JP2006279921A - System, method and safe mechanism for connecting information server and mobile device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide system, method and safe mechanism for connecting an information server to a mobile device, wherein the mobile device and the information server, positioned in a local-area network, transfer both-direction data safely, and is capable of developing the convenience of the moving device effectively under the premise that the installation of a fire wall not change. <P>SOLUTION: Information is received by the information server to transmit the same to a throughput server and is set on-line by the mobile device via a wireless network, whereby the throughput server is capable of instantaneously effecting throughput of the new information of the information server to the moving device. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

The present invention relates to a system, method and safety mechanism for connecting an information server and a mobile device, and in particular, firstly, the mobile device is online with the throughput server, and the throughput server is actively connected via a wireless network. A system, a method and a safety mechanism for connecting an information server and a mobile device for throughput of information stored in the information server to the mobile device. About.

Many mobile devices have a function of receiving and transmitting e-mail information, for example, via a wireless network. However, due to some characteristics of the wireless network, there are problems such as time extension and signal strength are not unstable, and transfer speed is slow, and new only when the user submits a request When receiving e-mail and new information, if the response speed is slow, there is a problem and inconvenience that the operation time is long.

In a wireless network based on the IP protocol, a mobile device is often not assigned a fixed common network IP address, and a dynamic local network IP address is assigned to the mobile device. In such a network environment, when a new information is actively being passed to the mobile device through the TCP protocol, the IP address of the mobile device cannot be assigned. is there.

On the other hand, in many cases, a mobile device outside the local area network is not connected to the firewall in such a network environment because a company often isolates online from the outside directly to the information server of the local area network through a firewall. Go online with your information server. The firewall prohibits data exchange because it prohibits online access to the local area network from outside to read information.

Also, servers in the local area network do not provide secure encryption themselves to improve efficiency, and data is stolen if transmitted in plain text format between the Internet and a wireless network. Therefore, information transmission between a server in a local area network and a mobile device outside the local area network has a data encryption safety problem.

In order to solve the above problems, the present invention has a main purpose of throughput of new information to a mobile device via online, so that the response speed for the existing technology to acquire information is low, and the mobile device IP Provided is a system and method for connecting an information server and a mobile device, which can solve the problem of not being able to allocate information and throughput information.

Another object of the present invention is to solve the problem that the information server can throughput information to the mobile device and the firewall prevents data exchange on the premise that the installation of the firewall is not changed by online connection between the throughput server in the firewall and the relay gateway. A system and method for connecting an information server and a mobile device is provided.

Yet another object of the present invention is that when information arrives at the information server, it is throughput to the mobile device, effectively allowing the user to submit a request to read the information each time without waiting for a slow response of the wireless network. A system and method for connecting an information server and a mobile device, which can improve the response speed of a wireless network.

Still another object of the present invention is to provide a system for connecting an information server and a mobile device, which can solve the safety problem at the time of information transmission by transferring the information between the mobile device and the throughput server by an encryption method. And provide a way.

Still another object of the present invention is to provide a mobile device and an information server that can communicate with an internal server of a local area network by connecting the mobile device to the relay gateway by bringing the throughput server online through the firewall. Systems and methods for connecting are provided.

Still another object of the present invention is to create a secure encrypted channel between a mobile device and a throughput server to provide data transmission security protection for connecting a mobile device and an information server. Provide systems and methods.

Yet another object of the present invention is to provide a safety mechanism for connecting a mobile device and an information server that can prevent unauthorized throughput servers from acquiring important data by checking the throughput server for verification. To do.

In order to achieve the above object, the present invention comprises an information server, a throughput server, a wireless network, and a mobile device. First, the mobile device creates online via the wireless network and the throughput server, When new information arrives at the information server, the throughput server is a system for connecting the mobile device and the information server, through which the new information is online to the mobile device.

The present invention first creates a mobile device online via a wireless network and a throughput server, checks the information stored in the information server with the throughput server, and then when new information reaches the information server, the throughput A method for connecting a mobile device and an information server, in which the server throughputs new information to the mobile device.

The present invention relates to a system for connecting an information server, a throughput server, a firewall, a relay gateway, a wireless information gateway, a wireless network, and a mobile device, which are connected by the network. The throughput server goes online to the relay gateway via the open communication port of the firewall, and the relay gateway moves the information sent by the information server based on the IP protocol or via the wireless information gateway. This is a system for connecting a mobile device and an information server, which throughputs to the device and the mobile device receives the information via a wireless network.

In the present invention, first, the throughput server creates online for the relay gateway, and the mobile device also creates online for the relay gateway, so that the mobile device and the throughput server are connected via the relay gateway. Create a pair online, and if the pair is successful, transfer encrypted data between the mobile device and the throughput server, which allows the throughput server to throughput information from the information server to the mobile device. A method for connecting a mobile device and an information server.

Further, the present invention is located between a throughput server and the Internet, which is installed inside a local area network, stores a large amount of data, and corresponds to a throughput server for transferring data, a corresponding number of information servers, And a firewall that prevents unauthorized users from connecting inside the local area network via the Internet, one end of the relay gateway passes through the firewall via the Internet and connects to the throughput server, and the other end A mobile device connected to a wireless network and serving as a relay connection point between the Internet and the wireless network, whereby the mobile device can transfer data by connecting to a relay gateway via the wireless network; Information server It is a system for connecting the over.

The present invention also provides that the throughput server creates the relay gateway and online, the mobile device creates the relay gateway and online, the mobile device and the throughput server are paired via the relay gateway, and the mobile A method for connecting a mobile device and an information server, wherein the device and the throughput server create a secure encrypted channel.

The present invention also provides verification stored in a storage device readable by a throughput server, a relay gateway connected to the throughput server and capable of transferring data, and a verification confirmation module capable of transferring data by connecting a wireless network to the relay gateway. A safety mechanism for connecting the mobile device and the information server.

The objects, structural features, and functions of the present invention will be described in detail below with reference to the drawings.

FIG. 1 is a flowchart of a method for connecting a mobile device and an information server according to the present invention. First, in step S100, the mobile device creates an online connection with a throughput server via a wireless network, and then In step S110, the throughput server checks the information stored in the information server. Finally, in step S120, when new information reaches the information server, the throughput server throughputs the new information to the mobile device.

This allows the user to submit a request to read the information each time and wait for a slow response of the wireless network, and when the information reaches the information server, it actively throughputs to the mobile device and the response speed of the wireless network is slow. In addition, the mobile device creates an online for the throughput gateway on the mobile device, and the online provides a network channel for throughput of new information to the mobile device, so that the mobile device has a fixed common network IP address. The problem that cannot be assigned can be solved.

FIG. 2 is a conceptual diagram of a system for connecting a mobile device and an information server provided by the first embodiment according to the present invention. The information server 10, the throughput server 11, the wireless network 12, The mobile device 13 is connected by the Internet 14, and the mobile device 13 creates a continuous TCP online with the throughput server 11 via the wireless network 12, and when new information reaches the information server 10, the throughput server 11 throughputs new information to the mobile device 13 via continuous TCP online, and the information server 10 is a mail server or application server. Information includes email arrival notification, email subject, email destination, email CC, email secret CC, email body, email attachment, incident occurrence notification, incident occurrence content, address book data, calendar data, backlog data, file name or Contains file contents.

Further, as shown in FIG. 3, there may be any number of firewalls 15, proxy servers, or VPN gateways between the throughput server 11 and the information server 10, and in the network environment arrangement, the throughput server 11 and the information server If it is allowed to create an online based on the TCP protocol, the purpose of transmitting new information from the information server 10 to the throughput server 11 can be achieved. Between the mobile device 13 and the throughput server 11, the safety and integrity of data transmission may be protected by secure encryption technology, which can be SSL, TLS, WTLS, IPSec, PPTP, L2TP, AES encryption operation method, RSA encryption operation method or dedicated operation method.

As shown in FIG. 4, there may be any number of firewalls 16, proxy servers, or VPN gateways between the mobile device 13 and the throughput server 11. In the network environment arrangement, the mobile device is connected to the throughput server 11. If it is permitted to create online based on the TCP protocol, the purpose of the throughput server 11 transmitting information to the mobile device 13 can be achieved.

As shown in FIG. 5, the throughput server 11 includes an information server connection module 111, an information reception module 112, an information encoding module 113, and a mobile device connection module 114. The information server connection module 111 is a throughput server. 11 to create a network connection between the information server 10 and check and receive new information from the information server 10 on a regular basis. The information receiving module 112 is actively transferred to the throughput server 11 by the information server 10 The information encoding module 113 performs compression / decompression and encoding on the transfer data, and the mobile device connection module 114 is created by the mobile device 13 for the throughput server 11. Secure encryption when maintaining continuous TCP online and transferring data / Process the decoding.

As shown in FIG. 6, the mobile device 13 includes a throughput server connection module 131, an arrangement module 132, an information encoding module 133, and a user interface module 134. Create a continuous TCP online between, and handle secure encryption / decryption when transferring data, the placement module 132 can display network parameters set by the user, account password parameters and user interface display Manages system parameters, the information encoding module 133 performs compression / decompression and encoding of data between the mobile device 13 and the throughput server 11, and the user interface module 134 displays a user operation interface. And manage the display and input of information.

As shown in FIG. 7, in step S200, the mobile device 13 and the throughput server 11 create a continuous TCP online, and then in step S210, the mobile device 13 transmits the account password to the throughput server 11 and the throughput. The server 11 identifies the terminal user by the account password, and determines whether the mobile device 13 can receive new information. If the mobile device makes a successful entry in step S220, the throughput server in step S230. 11 checks whether new information exists in the information server 10, and if new information arrives in step S240, in step S250, the throughput server 11 passes only the new information belonging to the user to the mobile device. To do. If the continuous TCP online between the mobile device 13 and the throughput server 11 is interrupted for some reason, the mobile device 13 tries to create a TCP online with the throughput server 11 again. Throughput server 11 can be online to one or many information servers 10, and mobile device 13 can receive new information from multiple information servers 10. When the user can set a large number of information filtering rules and new information arrives (step S240), the throughput server 11 performs a string comparison and a time comparison on the information, and moves only information that matches the rule. Throughput is performed to the apparatus 13 (step S250).

As described above, the present invention can solve the problem that the existing technology has a slow response speed when acquiring information, the problem that the firewall prevents data exchange, and the safety problem when information is transmitted.

Further, the present invention is a method for connecting a mobile device and an information server, in which the information server throughputs encrypted information to the mobile device on the premise that the installation of the firewall is not changed.

FIG. 8 is a structural diagram of a system for connecting a mobile device and an information server according to the second embodiment of the present invention. The system includes an information server 20 and a throughput server 22 located in a firewall 24, It consists of a relay gateway 28, a wireless network 30, a wireless information gateway 32, and a mobile device 34. The information server 20 is a facility for receiving and transferring information, for example, a mail server, application server, group software server, office automation server or database server, and between the information server 20 and the throughput server 22. Connected by a local area network. The throughput server 22 checks whether the information server 20 has received new information, and if new information arrives, the throughput server 22 passes through the open one-way communication port from the inside of the firewall 24 to the outside. Through the Internet 26, the information is throughput to the relay gateway 28, whereby the throughput server 22 notifies the mobile device 34 of the information via the wireless information gateway 32 such as an SMS gateway, an MMS gateway, or a WAP gateway. If the mobile device 34 can create an online connection with the relay gateway 28 via the wireless network 30 based on the IP protocol, the throughput server 22 can transmit data with the mobile device 34 via the relay gateway 28. The throughput server 22 is informed about the exchange The purpose of throughput of server 20 information to mobile device 34 is achieved.

Hereinafter, in order to better understand the structure of this system, the above-described throughput server 22, relay gateway 28, and mobile device 34 will be described in detail.

FIG. 9 shows the throughput server 22, which includes an information server connection module 221, a relay gateway connection module 223, an information encoding module 224, and a network safety module 225. Create a network online with the information server 20, check and receive new information from the information server 20, and the information server connection module 221 is POP3, IMAP4, IIOP, DIIOP, SMTP, WebDAV, SOAP, Communicating with the information server 20 using the XMLRPC or HTTP protocol to check whether new information arrives on time, and checking new information on time will cause a delay in throughput time, so new information will be moved immediately Information cannot be transmitted to device 34 and information is transmitted immediately. By Ba 20 creates a line with actively throughput server 22 may transmit the active data to the information server connection module 221. The information server 20 can transmit information to the information receiving module 222 using protocols such as TCP, SMTP, WebDAV, SOAP, XMLRPC or HTTP. Unlike the time delay caused by checking for new information on time, this method is Information can be transmitted to the mobile device 34.

The information encoding module 224 compresses / decompresses and encodes the data transferred between the relay gateway 28 and the information server 12 and the wireless network 30 is slow. The amount of data that must be reduced can be reduced, and the information format can be converted to a simple format that the mobile device 34 can receive. In the figure, the network safety module 225 encrypts the information from the information server 20, and decrypts the information from the relay gateway 28. Various asymmetric standard arithmetic methods are used as the encryption arithmetic method. And symmetric standard arithmetic methods can be used. The relay gateway connection module 223 creates a network online between the throughput server 22 and the relay gateway 28 to transfer data, and the firewall 24 allows users in the local area network to be online to the network. HTTP 80 end or HTTPS
It is allowed to open the 443 end and create online to the web side outside the firewall in one direction, and the relay gateway connection module 223 is online to the relay gateway 28 through the communication port that the firewall 24 is open. To do.

  8 and 10, the relay gateway 28 includes a throughput server connection module 281, a mobile device connection module 282, and a connection pair transfer module 283. The throughput server connection module 281 receives, The mobile device connection module 282 performs reception and management of the online generated by the mobile device 34, and manages the online created by the throughput server 22, and the connected pair transfer module 283. Pair the online between the mobile device 34 and the throughput server 22, and if the pair is successful, information is transferred in both directions between the throughput server 22 and the mobile device 34.

  8 and 11, the mobile device 34 includes a relay gateway connection module 341, a network safety module 342, an information encoding module 343, a placement module 344, and a user interface module 345. Module 341 creates and manages the online between the mobile device 34 and the relay gateway 28 and transfers the data, the network safety module 342 encrypts and decrypts the data and is encrypted Data is transmitted to the relay gateway 28, and the information from the relay gateway 28 is decoded, and the information encoding module 343 performs compression / decompression and encoding of data between the mobile device 34 and the relay gateway 28, and arranges the data. Module 344 is a network safety parameter set by the user of the mobile device. Manage over data or account password parameters and user interface display system parameters, etc., also, the user interface module 345 displays a user operation interface, and manages the display and input of information.

  Hereinafter, the transfer flow when throughput of information from the server in the firewall to the network of the mobile device will be described. As shown in FIG. 12, first, in step S300, the throughput server 22 creates online with respect to the relay gateway 28, and the throughput server 22 first receives the throughput server identification information via the communication port in which the firewall 24 is open. Is transmitted to the relay gateway 28, the relay gateway 28 examines the identification information, the relay gateway 28 examines the identification information, and if it is OK, in step S310, the throughput server 22 holds the online information and holds the information. Allow transmission.

  Then, in step S320, the mobile device 34 creates online for the relay gateway 28, the mobile device 34 creates online for the relay gateway 28 via the wireless network, and the mobile device 34 transmits The online request includes identification information, that is, mobile device identification information, which is at least one of a communication port number, an IP address, a function variable name, or a single character string. Will review the identification information and keep it online if it is OK.

  Thereafter, in step S330, the mobile device 34 and the throughput server 22 perform online pairing via the relay gateway 28, and the relay gateway 28 performs online pairing based on the mobile device identification information and the throughput server identification information, If the online pair is successful, it is allowed to transfer information in both directions between the mobile device 34 and the throughput server 22.

  Finally, the throughput server 22 throughputs information from the information server 20 to the mobile device 34. First, in step S340, it is checked whether there is new information. If there is, new information is received from the information server 20 in step S350. Then, in step S360, the throughput server 22 throughputs the encrypted information to the mobile device 34 based on the IP protocol, and the encryption operation method used for encryption is a symmetric encryption operation method. In step S370, the throughput server 22 first transmits information to the wireless information gateway 32. In step S380, the information is transferred to the mobile device 34 via the wireless information gateway 32. It is okay to throughput.

  9 and 12, the method in which the throughput server 22 checks whether there is new information in the information server 20 in step S340 may further include the following steps: The server 22 transmits the user account to the information server 20, the information server 20 reads the data belonging to the user account, and transmits the identification code of each data to the throughput server 12, so that the throughput server 12 By verifying the difference between each received data identification code and the next received identification code, it can be seen which identification code is the new identification code that appears for the first time in this check, and then the throughput server 12 The code can read the complete data content to the information server 10. Finally, in step S360, the throughput server 12 transmits a part or all of the new data content to the mobile device 34.

  In step S350, the method in which the information server 20 actively transmits new data to the throughput server 22 includes the following steps: when the information server 20 receives one new data, the information server 20 After creating online with the server 32, the new data received is transmitted to the throughput server 22, and the throughput server 22 determines that the new data should be transmitted to any mobile device 34, and after determining Throughput bar 22 transmits some or all of the new data content to mobile device 34.

This allows the user to submit a request to read the information each time and wait for a slow response of the wireless network, so that when the information reaches the information server, it is throughput to the mobile device, so the response speed of the wireless network is slow In addition, the firewall can be used to exchange data between the mobile device and the throughput server without changing the firewall layout by going online via the throughput server and the relay gateway in the firewall. The problem of blocking the exchange can be solved, and since data transmission is performed between the mobile device and the throughput server by the encryption technique, it is possible to effectively solve the safety problem that can occur at the time of information transmission.

The present invention further provides a system, a method and a safety mechanism for connecting an information server and a mobile device, in which the mobile device can be connected to an information server in an enterprise network, and a safety guarantee is obtained. .

FIG. 13 is a structural diagram of a system for connecting an information server and a mobile device according to the third embodiment of the present invention. This system is installed in a local area network and stores a large number of data. Information server 41, 41 ', which is a server that can support any TCP protocol, throughput server 42, 42' for transferring data in connection with the corresponding information server 41, 41 ', and corresponding throughput server 42, 42' On the other hand, the firewall 43, 43 ′ prevents unauthorized users from going online to the local area network via the external Internet, and the throughput server 42, one end of which passes through the firewall 43, 43 ′ via the Internet. 42 'and the other end is connected to the wireless network and Relay gateway 44, which is a relay connection point with a line network, and various types of mobiles that transfer data by connecting to the relay gateway 44 via a wireless network, such as a notebook computer 45 or an intelligent mobile phone 46, for example. And a device.

As shown in FIG. 14A, the throughput server causes the throughput server to create a connection with the information server, and causes the throughput server to create a connection with the Internet and connects the relay gateway to transfer data. Contains relay gateway connection module 53, and network safety module 52 that has verification and decrypts data from relay gateway, then transmits to information server 41, and at the same time encrypts data and transmits to relay gateway Is done.

As shown in FIG. 14B, the relay gateway is connected to the throughput server, connected to the mobile device via the wireless network, and the throughput server connection module 61 that accepts and manages the online created by the throughput server. Mobile device connection module 63 that accepts and manages online and online connection between the mobile device and the throughput server, and after successful pairing, data is transferred in both directions between the throughput server and the mobile device. A coupled pair transfer module 62.

FIG. 15 is a flowchart of an implementation method of the present invention. With reference to FIG. 13, in step S500, the throughput server 42 creates online for the relay gateway 44 through the firewall 43, and in step S510, the intelligence Mobile phone 46 creates an online connection to relay gateway 44 via the wireless network, and in step S520, intelligent mobile phone 46 and throughput server 42 are paired via relay gateway 44, and in step S530, The intelligent mobile phone 46 creates a secure encrypted channel for the throughput server 42, and the intelligent mobile phone 46 requests the paired throughput server 42 to create a secure channel via the relay gateway 44. The throughput server 42 and the intelligent mobile phone 46 perform a secure encryption handshake protocol. In step S540, if the secure channel is successfully created, the encrypted data is transferred in both directions based on the TCP protocol between the intelligent mobile phone 46 and the throughput server 412. The handshake protocol is a symmetric encryption operation method or an asymmetric encryption operation method.

The intelligent mobile phone is any mobile communication device such as a notebook computer or a handheld device, and the wireless network for connecting to the relay gateway is a wireless network that can transfer IP protocol packets.

In addition, a safety mechanism for connecting the mobile device and the information server includes a verification (Digital Certificate) stored in the storage device and read by the throughput server, a relay gateway connected to the throughput server and transferring data, and a wireless And a mobile device that is connected to a relay gateway via a network to transfer data and is provided with a verification confirmation module in which the verification is in the X.509 format. The relay gateway includes two different transmission control protocols (TCP). By pairing the communication online, a data transfer channel is created, and after the data transfer channel is created, data can be transferred in both directions.

FIG. 16 is a structural diagram of the safety mechanism of the present invention, and the operation flow is as follows: the intelligent mobile phone 76 is online to the relay gateway 74 via the wireless network, and the relay gateway 74 is intelligent. Online between the mobile phone 76 and the throughput server 72 as a data transfer channel, the throughput server 72 reads the verification and transmits it to the intelligent mobile phone 76, and the intelligent mobile phone 76 and the throughput server 72 manage the verification. If the completed secure encryption handshake program is completed and the "general identifier" in the verification and the network address of the relay gateway 74 do not match, the intelligent mobile phone 76 presents information that does not match the user verification, If matched, the intelligent mobile phone 76 performs data encryption transfer with the throughput server 72, The latter is an authorization step, in which the intelligent mobile phone 76 transmits the user's account number and password to the throughput server 72 for identification, and if the identification is not correct, the identification of the user is successful. Present no information.

In the above safety mechanism, a number of throughput servers can read different content verifications or the same content verifications, and the “generic identifier” recorded in the verification is the function variable name of the relay gateway or the IP address of the relay gateway. Address or relay gateway function variable name wildcard mode, and the use of the intelligent mobile phone verification management confirmation module is that the "generic identifier" recorded in the verification matches the network address of the relay gateway Inspect.

In order for the mobile device and the throughput server to achieve a secure encryption handshake flow during verification, SSL (Secure
Sockets Layer) protocol and TLS (Transport
Layer Security) protocol, WTLS (Wireless
Transport Layer Security (IPSEC) protocol, IPSec (IP Security) protocol, PPTP (Point to Point Tunneling Protocol) or L2TP (Layer2 Tunneling)
Protocol) is used.

As described above, according to the system, method and safety mechanism for connecting the information server and the mobile device according to the present invention, the channel for actively throughput the information to the mobile device is provided on a continuous TCP online basis. And because the throughput server immediately throughputs new information to the mobile device, the user can effectively respond to the wireless network without having to submit a request to read the information each time and wait for a slow response of the wireless network. Can solve the problem of slow speed.

In addition, according to the present invention, on the premise that the installation of the firewall is not changed, the bidirectional transmission through the firewall to the relay gateway is realized by the throughput server. Convenience can be demonstrated.

The above is an example for explaining the present invention, but the present invention is not limited thereby. Various changes and modifications within the spirit and scope of the present invention are all included in the claims of the present invention.

4 is a flowchart of a method for connecting a mobile device and an information server of the present invention. 1 is a conceptual diagram of a system for connecting a mobile device and an information server according to a first embodiment of this invention. The conceptual diagram when the information server of the 1st Example of this invention is located in a firewall. The conceptual diagram when the throughput server of the 1st Example of this invention is located in a firewall. FIG. 3 is a module diagram of the throughput server of FIG. 2. The module figure of the moving apparatus of FIG. The operation | movement flowchart of the network of the 1st Example of this invention. FIG. 5 is a structural diagram of a system for connecting a mobile device and an information server according to a second embodiment of this invention. The block diagram of the throughput server which the 2nd Example of this invention uses. The block diagram of the relay gateway which the 2nd Example of this invention uses. The block diagram of the moving apparatus which the 2nd Example of this invention uses. The flowchart when the 2nd Example of this invention transfers information in a network. The structure figure of the system for connecting the information server of 3rd Example of this invention, and a mobile device. The structure conceptual diagram of the throughput server of the 3rd Example of this invention. The structure conceptual diagram of the relay gateway of 3rd Example of this invention. The flowchart of the implementation method of the 3rd Example of this invention. FIG. 6 is a structural diagram of a safety mechanism according to a third embodiment of the present invention.

Explanation of symbols

10 Information server
11 Throughput server
111 Information server connection module
112 Information receiving module
113 Information encoding module
114 Mobile device connection module
12 Wireless network
13 Mobile device
131 Throughput server connection module
132 Placement module
133 Information encoding module
134 User Interface Module
14 Internet
15 Firewall
16 Firewall
20 Information server
22 Throughput server
221 Information server connection module
223 Relay gateway connection module
224 Information encoding module
225 Network Safety Module
24 Firewall
26 Internet
28 Relay gateway
281 Throughput server connection module
282 Mobile device connection module
283 Linked pair transfer module
30 wireless network
32 Wireless information gateway
34 Mobile equipment
341 Relay gateway connection module
342 Network Safety Module
343 Information Encoding Module
344 Placement module
345 User Interface Module
41, 41 'information server
42, 42 'throughput server
43, 43 'firewall
44 Relay gateway
45 notebook computer
46 Intelligent mobile phone
51 Information server connection module
52 Network safety module
53 Relay gateway connection module
61 Throughput server connection module
62 Concatenated Pair Transfer Module
63 Mobile device connection module
72 Throughput server
74 Relay gateway
76 Intelligent mobile phone

Claims (59)

An information server installed in the Internet for storing information;
A throughput server connected to the information server to transfer information;
A mobile device that creates an online connection with the throughput server via a wireless network;
Contains
When new information reaches the information server, the throughput server immediately throughputs the new information to the mobile device online.
A system for connecting an information server and a mobile device.   The system for connecting an information server and a mobile device according to claim 1, wherein the information server is a mail server, an application server, a group software server, an office automation server, or a database server.   The information includes email arrival notification, email subject, email destination, email CC, email secret CC, email text, email attachment, incident occurrence notification, incident occurrence content, address book data, calendar data, backlog data, file name The system for connecting the information server and the mobile device according to claim 1, further comprising a file content.   2. The information server according to claim 1, wherein one or more firewalls, proxy servers, or VPN gateways are installed between the throughput server and the information server. system.   The secure encryption technology protects the safety and integrity of data transmission between the mobile device and the throughput server. The secure encryption technology can be used for SSL, TLS, WTLS, IPSec, PPTP, L2TP, AES The system for connecting an information server and a mobile device according to claim 1, wherein the system is an encryption operation method, an RSA encryption operation method, or a dedicated operation method.   2. The information server according to claim 1, wherein one or more firewalls, proxy servers, or VPN gateways are installed between the mobile device and the throughput server. system. The throughput server is
An information server connection module that creates a network connection between the throughput server and the information server, and checks and receives new information from the information server;
An information receiving module for receiving new information transmitted by the information server to the throughput server;
An information encoding module that compresses / decompresses and encodes the transferred data;
A mobile device connection module that maintains online created from the mobile device to the throughput server and processes secure encryption / decryption during data transfer;
Contains,
The system for connecting the information server according to claim 1 and the mobile device. The mobile device is
A throughput server connection module that creates online with the throughput server and processes secure encryption / decryption during data transfer,
A deployment module that manages network parameters, account password parameters and user interface display method parameters set by the user;
An information encoding module that performs compression / decompression and encoding of data between the mobile device and the throughput server;
A user interface module that displays a user interface and manages the display and input of information;
Contains,
The system for connecting the information server according to claim 1 and the mobile device.   After the mobile device and the throughput server create online, the mobile device transmits an account password to the throughput server, the throughput server identifies the terminal user identity by the account password, and the mobile device receives new information. If the mobile device entry is OK, and if new information arrives, the throughput server will only throughput the new information belonging to the user to the mobile device. The system for connecting the information server according to claim 1 and the mobile device.   2. The information server and move according to claim 1, wherein if the mobile device interrupts for some reason between the mobile device and the throughput server, the mobile device creates online again for the throughput server. A system for connecting devices.   The information server and mobile device according to claim 1, wherein the throughput server can be online with one or many information servers, and the mobile device can receive new information from many information servers. System for connecting.   When a user can set a large number of information filtering rules and new information arrives, the throughput server performs string matching and time contrasting on the new information, and sends only new information matching the rule to the mobile device. The system for connecting the information server and the mobile device according to claim 1, wherein throughput is achieved. The mobile device creates an online with the throughput server via the wireless network,
The throughput server checks the information stored in the information server,
When the new information reaches the information server, the throughput server throughputs the new information to the mobile device.
A method for connecting an information server and a mobile device.   14. The method for connecting an information server and a mobile device according to claim 13, wherein the information server is a mail server, an application server, a group software server, an office automation server, or a database server.   The information includes email arrival notification, email subject, email destination, email CC, email secret CC, email text, email attachment, incident occurrence notification, incident occurrence content, address book data, calendar data, backlog data, file name 14. The method for connecting an information server and a mobile device according to claim 13, wherein file contents are contained.   14. The information server according to claim 13, wherein one or more firewalls, proxy servers, or VPN gateways are installed between the throughput server and the information server. Method.   The secure encryption technology protects the safety and integrity of data transmission between the mobile device and the throughput server. The secure encryption technology can be used for SSL, TLS, WTLS, IPSec, PPTP, L2TP, AES 14. The method for connecting an information server and a mobile device according to claim 13, wherein the method is an encryption operation method, an RSA encryption operation method, or a dedicated operation method.   14. The information server according to claim 13, wherein one or more firewalls, proxy servers, or VPN gateways are installed between the mobile device and the throughput server. Method. The throughput server is
An information server connection module that creates a network connection between the throughput server and the information server, and checks and receives new information from the information server on a regular basis;
An information receiving module for actively receiving new information from the information server to the throughput server;
An information encoding module that compresses / decompresses and encodes the transferred data;
A mobile device connection module that maintains online created from the mobile device to the throughput server and processes secure encryption / decryption during data transfer;
The method for connecting an information server and a mobile device according to claim 13, wherein: The mobile device is
A throughput server connection module that creates online with the throughput server and processes secure encryption / decryption during data transfer,
A deployment module that manages network parameters, account password parameters and user interface display method parameters set by the user;
An information encoding module that performs compression / decompression and encoding of data between the mobile device and the throughput server;
A user interface module that displays a user interface and manages the display and input of information;
The method for connecting an information server and a mobile device according to claim 13, wherein:   After the mobile device and the throughput server create online, the mobile device transmits an account password to the throughput server, the throughput server identifies the terminal user identity by the account password, and the mobile device receives new information. If the mobile device entry is OK, and if new information arrives, the throughput server will only throughput the new information belonging to the user to the mobile device. 14. A method for connecting an information server and a mobile device as claimed in claim 13.   14. The information server according to claim 13, wherein the mobile device again creates a TCP online for the throughput server if interrupted for some reason between the mobile device and the throughput server. A method for connecting a mobile device.   14. The information server and mobile device of claim 13, wherein the throughput server can be online to one or many information servers, and the mobile device can receive new information from multiple information servers. The way to connect.   When a user can set a large number of information filtering rules and new information arrives, the throughput server performs string matching and time contrasting on the new information, and sends only new information matching the rule to the mobile device. 14. The method for connecting an information server and a mobile device according to claim 13, wherein throughput is achieved. There is at least one information server and a throughput server located in the firewall, the throughput server comes online to the relay gateway via the communication port opened by the firewall, and the throughput server receives information from the information server. To the relay gateway,
There is at least one mobile device that is online to the relay gateway via a wireless network, the relay gateway throughputs the information to the mobile device based on an IP protocol or via a wireless information gateway, and the mobile device Receives the information via the wireless network,
A system for connecting an information server and a mobile device. The throughput server further includes:
An information server connection module that creates a network connection between the throughput server and the information server, and checks and receives information from the information server;
A relay gateway connection module that creates a network online with the relay gateway from the throughput server and transfers data;
An information encoding module that encodes the transfer information;
A network safety module that transmits the encrypted information to the relay gateway, decrypts the information from the relay gateway, and transmits the information to the information server;
26. The system for connecting an information server and a mobile device according to claim 25, wherein: The relay gateway further includes
A throughput server connection module for receiving and managing the online created by the throughput server;
A mobile device connection module that receives and manages the online created by the mobile device;
Paired online between the mobile device and the throughput server, and if the pair is successful, the linked pair transfer module in which information is transferred in both directions between the throughput server and the mobile device;
26. The system for connecting an information server and a mobile device according to claim 25, wherein: The mobile device further includes:
A relay gateway connection module for creating and managing online and information transfer between the mobile device and the relay gateway;
An information encoding module that performs encoding processing on information between the mobile device and the relay gateway;
A network safety module that encrypts information to be transmitted to the relay gateway and decrypts information from the relay gateway;
A user interface module for displaying a user operation interface of the mobile device and managing display and input of information;
A deployment module to manage the user's account configuration parameters;
26. The system for connecting an information server and a mobile device according to claim 25, wherein:   26. The system for connecting an information server and a mobile device according to claim 25, wherein the information server is a mail server, application server, group software server, office automation server, or database server.   The information server according to claim 25, wherein the throughput server communicates with the information server using TCP, POP3, IMAP4, IIOP, DIIOP, SMTP, MAPI, WebDAV, SOAP, XMLRPC or HTTP protocol. A system for connecting mobile devices.   26. The system for connecting an information server and a mobile device according to claim 25, wherein the wireless network is a wireless network capable of transmitting packets based on an IP protocol.   26. The system for connecting an information server and a mobile device according to claim 25, wherein the wireless information gateway is an SMS gateway, an MMS gateway, or a WAP gateway. Throughput server creates online to the transit gateway through the open communication port of the firewall,
The mobile device creates online for the relay gateway,
The mobile device and the throughput server are paired online via the relay gateway,
A method for connecting an information server and a mobile device, wherein the throughput server throughputs the encrypted information from the information server to the mobile device.   34. The information server according to claim 33, wherein the throughput server throughputs the information to the information server and the mobile device based on an IP protocol or via a wireless information gateway. How to do. In the step of the online creation of the throughput server to the relay gateway,
The identification information of the throughput server is transmitted to the relay gateway, and the identification information is at least one of a communication port number, an IP address, a function variable name, or a single character string,
34. The information server and mobile device according to claim 33, wherein if the relay gateway examines the identification information and confirms that it is OK, the relay server is kept online and the throughput server is allowed to transmit the information. How to connect with. In the step in which the mobile device creates online for the relay gateway,
The mobile device creates online to the relay gateway via the wireless network,
There is identification information in the online request of the mobile device, and the identification information is at least one of a communication port number, IP address, function variable name or one-stage character string for confirming whether to create online. is there,
34. A method for connecting an information server and a mobile device according to claim 33. In the step of pairing the mobile device and the throughput server online via the relay gateway,
The relay gateway makes an online pair based on the identification information of the mobile device and the identification information of the throughput server. After the online pairing, the information is transferred in both directions between the mobile device and the throughput server. 34. A method for connecting an information server and a mobile device according to claim 33, wherein the method is transferred.   34. The connection between the information server and the mobile device according to claim 33, wherein the encryption operation method used for the encryption is a symmetric encryption operation method or an asymmetric encryption operation method. the method of. In the step of throughput of the encrypted information to the mobile device by the throughput server,
34. The throughput server according to claim 33, wherein the throughput server first notifies the mobile device of a gist that a new incident has occurred, and the mobile device reads complete information content from the throughput server. A method for connecting the described information server to a mobile device. A method for connecting an information server and a mobile device to check whether new information exists in the information server,
The throughput server transmits the user account to the information server,
The information server reads the data belonging to the user account, and transmits the identification code of each data to the throughput server,
The throughput server verifies the difference between each data identification code received in the past and the identification code received this time, and finds out which identification code is the new identification code that appears for the first time in this check,
The throughput server requests the information server to read the complete data content with a new identification code,
The throughput server transmits some or all new data content to the mobile device,
A method for connecting an information server and a mobile device. The information server receives one new piece of data
The information server creates an online with one throughput server,
New data received by the information server is transmitted to the throughput server,
The throughput server determines that the new data should be transmitted to any mobile device,
The throughput server transmits some or all new data content to the mobile device,
A method for connecting an information server and a mobile device. At least one information server installed in the local area network and storing information;
At least one throughput server connected to the information server to transfer information;
At least one firewall located between the throughput server and the local area network and preventing unauthorized users from online to the information server via the local area network;
One end is connected to the throughput server through the firewall via the local area network, and the other end is connected to the wireless network, and is at least a relay connection point between the local area network and the wireless network. One relay gateway,
At least one mobile device connected to the relay gateway and transferring data via the wireless network;
Contains,
A system for connecting an information server and a mobile device. The throughput server is
An information server connection module that causes the throughput server to create a connection with the information server;
A relay gateway connection module for causing the throughput server to create a connection with the local area network and the relay gateway and transferring data;
One end is connected to the relay gateway connection module, and the data from the relay gateway is decrypted and then transmitted to the information server. The other end is connected to the information server connection module and encrypts the data from the information server. Network safety module that transmits to the relay gateway after
43. The system for connecting an information server and a mobile device according to claim 42, comprising: The relay gateway
A throughput server connection module connected to the throughput server and receiving and managing online created by the throughput server;
A mobile device connection module that is connected to the mobile device via the wireless network and receives and manages online created by the mobile device;
One end is connected to the mobile device connection module, the other end is connected to the throughput server connection module, and the mobile device and the throughput server are paired online. A coupled pair transfer module that is transferred in both directions;
43. The system for connecting an information server and a mobile device according to claim 42, comprising:   43. The system for connecting an information server and a mobile device according to claim 42, wherein the wireless network is a wireless network capable of transmitting packets based on an IP protocol.   43. The system for connecting an information server and a mobile device according to claim 42, wherein the information server is a server that can support a transmission control protocol. One throughput server creates online for the relay gateway,
One mobile device creates online for the relay gateway,
The mobile device and the throughput server are paired by the relay gateway,
The mobile device and the throughput server create a secure encrypted channel,
The mobile device and the throughput server transfer data in both directions.
A method for connecting an information server and a mobile device. In the step of the mobile device and the throughput server creating the secure encrypted channel,
The mobile device sends a request to create a secure channel to the throughput server that is paired via the relay gateway,
48. The throughput server according to claim 47, wherein the throughput server and the mobile device perform a secure encryption handshake protocol, and the encryption operation method is a symmetric encryption operation method or an asymmetric encryption operation method. For connecting information servers and mobile devices in the world. At least one verification stored in a storage element and read by a throughput server;
At least one relay gateway connected to the throughput server and transferring data;
At least one mobile device connected to the relay gateway via a wireless network to transfer data and provided with a verification confirmation module;
Contains,
A safety mechanism for connecting an information server and a mobile device.   50. A safety mechanism for connecting an information server and a mobile device according to claim 49, wherein the verification is in X.509 format.   The relay gateway creates a data transfer channel by pairing two different transmission control protocols, and can transfer data in both directions after the data transfer channel is created. 49. A safety mechanism for connecting the information server according to 49 and the mobile device.   50. The safety mechanism for connecting an information server and a mobile device according to claim 49, wherein a number of said throughput servers can read verifications of different contents.   The safety mechanism for connecting the information server and the mobile device according to claim 49, wherein a plurality of the throughput servers can read the verification of the same content.   The general identifier recorded in the verification is a function variable name of the relay gateway, an IP address of the relay gateway, or a wildcard mode of the relay gateway function variable name. A safety mechanism for connecting information servers and mobile devices.   The information server according to claim 49, wherein the verification confirmation module checks whether the general identifier transmitted by the verification matches the network address of the relay gateway. Safety mechanism to do. After the step of the throughput server online to the relay gateway,
The mobile device is online to the relay gateway via the wireless network,
The relay gateway creates a data transfer channel online with the mobile device and the throughput server,
The throughput server reads the verification and transmits it to the mobile device,
50. The information server and mobile device of claim 49, wherein the mobile device and the throughput server complete a secure encryption handshake program with verification management, and encrypt and transfer data Safety mechanism to do. In the step of the mobile device and the throughput server completing a secure encryption handshake program with verification management,
The information according to claim 49, wherein if the general identifier of the verification and the network address of the relay gateway do not match, the mobile device presents information that does not match the user verification. A safety mechanism for connecting servers and mobile devices. In the step of transferring data between the mobile device and the throughput server,
The mobile device transmits the user's account number and password to the throughput server in order to confirm the identity, and if the identity confirmation is not correct, presents information indicating that the identity confirmation of the user is not successful. A safety mechanism for connecting the information server according to claim 49 and the mobile device.   The flow in which the mobile device and the throughput server achieve a secure encryption handshake through verification is SSL protocol (SSL), TLS protocol (TLS), WTLS protocol (WTLS), IPSec protocol (IPSec), PPTP, or 50. The safety mechanism for connecting an information server and a mobile device according to claim 49, wherein the safety mechanism is at least one selected from the group consisting of L2TP.