Server Relay Connection for Firewall Bypass
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems face challenges in establishing a connection between a remote management server and a communication device over the Internet, as firewalls in routers typically block unsolicited requests, preventing the server from sending information to the device without a prior request.
Innovation Solution
A non-transitory computer-readable medium that enables a server to register connection information for establishing a connection with a communication device by using relay devices, determining if the device and a terminal device are in the same local area network, and sending connection information to the terminal device to facilitate the connection.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the server sends connection information to the communication device directly, then the server can establish connection with the device, but the firewall of the router blocks the information from being sent
Solution Approach 1:
The patent introduces a terminal device as an intermediary to transfer connection information from the server to the communication device. The server sends connection information to the terminal device, which then forwards it to the communication device, bypassing the firewall blocking issue. This mediator approach allows the connection information to reach the communication device without being blocked by the router's firewall.
Solution Approach 2:
The patent performs preliminary registration of the communication device with the server before establishing the connection. The server receives registration information from the communication device via the terminal device, stores it in a database, and then uses this pre-registered information to send connection information. This preliminary registration action enables the subsequent connection establishment to proceed smoothly.
2Reliability
If the server receives registration request from the communication device, then the server can register the device, but the server cannot send information without receiving a request due to firewall restrictions
Solution Approach 1:
The terminal device serves as a mediator that enables the server to send information to the communication device. When the server needs to send connection information, it sends the information to the terminal device, which then forwards it to the communication device. This intermediary mechanism allows the server to transmit information without directly communicating with the communication device through the firewall.
Solution Approach 2:
Instead of the server directly sending information to the communication device (which is blocked), the system inverts the communication path: the server sends information to the terminal device, which then sends it to the communication device. This inverted approach bypasses the firewall restriction by using a different communication route.
3Ease of operation
If the server allows any device to connect, then connection establishment is easy, but unauthorized access may occur
Solution Approach 1:
The patent implements preliminary registration of communication devices with the server before allowing connections. The server stores registration information (including device identifiers and connection information) in a database during the registration phase. When connection requests are received, the server verifies them against the registered information, ensuring that only authorized devices can connect while maintaining ease of operation through the pre-established registration process.
Data Source
AI summary
A server may receive a first registration request from a communication device, receive a second registration request from a terminal device, determine, by using a first IP address included in the first registration request and a second IP address in the second registration request, whether the communication device and the terminal device are belonging to a same local area network, if the communication device and the terminal device are belonging to the same local area network, send a sending request including a connection information and a specific IP address of the communication device to the terminal device, the sending request being for causing the terminal device to send the connection information to the communication device with the specific IP address as a destination, establish a connection between the server and the communication device by using the connection information, and perform a target service by using the connection.