Relay Device Bypassing Firewall Restrictions for Terminal Mode Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Firewalls restrict communication from information management apparatuses to terminal apparatuses, preventing the information management apparatus from instructing terminal apparatuses to switch between data transmission modes effectively, especially when connected via the Internet.
Innovation Solution
A relay device with a first communication unit for Internet communication with the information management apparatus, a second communication unit for near field communication with the terminal apparatus, and a control unit that manages mode instructions and data transmission between them, allowing the relay device to instruct and relay data from the terminal apparatus to the information management apparatus.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a firewall is used to protect the information management apparatus connected to the Internet, then security is improved, but communication control capability from the information management apparatus to the terminal apparatus deteriorates
Solution Approach 1:
The patent introduces a relay device as an intermediary component between the information management apparatus and the terminal apparatus. The relay device receives mode instruction information from the information management apparatus and forwards it to the terminal apparatus, enabling communication control while maintaining firewall protection. This mediator allows the system to achieve both security and operational control by breaking the direct communication path into controlled segments.
2Ease of operation
If the information management apparatus directly instructs the terminal apparatus to switch data transmission modes, then communication control is improved, but network security deteriorates due to firewall restrictions
Solution Approach 1:
The relay device serves as a secure intermediary that the information management apparatus can communicate with through the firewall. The relay device then communicates with the terminal apparatus using near field communication, which does not require Internet connectivity and bypasses firewall restrictions. This approach maintains network security while enabling effective communication control.
Solution Approach 2:
The communication path is segmented into two distinct channels: one for control information (through the firewall to the relay device) and another for data transmission (via near field communication between relay device and terminal apparatus). This segmentation allows the system to maintain security boundaries while enabling controlled communication.
3Reliability
If near field communication is used between the relay device and terminal apparatus, then network security is improved by isolating from Internet, but communication range deteriorates
Solution Approach 1:
The communication system is divided into two segments with different characteristics: Internet-based communication for long-range control signaling and near field communication for short-range secure data transfer. Each segment is optimized for its specific purpose, with the relay device acting as the transition point between the two segments.
Data Source
AI summary
A relay device includes a first communication unit that communicates with an information management apparatus connected to the Internet via a firewall, a second communication unit that performs near field communication with a terminal apparatus, a storage unit that acquires from the information management apparatus, using the first communication unit, information for identifying the terminal apparatus and mode instruction information that is instruction information indicating that an operation is to be performed in a second mode for acquiring data having a larger data amount than in a first mode, and stores the acquired information, and a control unit that in a case where the terminal apparatus connected using the second communication unit is a terminal apparatus that needs to operate in the second mode, performs control so as to transmit mode instruction information for instructing the operation in the second mode, to the terminal apparatus, and transmit data acquired from the terminal apparatus by using the second communication unit, to the information management apparatus by using the first communication unit.