Satellite–Cellular Multi-WAN Edge Appliance for Seamless Link Switching
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current communication networks lack the capability for seamless switching between untrusted wireless networks, leading to inefficiencies and disruptions in data communication, especially in scenarios involving mobility and network reliability.
Innovation Solution
A multi-wide area network (WAN) framework that integrates satellite-based communication networks with cellular networks, utilizing an edge appliance with a switch and processing node to route traffic between satellite and cellular modem interconnects, and a connectivity platform with a broker/integrator component to manage subscriptions and provide virtual network functions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a secure tunnel is established over Wi-Fi network to maintain trusted connection, then security is improved, but device complexity and network configuration requirements increase
Solution Approach 1:
The patent introduces a network gateway as an intermediary component that establishes secure tunnels between untrusted Wi-Fi networks and the core network. The gateway handles authentication, encryption, and protocol translation, allowing mobile devices to access the network without directly managing complex security configurations. This mediator approach resolves the contradiction by centralizing security management while maintaining device simplicity.
Solution Approach 2:
The patent replaces manual mechanical network configuration and direct trusted connection establishment with automated cryptographic tunneling mechanisms. Instead of requiring devices to manually configure trusted connections, the system uses automatic IPsec tunnel establishment, certificate-based authentication, and protocol negotiation to create secure connections, thereby reducing configuration complexity while maintaining security.
2Adaptability or versatility
If switching capability between cellular and Wi-Fi networks is implemented, then adaptability and mobility support are improved, but network infrastructure complexity increases
Solution Approach 1:
The patent implements dynamic network selection and switching capabilities that allow the system to automatically transition between cellular and Wi-Fi networks based on real-time conditions. The network gateway dynamically establishes, maintains, and tears down secure tunnels as connectivity conditions change, providing adaptability without requiring complex static configuration. This dynamic approach enables the system to respond to mobility and network availability changes automatically.
Solution Approach 2:
The network gateway is designed as a universal platform that supports multiple network types (cellular, Wi-Fi, satellite), multiple authentication mechanisms, and multiple protocol configurations within a single integrated system. This multi-functional gateway handles diverse network switching scenarios through unified processing, reducing the need for separate specialized infrastructure for each network type and thereby reducing overall infrastructure complexity.
3Adaptability or versatility
If data routing through untrusted networks is allowed, then network versatility and coverage are improved, but security and data protection deteriorate
Solution Approach 1:
The network gateway serves as a secure intermediary that sits between untrusted networks and the core network. It intercepts data traffic, establishes encrypted tunnels, and forwards data through secure channels. This mediator protects data even when routing through untrusted networks by ensuring that data never traverses unencrypted paths, thereby maintaining security while enabling network versatility.
Solution Approach 2:
The patent replaces direct unencrypted data transmission over untrusted networks with automated cryptographic tunneling mechanisms. Instead of relying on physical network trust, the system uses IPsec encryption, authentication certificates, and key management to protect data. This substitution of mechanical trust with cryptographic protection enables data routing through diverse networks while maintaining security.
4Reliability
If seamless handoff between networks is implemented, then communication reliability and quality are improved, but system complexity and processing requirements increase
Solution Approach 1:
The patent implements preliminary actions by pre-establishing authentication contexts, security associations, and routing parameters before actual network handoff occurs. The system maintains authentication state and security tunneling configurations in advance, so that when handoff is needed, the process involves only parameter switching rather than complete re-authentication. This preliminary preparation enables seamless handoff while reducing real-time processing complexity.
Solution Approach 2:
The system implements feedback mechanisms that continuously monitor network conditions, connection quality, and handoff status to dynamically adjust routing decisions. By monitoring metrics such as signal strength, packet loss, and tunnel status, the system can trigger timely handoffs and optimize the handoff process. This feedback-driven approach ensures communication continuity while managing complexity through automated decision-making based on real-time conditions.
Data Source
AI summary
A multi-wide area network (WAN) incorporating both satellite-based communication networks and cellular networks (e.g., an LTE network) is disclosed. In one embodiment, the WAN is implemented with a communications framework comprising: an edge appliance comprising a satellite modem interconnect for coupling to a satellite modem external to the edge appliance, a cellular modem interconnect for coupling to a cellular modem external to the edge appliance, a switch coupled to the satellite and cellular modem interconnects, and a processing node coupled to the switch and comprising a router to switch traffic between the satellite modem interconnect and the cellular modem interconnect when the edge appliance communicates with a public data network using a satellite link or a terrestrial cellular link, respectively; and a connectivity platform configured for connection to the edge appliance, the connectivity platform comprising a broker/integrator component configured to operate as a broker and an integrator between the edge appliance and both connectivity service providers and business support systems that perform subscription management to enable the edge appliance access to the satellite and terrestrial cellular links.