Virtual Network Interface for Remote IoT Integration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for connecting a physically remote computer to an IoT network via a cloud, such as the Internet, often require tunnel connections established through VPN solutions, which do not assign the computer an IP address from the network, limiting its integration and control over field devices.
Innovation Solution
The solution involves creating a virtual network interface in the security or network layer to assign an IP address from the IoT network to the remote computer, using WebSocket connections and OpenVPN servers to establish a secure, bidirectional communication channel, allowing the computer to be topologically integrated into the network, and utilizing TUN/TAP devices to simulate network interfaces for data exchange.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a tunnel connection is established via VPN solution, then secure connection between remote computer and network is achieved, but the computer cannot be assigned an IP address from the network
Solution Approach 1:
A cloud-based server acts as an intermediary between the remote computer and the IoT network. The server establishes a WebSocket connection with the remote computer and another connection with network devices, enabling the computer to communicate with network devices without direct physical connection or traditional VPN tunneling. This mediator approach allows IP address assignment while maintaining connection security.
Solution Approach 2:
The patent replaces the traditional mechanical/physical VPN tunnel connection mechanism with a WebSocket-based communication mechanism. Instead of using protocol-based tunneling at lower OSI layers, the system uses application-layer WebSocket connections that can carry HTTP/HTTPS traffic, thereby substituting the connection establishment mechanism while achieving both security and IP address assignability.
2Speed
If WebSocket connection is used, then real-time bidirectional communication is achieved, but additional port approval may be required
Solution Approach 1:
The system uses WebSocket connections that can operate over existing HTTP/HTTPS ports (80, 443), making them universally compatible with web servers and firewalls. This multi-functionality allows the same port infrastructure to handle both web traffic and real-time bidirectional communication, eliminating the need for additional port approvals while maintaining fast communication speeds.
3Adaptability or versatility
If virtual network interface is provided in security layer, then IP address from network can be assigned to remote computer, but connection establishment becomes more complex
Solution Approach 1:
The system creates a virtual network interface that copies the functionality of a physical network interface. The virtual interface on the remote computer mimics a standard network adapter, allowing the operating system to assign IP addresses and route traffic normally. This copying approach enables full network integration without requiring changes to the computer's network stack or complex connection establishment procedures.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present invention relates to a computer arrangement comprising a first computer (1') and a network of devices (3, 4, 4', 4", 4‴), wherein the first computer (1') can be connected to the network of devices (3, 4, 4', 4", 4‴) via a cloud (2). For improved integration of the physically remote first computer (1') into the network, the computer arrangement includes a virtual network interface between the first computer (1', 1") and the network, which is provided in the data link layer. Furthermore, a method for connecting a first computer (1') to a network of devices (3, 4, 4', 4", 4‴) via a cloud (2) is described. The invention also relates to the operation of a computer arrangement comprising a first computer (1') and a network of devices (3, 4, 4', 4", 4‴).