Relay Apparatus for Push Services Behind Firewalls
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Firewalls and Network Address Translation (NAT) often block unauthorized access, preventing management apparatuses from accessing image processing apparatuses over the Internet, and existing solutions struggle to establish reliable sessions for push services, especially when using different communication protocols.
Innovation Solution
A relay apparatus is introduced with a network interface and processor to establish sessions between image processing apparatuses and servers, enabling server-push services by using session establishment and session-less protocols, allowing for the transmission of server request information and response information across networks while bypassing direct session establishment requirements.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a firewall is set to prevent unauthorized access, then security is improved, but access from management apparatus to image processing apparatus is blocked
Solution Approach 1:
A relay apparatus is introduced as an intermediary component between the management apparatus and image processing apparatus. The relay apparatus receives requests from the management apparatus, establishes sessions with image processing apparatus on behalf of clients, and forwards requests through established communication channels. This mediator approach allows management functions to operate through the firewall without requiring direct access, thus maintaining security while enabling accessibility.
2Adaptability or versatility
If NAT is used for network address translation, then network management is simplified, but direct access from management apparatus side to image processing apparatus is prevented
Solution Approach 1:
The relay apparatus serves as a mediator that works in conjunction with NAT. It maintains translation tables mapping internal device addresses to external addresses, and routes requests appropriately. When the management apparatus sends requests, the relay apparatus translates addresses and establishes sessions with the actual image processing apparatus behind NAT, enabling indirect access that works around NAT limitations.
Solution Approach 2:
The relay apparatus performs preliminary actions by pre-establishing sessions with image processing apparatus before management operations are needed. It maintains connection state information and session data in advance, so when management requests arrive, the relay apparatus can immediately use pre-established communication channels rather than attempting direct connection through NAT, which would fail.
3Reliability
If session establishment is required for push services, then reliable communication is achieved, but server and image processing apparatus are burdened with session establishment load
Solution Approach 1:
The relay apparatus assumes the burden of session management as an intermediary. It establishes and maintains sessions with image processing apparatus, storing session state information locally. When push services need to be delivered, the relay apparatus uses these pre-established sessions rather than requiring the server or image processing apparatus to manage sessions directly, thus reducing their complexity while maintaining reliable communication.
4Adaptability or versatility
If different communication protocols are used, then protocol flexibility is improved, but session establishment compatibility becomes difficult
Solution Approach 1:
The relay apparatus is designed with multi-functionality to handle multiple communication protocols. It implements protocol translation capabilities, converting between different protocol formats as needed. When the management apparatus communicates using one protocol and the image processing apparatus uses another, the relay apparatus translates messages between protocols, maintaining session state information in a protocol-agnostic manner, thus enabling compatibility across different protocol stacks without requiring each device to support all protocols.
Data Source
AI summary
A relay apparatus includes a processor and a network interface for performing communication with an image processing apparatus and a server apparatus through a network. The processor functions as: a server-request-information receiving unit for receiving server request information transmitted to the relay apparatus by the server apparatus; an establishment request information receiving unit for receiving establishment request information transmitted by the image processing apparatus for requesting establishment of a session between the relay apparatus and the image processing apparatus according to a session establishment type first protocol for enabling server-push for transmitting the server request information to the image processing apparatus; and a server-request-information transmitting unit for transmitting the server request information received by the server-request-information receiving unit to the image processing apparatus by using the session established between the relay apparatus and the image processing apparatus.