Remote Self-Service Kiosk Administration via Secure Tunneling
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing Common Use Self-Service (CUSS) standard's requirement for private IP networks limits the extension of check-in functionality beyond airports, making it impractical for self-service kiosks located in remote locations, and complicates application management for software applications on these kiosks.
Innovation Solution
A system that enables remote self-service facilities administration over an IP network or direct circuit network, using a remote site kiosk with encryption support for secure communication, a data center connected to both the provider network and the remote site kiosk, and secure tunneling endpoints to manage self-service applications and transaction information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If private IP networks are used for airline internal networks as required by CUSS standard, then secure communication between kiosks and airline systems is ensured, but the ability to extend check-in functionality beyond airports is lost
Solution Approach 1:
The patent introduces a remote access server as an intermediary component that bridges the gap between remote kiosks and airline internal networks. This server acts as a mediator that enables secure communication over public networks while maintaining the security requirements of the airline system, thus resolving the contradiction between security and extendability.
Solution Approach 2:
The system architecture is segmented into distinct components: remote kiosks, remote access servers, and airline internal networks. This segmentation allows each component to operate independently with appropriate security measures, enabling extension beyond airports while maintaining secure communication through proper network segmentation and authentication mechanisms.
2Adaptability or versatility
If self-service kiosks are deployed in remote locations beyond airports, then service accessibility is improved, but application management complexity increases
Solution Approach 1:
The remote access server provides multiple functions including application deployment, software updates, configuration management, and secure communication. This multi-functional approach consolidates what would otherwise require multiple separate systems into a single manageable component, reducing overall system complexity while enabling remote kiosk deployment.
Solution Approach 2:
The system enables remote kiosks to self-manage certain aspects through automated software updates, configuration downloads, and error reporting mechanisms. This self-service capability reduces the burden on manual application management while maintaining service accessibility in remote locations.
3Adaptability or versatility
If remote site kiosks communicate over public Internet networks, then deployment flexibility is improved, but security risks increase
Solution Approach 1:
The remote access server serves as a secure intermediary between remote kiosks and the airline network, implementing encryption and authentication mechanisms that mitigate security risks while allowing communication over public Internet networks. This enables deployment flexibility without compromising security.
Solution Approach 2:
The system changes the communication parameters by implementing encryption protocols and authentication mechanisms that transform unsecured Internet traffic into secure communication channels. This parameter change allows the system to operate over public networks while maintaining security standards required by airline internal networks.
Data Source
AI summary
Systems and methods are described for automatically providing remote self service facilities administration over an Internet protocol (IP) network or over a direct circuit (DC) network. To such ends, a system provides self service use of services of a provider network remotely from the provider network. A remote site kiosk is places in a remote site network with an Internet connection, the remote site kiosk having encryption support via a remote site tunneling endpoint for communications with the Internet and self service applications which communicate through the remote site tunneling endpoint. A data center with an Internet connection to a provider network and to the remote site kiosk, with encryption support via a data center tunneling endpoint to securely receive and forward communications over the Internet between the remote site kiosk and the provider network.