobile devices are fragile and costly, prone to outages due to cellular signal dropouts, and require excessive data usage, leading to instability and high overhead in private WANs.
Innovation Solution
A secure, multi-carrier private WAN system with virtual routers and failover capabilities, utilizing 4G, 5G, and satellite connections, integrates multiple carriers to provide redundancy and stability, eliminating the need for physical firewalls and reducing VPN overhead.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If VPN connection is established from mobile device to centralized VPN concentrator, then private network access is enabled, but data overhead increases and cellular data cost increases
Solution Approach 1:
The patent extracts the VPN tunneling function from the mobile device and relocates it to the network infrastructure (VPN concentrator and network core). This allows mobile devices to communicate natively over the cellular network without encapsulating traffic in VPN protocols, eliminating the data overhead while maintaining private network access through network-level security boundaries.
Solution Approach 2:
The patent introduces a network core with virtual routers and security boundaries as an intermediary between mobile devices and private network resources. This mediator handles security and routing functions at the network level, allowing direct cellular connectivity without device-level VPN overhead while maintaining secure access to private networks.
2Reliability
If VPN tunnel is negotiated for mobile 4G connectivity, then secure connection is established, but connection stability decreases due to signal dropout
Solution Approach 1:
The patent segments the connectivity function into multiple independent cellular connections (multi-carrier, multi-SIM) rather than relying on a single VPN tunnel. Each connection operates independently, so when one drops due to signal issues, others remain active. The system dynamically routes traffic through available connections without requiring VPN re-negotiation, maintaining continuous stable access.
Solution Approach 2:
The patent implements failover mechanisms and connection redundancy in advance, maintaining multiple active cellular pathways before any dropout occurs. When signal dropout happens, pre-configured alternative connections are immediately activated without requiring time-consuming VPN re-negotiation, cushioning against connection instability.
3Object-affected harmful factors
If multiple physical firewalls are deployed at each remote location, then security is provided, but network complexity and attack surface increase
Solution Approach 1:
The patent merges multiple distributed firewall functions into a single centralized security boundary at the network core. Virtual routers and security policies consolidate protection across all remote locations, reducing the number of physical firewalls from many to one while maintaining comprehensive security coverage through centralized policy enforcement.
Solution Approach 2:
The patent creates a universal security boundary at the network core that serves all remote locations simultaneously. This single security infrastructure performs the functions of multiple distributed firewalls, providing security protection across the entire network through centralized multi-functional security enforcement rather than location-specific devices.
4Object-affected harmful factors
If centralized security and monitoring is implemented, then attack surface is reduced, but system complexity increases
Solution Approach 1:
The patent introduces virtual routers and network core infrastructure as intermediaries that centralize security and monitoring functions. These intermediaries consolidate attack surface reduction and monitoring capabilities at the network level, managing security policies and connection monitoring centrally without requiring complex distributed security systems at each location.
Data Source
AI summary
The disclosure relates to an end-to-end private networking system. The system may include a private wide area network. The private wide areas network may allow for multi-tenancy. The private wide area network connects the tenants to an aggregation network core via a mobile data network. The aggregation network core is in turn in secure communication with one or more distributed servers via a secure tunnel or other secure connection.