Web Server Proxy Adapter for Unified Automation Access

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing web integration solutions for automation systems fail to provide a unified access point and content harmonization, leading to fragmented user experiences and security vulnerabilities due to misconfigurations and complex management of reverse proxies.

Innovation Solution

Reversing the conventional proxy-server arrangement by positioning the web server upstream of the proxy unit, allowing the web server to transform requests and responses, thereby eliminating the need for the proxy unit in the first management domain and enhancing security and performance.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If a reverse proxy unit is used to integrate multiple web servers, then a single access point is provided, but content harmonization is not achieved and the system appears fragmented

Engineering Contradiction:

Improvesingle access pointVSAvoidcontent integration complexity

Core Design Contradiction:

Ease of operationVSDevice complexity

Solution Approach 1:

The patent merges multiple web servers into a unified portal web server that consolidates content from various subsystems. The portal web server integrates web pages, styles, and scripts from multiple sources into a single coherent interface, eliminating the fragmented appearance while maintaining a single access point through the reverse proxy.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The portal web server serves multiple functions: it acts as a content aggregation point, a branding layer, an authentication gateway, and a routing director. This multi-functional approach allows a single server to handle content harmonization while the reverse proxy maintains the single access point requirement.

Inventive Principle:

Principle #6Universality (Multi-functionality)

2Adaptability or versatility

If a reverse proxy unit is used to manage multiple web servers, then web services can be accessed, but misconfiguration risks increase and security is compromised

Engineering Contradiction:

Improveweb service accessibilityVSAvoidconfiguration reliability

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent extracts the configuration management responsibility from the reverse proxy to the portal web server. The portal web server directly configures and manages connections to backend web servers, eliminating the need for complex reverse proxy configuration. This reduces misconfiguration risks while maintaining web service accessibility.

Inventive Principle:

Principle #2Taking out (Extraction)

3Ease of operation

If a reverse proxy unit is positioned upstream of the web server, then request routing is enabled, but client IP visibility is lost and security is reduced

Engineering Contradiction:

Improverequest routingVSAvoidsecurity vulnerability

Core Design Contradiction:

Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent inverts the conventional architecture by positioning the portal web server upstream of the reverse proxy. The portal web server directly receives client requests, maintains full visibility of client IP addresses, and then communicates with the reverse proxy for backend routing. This inversion preserves security information while enabling request routing.

Inventive Principle:

Principle #13The other way round (Inversion)

4Adaptability or versatility

If multiple independent web servers are used for different subsystems, then subsystem functionality is maintained, but unified system appearance is not achieved

Engineering Contradiction:

Improvesubsystem independenceVSAvoidsystem integration complexity

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent implements a nested architecture where the portal web server contains and coordinates multiple backend web servers. Each subsystem maintains its own web server for functionality, but these servers are nested within the portal web server's management structure. The portal web server aggregates content and presents a unified system appearance while preserving subsystem independence.

Inventive Principle:

Principle #7Nested doll (Nesting)

Data Source

PatentEP4496291B1Communication system and industrial automation device for processing a web request from a client

Publication Date: 2025.10.22 SIEMENS AG

Figure 1
Figure 2
Figure 3

AI summary

A communication system, in particular an automation system, is proposed for processing a web request from a client to retrieve a web service in a specific network. The communication system comprises: a web server for receiving the web request from the client and for transmitting a web response transformed based on the web request back to the client; a proxy unit, located separately from and downstream of the web server in the communication system, which is coupled to the web service; the web server includes a proxy adapter configured to couple the web server to the proxy unit; and the proxy adapter is further configured to transform the web request into the web response depending on the proxy unit and the web service.