VPC Connector for Mobile Device Data Routing

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Setting up a VPN connection between a mobile device and an enterprise network in cloud computing is time-consuming and costly, requiring manual configuration and parameter exchange, especially for Machine-to-Machine (M2M) devices, which also increases CPU load and battery drain due to encryption/decryption processes.

Innovation Solution

Introducing a VPC connector that uses a static first mapping between a mobile device's subscriber identity and a static destination address, along with a dynamic second mapping between the temporary IP address and subscriber identity, to enable efficient data routing without the need for additional authentication or configuration, reusing SIM-authentication to find the correct static destination address.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If manual configuration and parameter exchange is performed to set up VPN connection, then secure data transmission is achieved, but setup time and operational cost increase

Engineering Contradiction:

Improvesecure data transmissionVSAvoidsetup time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The system pre-configures the gateway with static destination addresses and maintains mapping tables between temporary IP addresses and subscriber identities before actual data transmission occurs. This preliminary setup eliminates the need for manual configuration during operation, reducing setup time while maintaining security through pre-established authentication mappings.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The gateway acts as an intermediary between mobile devices and enterprise networks, performing automatic authentication and address mapping. It mediates the connection by matching temporary IP addresses with pre-stored subscriber identities and routing data to correct static destination addresses, eliminating manual parameter exchange while maintaining secure transmission.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If manual configuration and parameter exchange is performed to set up VPN connection, then secure data transmission is achieved, but operational cost increases

Engineering Contradiction:

Improvesecure data transmissionVSAvoidoperational cost

Core Design Contradiction:

ReliabilityVSEase of manufacture

Solution Approach 1:

The gateway performs self-service by automatically authenticating mobile devices using pre-stored subscriber identities and temporary IP address mappings. The system autonomously routes data without requiring manual configuration or parameter exchange, reducing operational costs while maintaining secure transmission through automated authentication and routing processes.

Inventive Principle:

Principle #25Self-service

Solution Approach 2:

The gateway serves as an automated intermediary that handles authentication and routing without human intervention. It automatically matches temporary IP addresses with subscriber identities from pre-configured mapping tables and routes data to appropriate static destination addresses, eliminating manual operational costs while ensuring secure transmission.

Inventive Principle:

Principle #24Intermediary (Mediator)

3Reliability

If encryption and decryption is performed in mobile device, then secure data transmission is achieved, but CPU load and battery drain increase

Engineering Contradiction:

Improvesecure data transmissionVSAvoidbattery drain

Core Design Contradiction:

ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent extracts the encryption and decryption functions from the mobile device and relocates them to the gateway. The gateway performs authentication and security operations using its computational resources, while mobile devices only handle data transmission without heavy cryptographic processing, significantly reducing battery drain while maintaining secure transmission through gateway-based security operations.

Inventive Principle:

Principle #2Taking out (Extraction)

4Reliability

If encryption and decryption is performed in mobile device, then secure data transmission is achieved, but CPU load increases

Engineering Contradiction:

Improvesecure data transmissionVSAvoidCPU load

Core Design Contradiction:

ReliabilityVSPower

Solution Approach 1:

The patent extracts computationally intensive encryption and decryption operations from the mobile device CPU and relocates them to the gateway's processing units. The gateway performs all cryptographic authentication and data security operations, while mobile devices only handle lightweight data transmission tasks, dramatically reducing CPU load while maintaining secure transmission through gateway-based cryptographic operations.

Inventive Principle:

Principle #2Taking out (Extraction)

Data Source

PatentUS9967738B2Methods and arrangements for enabling data transmission between a mobile device and a static destination address

Publication Date: 2018.05.08 TELEFONAKTIEBOLAGET LM ERICSSON (PUBL)

AI summary

A solution for simplifying data transmission between a mobile device (MD) and a destination address (DA). In some embodiments, the solution includes a connector, associated with a gateway, that has access to a first mapping between a subscriber identity (SI) associated with the MD and a DA to which the data from the MD should be sent. The gateway is configured to send a second mapping between a temporary IP address of the MD and the SI associated with the MD to the connector. When the gateway receives data from the temporary IP address of the MD, the gateway requests information of the address to which the GGSN should route that data. Since, the connector can identify from which IP address the data is received, the connector can then retrieve the address by using the first mapping and the second mapping.