VPN Termination Device Loop Prevention via Virtual Clients

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing communication systems face difficulties in preventing network loops during VPN configuration, requiring expertise and time to set up packet control rules, which complicates network control.

Innovation Solution

The implementation of a communication system with VPN termination devices that use virtual clients, such as parent and child clients, to manage packet flow without relying on packet control rules, thereby preventing network loops.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If packet control rules are set to prevent network loops during VPN configuration, then network reliability is improved, but device complexity and difficulty of operation increase due to requiring expertise to configure

Engineering Contradiction:
Improvenetwork loop preventionVSAvoidpacket control rule configuration
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The VPN termination device automatically detects and prevents network loops without requiring manual configuration of packet control rules. The device monitors its own network state and autonomously implements loop prevention, eliminating the need for expert intervention while maintaining network reliability.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

A configuration server acts as an intermediary between network administrators and VPN termination devices. The server automatically generates and distributes appropriate packet control rules to prevent network loops, shielding users from the complexity of manual rule configuration while ensuring reliable loop prevention.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Stability of the object's composition

If packet control rules are manually configured to prevent network loops, then network stability is improved, but loss of time increases due to requiring expertise and time for setup

Engineering Contradiction:
Improvenetwork stabilityVSAvoidconfiguration time
Core Design Contradiction:
Stability of the object's compositionVSLoss of time

Solution Approach 1:

The system performs preliminary configuration of packet control rules automatically during VPN setup. The configuration server pre-generates appropriate loop prevention rules and distributes them to VPN termination devices before network operations begin, eliminating the time-consuming manual configuration process while ensuring network stability.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

VPN termination devices automatically configure their own packet control rules based on real-time network conditions. The devices monitor for potential loops and autonomously adjust their routing behavior, eliminating the need for manual configuration while maintaining network stability.

Inventive Principle:
Principle #25Self-service

3Reliability

If complex packet control rules are implemented to prevent network loops, then network reliability is improved, but ease of operation deteriorates due to complicating network control

Engineering Contradiction:
Improveloop prevention effectivenessVSAvoidnetwork control simplicity
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The VPN termination device implements automatic loop detection and prevention mechanisms that operate transparently without requiring user intervention. The device autonomously monitors network traffic patterns and adjusts packet control rules as needed, maintaining reliability while preserving operational simplicity.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The configuration server serves as an intelligent intermediary that automatically generates, distributes, and manages packet control rules. This shields network operators from complexity while ensuring reliable loop prevention through professionally configured rules that are automatically applied across the VPN network.

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS11711239B2Communication system, VPN termination device, and storage medium
Publication Date: 2023.07.25 RICOH CO LTD
  • US11711239B2 patent drawing
  • US11711239B2 patent drawing
  • US11711239B2 patent drawing

AI summary

A communication system includes multiple VPN termination devices that perform a first VPN communication and a configuration server that configures the first VPN communication. Each of the VPN termination devices includes a first processor programmed to implement a configuration information receiver that receives configuration information for the first VPN communication sent from the configuration server, a communication controller that controls the first VPN communication based on the configuration information, and a first VPN communication unit that performs the first VPN communication with another one of the VPN termination devices according to a control of the communication controller.