Remote Access Server for UPnP NAT Traversal

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing UPnP technologies face challenges in providing remote access across the Internet due to limitations in IP multicast services, making it difficult to control UPnP devices in home networks from outside the network.

Innovation Solution

The implementation of a remote access service using a management console that establishes a secure authenticated channel and transmits RATA profiles between home and remote UPnP servers, utilizing out-of-band protocols like HTTP and S-HTTP, and SIP servers to traverse network address translation (NAT) and establish virtual private networks (VPNs).

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If IP multicast is used for UPnP device discovery in home networks, then local device discovery and control work reliably, but remote access across the Internet becomes unreliable due to lack of IP multicast service guarantees

Engineering Contradiction:
Improvedevice discovery reliabilityVSAvoidremote access capability
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent introduces a remote access server (RAS) as an intermediary component that mediates between local UPnP devices and remote control points. The RAS receives UPnP control requests from remote devices, translates them into local network actions, and relays responses back, enabling reliable remote access without requiring IP multicast to function across the Internet.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system segments the remote access functionality into distinct components: a remote access client (RAC) in the remote network, a remote access server (RAS) in the home network, and local UPnP devices. This segmentation allows each component to operate within its appropriate network context while maintaining end-to-end functionality.

Inventive Principle:
Principle #1Segmentation

2Adaptability or versatility

If a remote access server is introduced to enable Internet-wide UPnP control, then remote access capability is improved, but system complexity increases due to additional infrastructure requirements

Engineering Contradiction:
Improveremote access capabilityVSAvoidsystem infrastructure complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The remote access server is designed to perform multiple functions: it acts as a UPnP control point for local devices, serves as a gateway for remote requests, maintains device state information, and handles protocol translation. This multi-functionality reduces the need for separate specialized components.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Solution Approach 2:

The system enables self-registration and self-discovery mechanisms where UPnP devices automatically register with the RAS and RACs can automatically discover available devices without manual configuration, reducing deployment complexity.

Inventive Principle:
Principle #25Self-service

3Adaptability or versatility

If NAT traversal is implemented to allow devices in private networks to be accessed remotely, then accessibility from external networks is improved, but complexity increases due to NAT protocol handling requirements

Engineering Contradiction:
Improvenetwork accessibilityVSAvoidNAT traversal implementation complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The remote access server acts as a mediator that establishes connections through NAT boundaries. It handles the complexity of NAT traversal by implementing connection establishment protocols that work with NAT devices, shielding local devices from NAT-related complexity while enabling external access.

Inventive Principle:
Principle #24Intermediary (Mediator)

4Reliability

If secure authenticated channels are established for remote access, then security is improved, but communication overhead and setup complexity increase

Engineering Contradiction:
ImprovesecurityVSAvoidauthentication setup complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

Authentication credentials and secure channel parameters are established in advance during device registration with the RAS. This preliminary authentication setup eliminates the need for complex real-time authentication negotiations, reducing communication overhead during actual control operations.

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentUS8862749B2Method and apparatus for providing remote access service
Publication Date: 2014.10.14 SAMSUNG ELECTRONICS CO LTD
  • US8862749B2 patent drawing
  • US8862749B2 patent drawing
  • US8862749B2 patent drawing

AI summary

A remote access service is provided by receiving remote access transport agent (RATA) capability information of a home remote access server (RAS) and a remote RAS from the home RAS and the remote RAS, respectively, generating a RATA profile based on the RATA capability information, supported by the home RAS and the remote RAS, and transmitting the generated RATA profile to the home RAS and the remote RAS, respectively.