CN1703030A - System and method for pushing information from server inside a firewall to mobile device - Google Patents
System and method for pushing information from server inside a firewall to mobile device Download PDFInfo
- Publication number
- CN1703030A CN1703030A CN 200510066364 CN200510066364A CN1703030A CN 1703030 A CN1703030 A CN 1703030A CN 200510066364 CN200510066364 CN 200510066364 CN 200510066364 A CN200510066364 A CN 200510066364A CN 1703030 A CN1703030 A CN 1703030A
- Authority
- CN
- China
- Prior art keywords
- information
- network host
- server
- running gear
- delivered
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Abstract
The present invention discloses a system and method for pushing information from server inside a firewall to mobile device, which receives information and transmits the same to network main unit by using information source sever, the network main unit transmits information to a relay gateway by a fire wall, the relay gateway transmits the information to a mobile device based on IP protocol or through the wireless information gateway. The invention eliminates problem that the firewall forbids mobile device directly connects to internal sever, and provides security protection for information transmission with encoding technology by establishing connection of firewall and the relay gateway by using the network main unit in condition of not changing the set of the firewall.
Description
Technical field
The relevant a kind of technology of utilizing the wireless telecommunications networking to push information to running gear of the present invention particularly can not changed under the firewall configuration prerequisite about a kind of, information is pushed to the System and method for of running gear in the safety encipher mode.
Background technology
General running gear is if want receiving E-mail or inquiry data, and after the user need send the request notice usually, running gear just can begin to receive and dispatch action.Yet several characteristics based on the wireless telecommunications networking, comprise the problem that long, the strong and weak instability of signal time of delay, transmission speed wait slowly, if when the user sends request, just collect new mail or fresh information, then can have reaction speed is slow and the operating time is long problem and inconvenience.
On the other hand, enterprise uses fire compartment wall to completely cut off extraneous directly the server in the LAN to be carried out onlinely usually, and under this kind network environment, running gear can't be set up online to the data source server in the fire compartment wall.Because fire compartment wall forbids that the external world directly connects to the information that reads in the LAN, therefore have the problem that fire compartment wall stops the data exchange.
Moreover if information with the clear text format transmission, then makes information be stolen between public network and wireless telecommunications networking easily, when data source server is passed to running gear, has the safety issue of information encryption in information.
In view of this, obtain the reaction speed safety issue slow, generation when fire compartment wall stops that data exchange and information are transmitted of information in order to solve prior art, the present invention proposes a kind of information to be delivered to the System and method for of running gear by the server push in the fire compartment wall, to overcome foregoing problems.
Summary of the invention
Main purpose of the present invention is to provide a kind of System and method for of information being delivered to running gear by the server push in the fire compartment wall, it utilizes network host and Tandem Gateway in the fire compartment wall online, under the prerequisite that does not change the fire compartment wall setting, can allow the data source server pushed information to running gear, stop the problem that data exchanges to have solved fire compartment wall.
Another object of the present invention is to provide a kind of System and method for of information being delivered to running gear by the server push in the fire compartment wall, it will be pushed on the running gear after information arrives at data source server, make the user not need all to send the request of the information of reading at every turn and wait for the slow response in wireless telecommunications networking, with the not good problem of effective solution wireless telecommunications networking reaction speed.
A further object of the present invention is to provide a kind of information is delivered to the System and method for of running gear by the server push in the fire compartment wall, and it utilizes and adopts the cipher mode transmission between running gear and the network host, has solved the safety problem when information is transmitted.
For reaching above-mentioned purpose and solving the shortcoming of prior art, the present invention proposes a kind of system that information is delivered to running gear by the server push in the fire compartment wall, data source server in this system, network host, fire compartment wall, Tandem Gateway, wireless information gateway, the wireless telecommunications networking all is connected with network with running gear, wherein, network host is online to Tandem Gateway with regard to open PORT COM originally by fire compartment wall, Tandem Gateway is responsible for based on I P agreement or sees through wireless information gateway the information that data source server spreads out of is pushed to running gear, and this action device receives this information by the wireless telecommunications networking.
Another embodiment of the present invention then proposes a kind of method of information being delivered to running gear by the server push in the fire compartment wall, at first, network host is set up online to Relay Server, and running gear is also set up online to Relay Server, makes running gear and network host see through Relay Server and carries out online pairing; During successful matching, this action device also and between the network host carries out encrypted data transmission; Therefore, network host can push to running gear from data source server with information.
Description of drawings
Fig. 1 is a system architecture diagram of the present invention.
Fig. 2 is the calcspar of network host used in the present invention.
Fig. 3 is the calcspar of Tandem Gateway used in the present invention.
Fig. 4 is the calcspar of running gear used in the present invention.
Fig. 5 carries out the flow chart of message transmission at network for the present invention.
Symbol description
10 data source servers, 12 network hosts
121 data source server link blocks, 123 Tandem Gateway link blocks
124 information coding modules, 125 network security modules
14 fire compartment walls, 16 world-wide webs
18 Tandem Gateways, 181 network host link blocks
182 running gear link blocks 183 connect the pairing transport module
20 wireless telecommunications networkings, 22 wireless information gateways
24 running gears, 241 Tandem Gateway link blocks
242 network security modules, 243 information coding modules
244 configuration modules, 245 Subscriber Interface Module SIMs
Embodiment
Obtain slow, safety issue when fire compartment wall stops that data exchange and information are transmitted of the reaction speed of information in order to overcome prior art, the present invention proposes a kind of system and the new data inspection between its method and network host and data source server and method of transmission of information being delivered to running gear by the server push in the fire compartment wall, be set to prerequisite not change fire compartment wall, allow data source server can push enciphered message to running gear.
See also system architecture diagram shown in Figure 1, system of the present invention is by the data source server 10 and network host 12 that are positioned at fire compartment wall 14, and a Tandem Gateway 18, wireless telecommunications networking 20, wireless information gateway 22 and running gear 24 are formed.This data source server 10 is an equipment of being responsible for reception and forwarding information, data source server 10 can be mail server or application server or groupware server or office automation server or database server, and can utilize LAN to be connected between data source server 10 and the network host 12.And whether network host 12 responsible inspection of data source servers 10 receive fresh information, in case find that fresh information arrives at, then network host 12 will utilize world-wide web 16 to push information to Tandem Gateway 18 by the just open originally port of one-way communication from inside to outside of fire compartment wall 14, make network host 12 can pass through the SMS gateway, the wireless information gateway 22 transmission information of MMS gateway or WAP gateway etc. are notified running gear 24, and this action device 24 is to set up online by the wireless telecommunications networking 20 based on the IP agreement with Tandem Gateway 18, make network host 12 and running gear 24 to carry out the data exchange, reach the purpose that network host 12 can be pushed to the information of data source server 10 running gear 24 by Tandem Gateway 18.
Wherein, be the framework of clearer understanding native system, do further to describe in detail at above-mentioned network host 12, Tandem Gateway 18 and running gear 24.
Please consult network host shown in Figure 2 12 simultaneously, it is made up of a data source server link block 121, Tandem Gateway link block 123, information coding module 124 and network security module 125; This data source server link block 121 is network on-lines of being responsible between network host 12 foundation and the data source server 10, inspection and reception are from the fresh information of data source server 10, and data source server link block 121 can use POP3, IMAP4, IIOP, DIIOP, SMTP, WebDAV, SOAP, XMLRPC or http protocol and data source server 10 to link up, and whether data source server link block 121 can regular check have fresh information to arrive at; Because having, the regular check fresh information pushes temporal delay, can't in real time fresh information be delivered to running gear 24, if it is online that the information of will transmitting in real time can initiatively be set up to network host 12 by data source server 10, and initiatively data is passed to data source server link block 121 and reaches.Data source server 10 can use agreements such as TCP, SMTP, WebDAV, SOAP, XMLRPC or HTTP that information is passed to information receiving module 122, be different from the time delay that the regular check fresh information may cause, the method can be passed to information running gear 24 in real time.
Please consult Fig. 1 and shown in Figure 3 simultaneously, Tandem Gateway 18 is by being made up of a network host link block 181, running gear link block 182 and connection pairing transport module 183; 181 responsible receptions of network host link block and management are online by network host 12 foundation; 182 responsible receptions of running gear link block and management are online by running gear 24 foundation; Utilize this to connect pairing transport module 183 again and be responsible for online between pairing running gears 24 and the network host 12, and can between network host 12 and running gear 24, carry out transmitted in both directions in successful matching relief information.
Please consult Fig. 1 and shown in Figure 4 more simultaneously, comprise a Tandem Gateway link block 241, network security module 242, information coding module 243, configuration module 244 and Subscriber Interface Module SIM 245 etc. in the running gear; Tandem Gateway link block 241 can set up and administrative actions device 24 to the online and transfer of data between the Tandem Gateway 18; Network security module 242 carries out data encryption and decryption, and encrypted data is sent to Tandem Gateway 18, and deciphering is from the information of Tandem Gateway 18; Information coding module 243 is responsible for the compression/de-compression and the coding of running gear 24 and 18 data of Tandem Gateway; 244 of configuration modules are in charge of user's setting network security parameter, account password parameter, user interface presentation mode parameter of running gear etc.; This Subscriber Interface Module SIM 245 then is responsible for presenting the demonstration and the input of user interface and management information.
After having described system architecture of the present invention in detail, the Network Transmission flow process of running gear is delivered to information in the explanation that continues by the server push in the fire compartment wall.See also shown in Figure 5ly, at first, network host 12 is set up online to Relay Server 18; Shown in step S10, network host 12 sends to Tandem Gateway 18 by fire compartment wall 14 open PORT COM with the network host identifying information earlier, make Tandem Gateway 18 carry out the identifying information audit, if Tandem Gateway 18 audit identifying information successes then keep online and allow network host 12 transmission information as step S12.
Then, running gear 24 is set up online to Relay Server 18; Shown in step S20, running gear 24 is set up online by the wireless telecommunications networking to Relay Server 18, have identifying information in the online request that running gear 24 sends, that is a running gear identifying information, its can be communication terminal slogan or IP address or domain name or one section character string at least one of them; If Tandem Gateway 18 audit identifying information successes then allow to keep online.
Then, running gear 24 carries out online pairing with network host 12 through Relay Server 18; Shown in step S30, Tandem Gateway 18 carries out online pairing according to running gear identifying information and network host identifying information, online successful matching then allow information install in action 24 and network host 12 between carry out transmitted in both directions.
At last, network host pushes to running gear with information from data source server; Check shown in step S40 whether fresh information is arranged earlier, if have, then receive fresh information from data source server 10 as step S42, information after network host 12 can will be encrypted based on the IP agreement as step S44 pushes to running gear 24, and this encrypts the cryptographic algorithm that is adopted and can be symmetrical expression cryptographic algorithm or asymmetric cryptographic algorithm; In addition, network host 12 also can be passed to wireless information gateway 22 with information earlier as step S46, sees through wireless information gateway 22 for another example shown in the step S48 and pushes information to running gear 24.
Please consult Fig. 2 and shown in Figure 5 again, in step S40, whether network host 12 inspection of data source servers 10 have the method for fresh information, more can comprise the following step: at first, network host 12 passes to data source server 10 with user account number, data source server 10 reads the data that is under the jurisdiction of this user account number, and the identification code of every document is delivered to network host 12, with every document identification code of providing network host 12 to check over to receive and this identification code of receiving why not have with, be to belong to this to check the just new identification code of appearance to check out which identification code; Then, network host 12 reads the complete information content according to new identification code to data source server 10 requests; At last, network host 12 can arrive running gear 24 with part or whole new data delivery of content shown in step S44.
In step S42, the method that data source server 10 initiatively is delivered to new data network host 12 then comprises the following step: when data source server 10 receives a new data; Data source server 10 set up with network host 12 online after, data source server 10 is delivered to network host 12 with the new data that receives, this network host 12 judges these new datas should be delivered to which running gear 24; Network host 12 can be with part or all of new data delivery of content to running gear 24 after judgement was finished.
Therefore, under framework of the present invention, the user does not need to send the request of the information of reading at every turn and wait for the slow response of radio data network, will be pushed to running gear after information arrives at data source server, solves the not good problem of wireless telecommunications networking reaction speed; Moreover, undertaken onlinely by network host in the fire compartment wall and Tandem Gateway, need not change firewall configuration, can allow action device and network host carry out the data exchange, solve fire compartment wall and stopped the problem that data exchanges; And use encryption technology to transmit data between running gear and the network host, so the safety problem that effectively solution information may take place when transmitting.
Above-described embodiment only is explanation technological thought of the present invention and characteristics, its purpose makes the personage who has the knack of this skill can understand content of the present invention and is implementing according to this, when can not with qualification claim of the present invention, promptly the equalization of doing according to disclosed spirit generally changes or modifies, and must be encompassed in the claim of the present invention.
Claims (18)
1. one kind information delivered to the system of running gear by the server push in the fire compartment wall, it is characterized in that, comprising:
At least one data source server and network host are positioned at a fire compartment wall, and the open PORT COM of this network host by this fire compartment wall be online to a Tandem Gateway, make this network host information can be sent to this Tandem Gateway from this data source server; And
At least one running gear, it utilizes the wireless telecommunications networking to be online to this Tandem Gateway, and this Tandem Gateway pushes to this action device based on the IP agreement or through a wireless information gateway with this information, makes this action device receive this information by this wireless telecommunications networking.
2. as claimed in claim 1 information is delivered to the system of running gear by the server push in the fire compartment wall, it is characterized in that this network host more comprises:
One data source server link block, be responsible for from this network host set up with this data source server between network is connected, inspection and reception are from the information of this data source server;
One Tandem Gateway link block is responsible for from network on-line and the data transmission of this network host foundation with this Tandem Gateway;
One information coding module carries out encoding process to transmission information; And
One network security module to being passed to this Tandem Gateway after this information encryption, being responsible for simultaneously and will being passed to this data source server after the decrypts information from Tandem Gateway.
3. as claimed in claim 1 information is delivered to the system of running gear by the server push in the fire compartment wall, it is characterized in that this Tandem Gateway more comprises:
One network host link block, its reception and management are online by this network host foundation;
One action device link block, its reception and management are online by the foundation of this action device; And
One connects the pairing transport module, online between its pairing this action device and this network host, and can between this network host and this action device, carry out transmitted in both directions in successful matching relief information.
4. as claimed in claim 1 information is delivered to the system of running gear by the server push in the fire compartment wall, it is characterized in that this action device more comprises:
One Tandem Gateway link block, it sets up and manages this action device to the online and message transmission between this Tandem Gateway;
One information coding module, the encoding process of information between responsible this action device and this Tandem Gateway;
One network security module, its encryption are delivered to the information and the information of deciphering from this Tandem Gateway of this Tandem Gateway;
One Subscriber Interface Module SIM is responsible for presenting the user interface of this action device and the demonstration and the input of management information; And
One configuration module, it manages account's setup parameter of this user.
5. the system that information is delivered to running gear by the server push in the fire compartment wall as claimed in claim 1, it is characterized in that this data source server is mail server or application server or groupware server or office automation server or database server.
6. the system that information is delivered to running gear by the server push in the fire compartment wall as claimed in claim 1, it is characterized in that this data source server uses TCP, SMTP, WebDAV, SOAP, XMLRPC or http protocol that this information is passed to this network host.
7. the system that information is delivered to running gear by the server push in the fire compartment wall as claimed in claim 1, it is characterized in that this network host uses TCP, POP3, IMAP4, IIOP, DIIOP, SMTP, MAPI, WebDAV, SOAP, XMLRPC or http protocol and this data source server to link up.
8. as claimed in claim 1 information is delivered to the system of running gear by the server push in the fire compartment wall, it is characterized in that the wireless network based on IP agreement package can be transmitted in this wireless telecommunications networking.
9. as claimed in claim 1 information is delivered to the system of running gear by the server push in the fire compartment wall, it is characterized in that, this wireless information gateway be selected from SMS gateway, MMS gateway or WAP gateway one of them.
10. one kind information delivered to the method for running gear by the server push in the fire compartment wall, it is characterized in that, comprise the following steps:
One network host is set up online by the open PORT COM of fire compartment wall to a Relay Server;
One action device is set up online to this Relay Server;
This action device and this network host system see through this Relay Server and carry out online pairing; And
This network host pushes to this action device after information via is encrypted.
11. as claimed in claim 10 information is delivered to the method for running gear by the server push in the fire compartment wall, it is characterized in that this network host is based on the IP agreement or see through wireless information gateway this information is pushed to this action device from data source server.
12. as claimed in claim 10 information is delivered to the method for running gear by the server push in the fire compartment wall, it is characterized in that, set up in the online step to this Tandem Gateway at this network host, more comprise:
This network host identifying information is reached this Tandem Gateway, this identifying information communication terminal slogan, IP address, domain name or one section character string at least one of them; And
When this Tandem Gateway audit identifying information success, then keep online and allow this network host to transmit information.
13. as claimed in claim 10 information is delivered to the method for running gear by the server push in the fire compartment wall, it is characterized in that, set up in the online step to this Relay Server at this action device, more comprise:
This action device is set up online by a wireless telecommunications networking to this Relay Server; And
Have identifying information in the online request of this action device, this identifying information be communication terminal slogan, IP address, domain name or one section character string at least one of them, online for confirming whether to set up.
14. as claimed in claim 10 information is delivered to the method for running gear by the server push in the fire compartment wall, it is characterized in that, see through this Relay Server at this action device and this network host and carry out more comprising in the step of online pairing:
This Tandem Gateway carries out online pairing according to the identifying information of this action device identifying information and this network host, then allows information transmitted in both directions between this action device and this network host after the online pairing.
15. as claimed in claim 10 information is delivered to the method for running gear by the server push in the fire compartment wall, it is characterized in that the cryptographic algorithm that this encryption is adopted is selected from symmetrical expression cryptographic algorithm or asymmetric cryptographic algorithm.
16. the method for information being delivered to running gear by the server push in the fire compartment wall as claimed in claim 10, it is characterized in that, after this network host is encrypted information via, push in the step of this action device, more comprise: this network host notice this action earlier device has new events to take place, and reads the complete information content by this action device to this network host again.
17. whether a network host inspection of data source server has the method for fresh information, it is characterized in that, comprises the following steps:
One network host passes to a data source server with user account number;
This data source server reads the data that is under the jurisdiction of this user account number, and the identification code of every document is delivered to this network host;
This network host check over every document identification code of receiving and this identification code of receiving why not have with, be to belong to this to check the just new identification code of appearance to check out which identification code;
This network host reads the complete information content according to new identification code to this data source server request; And
This network host arrives this action device with part or whole new data delivery of content.
18. a data source server initiatively is delivered to new data the method for network host, it is characterized in that, comprises the following steps:
One data source server receives a new data;
This data source server foundation is online with a network host;
This data source server is delivered to this network host with the new data that receives;
This network host judges which running gear this new data should be delivered to; And
This network host arrives running gear with part or all of new data delivery of content.
Priority Applications (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CNB2005100663640A CN100559781C (en) | 2004-05-24 | 2005-04-22 | Information is pushed to the method for running gear by the data source server in the fire compartment wall |
| JP2005334047A JP2006279921A (en) | 2005-03-25 | 2005-11-18 | System, method and safe mechanism for connecting information server and mobile device |
Applications Claiming Priority (3)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN200410042558 | 2004-05-24 | ||
| CN200410042558.2 | 2004-05-24 | ||
| CNB2005100663640A CN100559781C (en) | 2004-05-24 | 2005-04-22 | Information is pushed to the method for running gear by the data source server in the fire compartment wall |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN1703030A true CN1703030A (en) | 2005-11-30 |
| CN100559781C CN100559781C (en) | 2009-11-11 |
Family
ID=35632552
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CNB2005100663640A Expired - Fee Related CN100559781C (en) | 2004-05-24 | 2005-04-22 | Information is pushed to the method for running gear by the data source server in the fire compartment wall |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN100559781C (en) |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN100338929C (en) * | 2004-05-25 | 2007-09-19 | 中国移动通信集团公司 | Server information system and method for acquiring information through fireproof wall by mobile terminal |
| CN100345425C (en) * | 2004-05-25 | 2007-10-24 | 中国移动通信集团公司 | Method and system for transmitting information from information system to mobile terminal |
| US7707628B2 (en) | 2004-08-04 | 2010-04-27 | Fuji Xerox Co., Ltd. | Network system, internal server, terminal device, storage medium and packet relay method |
| CN103227770A (en) * | 2012-01-30 | 2013-07-31 | 凌群电脑股份有限公司 | End-point data safety transmitting module and method |
-
2005
- 2005-04-22 CN CNB2005100663640A patent/CN100559781C/en not_active Expired - Fee Related
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN100338929C (en) * | 2004-05-25 | 2007-09-19 | 中国移动通信集团公司 | Server information system and method for acquiring information through fireproof wall by mobile terminal |
| CN100345425C (en) * | 2004-05-25 | 2007-10-24 | 中国移动通信集团公司 | Method and system for transmitting information from information system to mobile terminal |
| US7707628B2 (en) | 2004-08-04 | 2010-04-27 | Fuji Xerox Co., Ltd. | Network system, internal server, terminal device, storage medium and packet relay method |
| CN103227770A (en) * | 2012-01-30 | 2013-07-31 | 凌群电脑股份有限公司 | End-point data safety transmitting module and method |
| CN103227770B (en) * | 2012-01-30 | 2016-01-20 | 凌群电脑股份有限公司 | The safe delivery module of end-point data and method |
Also Published As
| Publication number | Publication date |
|---|---|
| CN100559781C (en) | 2009-11-11 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CA2665803C (en) | Method for establishing bi-directional messaging communications with wireless devices and with remote locations over a network | |
| Brown et al. | SMS: The short message service | |
| CN100410927C (en) | Certificate management and transfer system and method | |
| CN100380895C (en) | System and method for processing encoded messages | |
| CN1672380B (en) | System and method for checking digital certificate status | |
| CN105530254B (en) | A kind of data communications method between intranet and extranet | |
| US20070274329A1 (en) | Connection support apparatus and gateway apparatus | |
| US8064934B2 (en) | Method, system and apparatus for automatic notification to a plurality of communication nodes | |
| CN1706167A (en) | Configuration of enterprise gateways | |
| CN103535004B (en) | Method for promoting anonymity audio and video communication and system based on web | |
| US20150215291A1 (en) | Secure decentralized content management platform and transparent gateway | |
| CN1608367A (en) | Multiple-stage system and method for processing encoded messages | |
| WO2004063869A3 (en) | System and method for secure and transparent electronic communication | |
| CA2606919C (en) | Method, system and apparatus for automatic notification to a plurality of communication nodes | |
| CN1265610C (en) | Method of realizing safe mobile e-business in GSM | |
| CN1270484C (en) | System and method for transmitting information from information server to mobile terminal | |
| CN100559781C (en) | Information is pushed to the method for running gear by the data source server in the fire compartment wall | |
| CN101090400A (en) | Safety transmitting method and system for information of mobile user | |
| CA2390817A1 (en) | Method for the moderately secure transmission of electronic mail | |
| CN100369407C (en) | Method for pushing information to mobile terminal by persistent TCP connection | |
| Pu | An improved short message security protocol for home network | |
| CN100338929C (en) | Server information system and method for acquiring information through fireproof wall by mobile terminal | |
| KR101407603B1 (en) | Bidirectional transmission system for message of associated with disaster | |
| Pu | Design of wireless communication protocol for home LAN | |
| RU2498529C1 (en) | Method for interaction of content provider system with sms message packet transmission aggregator |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| C17 | Cessation of patent right | ||
| CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20091111 Termination date: 20140422 |