Routing Device Virtual Private Network Direct Connection
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current methods for establishing connections between virtual private networks are complex and do not effectively maintain security while enabling direct communication between hosts from different private networks.
Innovation Solution
A virtual private network communication system that uses a server to facilitate direct connections between routing devices through registration and positioning requests based on recognition strings, allowing peer-to-peer data transmission even when devices are behind NAT equipment.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional tunneling protocol is used to establish connection between virtual private networks, then security effects (confidentiality, transmission terminal verification, message accuracy) are maintained, but the connection establishment process becomes complicated
Solution Approach 1:
The patent introduces a positioning server as an intermediary to facilitate connection establishment between routing devices in different private networks. The server receives positioning requests, retrieves stored positioning information, and returns the necessary data to establish connections without requiring complex direct negotiation between routing devices. This mediator approach simplifies the overall connection establishment process while maintaining security through the server's coordination role.
Solution Approach 2:
The patent implements preliminary action by having routing devices transmit their positioning information to the positioning server in advance before actual communication is needed. The server stores this information (including identification information and connection parameters) so that when a connection request is made, the necessary data is already available for rapid connection establishment without requiring complex real-time negotiation.
2Ease of operation
If hosts in private networks use NAT address translation to connect to external services, then connectivity is achieved, but direct connection between hosts in different private networks cannot be established
Solution Approach 1:
The patent makes the positioning server universal by enabling it to serve multiple functions: it handles positioning requests from routing devices, stores positioning information for various private networks, and facilitates connection establishment between any two routing devices regardless of their network locations. This multi-functional approach enables direct peer-to-peer connections while maintaining the simplicity of NAT-based external connectivity.
3Measurement precision
If routing devices transmit registration information including recognition strings to the server, then identification and positioning are enabled, but additional communication overhead is introduced
Solution Approach 1:
The patent uses copying by having routing devices transmit registration information containing recognition strings to the positioning server, which then stores copies of this information. When positioning is needed, the server retrieves and returns the necessary positioning information without requiring the routing devices to re-transmit all registration data. This copying approach enables accurate positioning while minimizing repeated communication overhead.
Data Source
AI summary
A virtual private network communication system, a routing device and a method thereof are provided. The system includes a server and a plurality of routing devices. The routing devices respectively transmit registration information to the server, wherein the registration information includes a recognition string. The routing devices include a first routing device and a second routing device. The first routing device transmits a positioning request to the server, and the server transmits the positioning request to a part of or all of the routing devices according to the recognition string. When the second routing device receives the positioning request, the second routing device transmits positioning information according to the positioning request to the first routing device via the server. The first routing device directly establishes a connection with the second routing device according to the positioning information and transmits data after the connection is established.