Proxy Routing Through Persistent Secure Tunnels for Faster Endpoint Access

Solution Overview

Problem

Existing network communication methods require users to make multiple requests when accessing network endpoint devices without a previously established tunnel, leading to latency and delays due to database lookups and additional request processing.

Innovation Solution

A proxy service forwards user requests to the correct proxy service with a previously established tunnel, eliminating the need for users to make multiple requests.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If the user's device communicates a request to a server that does not have an established tunnel with the network endpoint device, then the server can reference a database to identify the correct server, but this process introduces delays for the user in accessing the requested device

Engineering Contradiction:

Improvecorrect server identificationVSAvoidaccess delay

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The system performs preliminary actions by pre-establishing tunnels between proxy services and endpoint devices, and pre-populating a database with mappings between endpoint devices and proxy services. When a user requests access, the system checks whether the requesting proxy service already has an established tunnel with the target endpoint device, eliminating the need for database lookups and redirect operations at access time.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent introduces a proxy service as an intermediary component that mediates between the user's device and the network endpoint device. The proxy service receives access requests, checks its own tunnel connections, and forwards requests through appropriate tunnels. This intermediary architecture enables the system to resolve server identification and tunnel establishment issues without requiring direct user-device communication or repeated database queries.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Ease of operation

If the system requires users to make multiple requests to access an endpoint device through the correct server, then the user can eventually access the device, but the access process becomes inefficient and time-consuming

Engineering Contradiction:

Improveaccess process simplicityVSAvoidaccess efficiency

Core Design Contradiction:

Ease of operationVSProductivity

Solution Approach 1:

The system performs preliminary actions by pre-establishing tunnels between proxy services and endpoint devices, and pre-populating a database with mappings between endpoint devices and proxy services. When a user requests access, the system checks whether the requesting proxy service already has an established tunnel with the target endpoint device, eliminating the need for database lookups and redirect operations at access time.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent implements continuity of useful action by maintaining persistent tunnels between proxy services and endpoint devices. Once a tunnel is established, it remains active and can be reused for multiple access requests without needing to be re-established or requiring additional lookup operations. This continuous connection state enables efficient, uninterrupted access to endpoint devices.

Inventive Principle:

Principle #20Continuity of useful action

Data Source

PatentUS20250254149A1Systems and methods for processing network communications

Publication Date: 2025.08.07 SOPHOS LTD

AI summary

Systems and methods for processing an electronic network communication. The method includes receiving a request at a first proxy service to access a network endpoint device; referencing, by the first proxy service, a database to identify a second proxy service, wherein the second proxy service is identified based on having a previously-established secure tunnel with the network endpoint device; forwarding the request from the first proxy service to the second proxy service; and forwarding the request from the second proxy service through the previously-established secure tunnel to the network endpoint device.