TW200525978A - System and method to shift the information of the server in the firewall into the mobile device - Google Patents

Abstract

This invention reveals a system and method to shift the information of the server in the firewall into the mobile device. It utilizes the server of data source that is responsible for receiving information, and transmits to the network host. The network host is responsible for shifting the information through the firewall to a relay gateway. The relay gateway shifts the information to the mobile device based on the IP protocol or through a wireless message gateway. Under the premise without changing the firewall setup, the network host connects with the relay gateway through the firewall. It eliminates the problem that the firewall prohibits the mobile device from directly connecting with the km internal server. Eventually, by means of encryption technology, it provides the security protection of information transmission.

Description

200525978 V. Description of the invention (1) [Technical field to which the invention belongs] The present invention relates to a technology using a helmet-actuated device, and in particular, it relates to: ^, the information network pushes the information to the line 'information is safely added Zhai Fangyu did not change the configuration before the fire pedal.轫 Systems and parties of the device [Prior art] Generally, if a mobile device needs to receive a notification of a request from a user, it is necessary to use Action 2 or check the s-sent data. However, based on the wireless communication network Km ", the transmission and reception are long, the signal strength is unstable, and the transmission is long; there is a problem of delay and long operation time. There will be a slow response time in the Si message. A firewall is usually used to isolate the outside world and directly connect to the server in the & domain network. The device cannot be directly connected to the firewall. Second, in this network environment, the mobile wall prohibits the outside world from directly establishing a connection. Because of fire prevention The problem of preventing the intestinal obstruction of data exchange. In addition, Α ί ί 'Shell, if it is passed between the public network and the wireless communication network in clear text to the mobile phone service department 眭 ^ ^ ^ Served at Beixo Beco Source 仃In the case of mobile devices, there is a security problem of information encryption. In view of this, in order to solve the problem of the response speed of the prior technology to obtain information ^ the fire wall blocked the data exchange and the security problems caused when the information was transmitted, the invention proposes a method of passing information from a firewall. The server pushes to inm. 5. Description of the invention (2) '~~ —— __ The system and method of moving the device to overcome the aforementioned problems. [Summary of the invention] The main purpose is to push the server to the mobile device to provide a way to pass information from the network host and the relay gateway inside the firewall to the system and method. It uses the inside of the firewall to make the data source server ^, without changing the firewall. Before setting up, it was mentioned that the firewall blocks the data from being pushed to the mobile device to solve the other problem of the present invention: the server is pushed to the mobile device. After providing a way to send information from the source server in the firewall, Will push the second line, and method, which is to send information to read information on the arrival / lack of information, please go to the mobile device, so that users do not need to respond, to effectively solve the problem: and wait for the wireless communication network is slow Back to the second problem of the present invention, the problem of poor network response speed. The server pushes to the mobile device system, and provides a system and method for transferring information between the firewall and the network host using mobile devices. Security issues: 赉 Transmission method, to solve the problem of information transmission in order to achieve the above-mentioned purpose. In this system, ^% of the server ’s servers are pushed to the mobile device ’s gateway, wireless message closed channel: server, network host, firewall, 4-way connection, among which the network wireless communication network and mobile device All are expected to connect to the relay gateway. The CMC pushes the data source to the server through the firewall ’s original open communication message gateway. The 7 channels are pushed to the mobile phone based on the 1 p protocol or the information transmitted through the wireless m-version device. Device, and this 200525978 V. Description of the invention (3) The mobile device receives the information from the wireless communication network. Another embodiment of the present invention proposes a method for pushing information from the fire prevention i :: theft to the mobile device. t, the network host establishes a connection to the relay ^ 2 and the mobile device also establishes a connection to the relay server, = the two mobile device and the network host perform connection pairing through the relay server, and configure ^ ^ 时 '& encrypted data transmission between the mobile device and the network host. Therefore, the network host can push the information from the data source server to the mobile JH-m. Detailed description of the formula Understand the purpose, technical content, characteristics and achieved effect of the present invention. 0 [Conduct information and information methods and methods for sending data. Please add 24 devices located in the anti-relay gate. Modes. The network owner refers to the composition of the 14th fire wall, 14th, 18th for more confidential information. The previous technology of the data source and the server and data source in the information transmission wall are changed to the data source set in the mobile device. The wireless communication network is shown in the figure below. This data source waits for the server. The server is premised. The system server 10, 20, and serverless 10 are problems of slow mail response and firewall blocking. The present invention proposes a mobile device system and its new data inspection and transmission. To enable the data source server to map, the system of the present invention is a server or application server that is responsible for receiving and forwarding information with the network host 12, and the first-line message gateway 22 and mobile device.

200525978

Dynamic server or database server host; you can use the local area network to check whether the data source server 10 is receiving, then the network host 12 will use the Internet through the one-way communication port. 12 The information can be sent through the SMS gateway message gateway 22. 24 is a wireless connection based on the IP protocol, which enables the network host 丨 2 to exchange data with the bank to achieve the purpose or group that the network host pushes to the mobile device 24 Software server or office server, and the data source server 10 is connected to the network. The network host 12 is responsible for detecting the new information. Once the new information is found on the fire wall 14, the information will be opened from the inside to the outside, and the information will be pushed to the relay gateway 18, the gateway, the MMS gateway, or the WAP gateway. There is no mobile device 24, and the mobile device communication network 20 and the relay gateway 18 are established _ The device 24 can be relayed. The gateway 丨 8 into 1 2 can send information from the data source server 1 0 to 0 t In order to learn more about the architecture of this system, Saerzhongzhong made further details on the above-mentioned network machine 2, relay gateway 18, and mobile device 24. When referring to the network host shown in the second figure,丨 2, which is composed of a data server connection module 121, a relay gateway connection module 123, an information code 24, and a network security module 125; this data source server connection surface | group 121 is responsible for The network host 12 establishes a network f with the data source server 10bis, checks and receives new data from the data source server 10 ^ ', and the data source server connection module 121 can use POP3, IMAP4, = [DII0P, SMTP, WebDAV, SOAP, XMLRPC, or HTTP protocol = source feed server to communicate, data source server Cloth connection module 121 checks whether new information arrival; Check new information will be due to the timing

Page 8 200525978 V. Description of the invention (5)

Delay in push time, #, 土 B 24, if you want to deliver the message in real time: Good: Available from P ::: Information to mobile device 12 to establish a connection, and actively send server 10 to the network master group. 121 reached. Data transmission to the data source feeder connection mode WAP, XMLRPC or HTTP can be used to calculate the time required for the information to be transmitted to the server. The 12 gates of this party: ΐ, and 1 24 are responsible for relay gates. Compression / decompression and encoding of channel 18 and data source server • 20, due to the wireless communication network and the use of this mode can reduce the amount of data required for network transmission. A compact format that mobile device 24 can receive. Information & Second, the full module 125 series is responsible for the L: Kaxiong from the data source server 10, 'At the same time, the information from the relay gateway 18 is decrypted, and the encryption / relay gate uses various asymmetric standards. Algorithms, symmetrical standard algorithms. The 1 8 pq f 迢 connection module 123 is used to establish a network connection between the host 12 and the relay gateway 2 and transmit data. Since the firewall 14 is usually used to allow HTTPe users in the local area network to access the Internet, 111 ^ 1 is usually open. ) Port 80 or _ „, Port 44 and Port 3 allow one-way connection to websites outside the firewall, then the Zhongwei Erdao connection module 1 2 3 will connect to the relay gate through the originally open communication port of the firewall 1 4 Road 18. Please refer to the first and third figures at the same time, the relay gateway 18 is composed of a private connection module 181, a mobile device connection module 182, and a connection pairing = pull group 183; The host connection module 181 is responsible for receiving the connection established with the management network host 12; the mobile device connection module 182 is responsible for

200525978

# ti A The connection established by the mobile device 24; then use this connection to pair the input module 1 8 3 to be responsible for the pairing action 9 jb _, to establish the connection between the mobile device 24 and the network host 12 After the pairing is successful, the information can be transmitted in both directions. Fly H, Marker Set 24 including -ΠΠί See the first and fourth pictures *, the mobile device is connected to the network, the connection module 241, the network security module 242, and the f-code i =? L module 244 and user module 245, etc .; relay closure Λ can establish and manage mobile devices 24 to relay gateway 18 III. Line and data transmission, network security module 2 4 2 series for data addition : 'Send encrypted data to relay gateway 18 and decrypt the information from relay = channel 18; the information encoding module 243 is responsible for compressing / decompressing and encoding the data between mobile device 24 and relay = channels 1-8 G2 (Setting module 2 is responsible for setting network security parameters, account password parameters, user interface presentation mode parameters, etc. of the user of the mobile device; and this user interface module 245 is responsible for presenting the user operation interface and managing information After the detailed description of the system architecture of the present invention, the network transmission process of pushing the server in the information firewall to the mobile device will be described. Please refer to the fifth figure. First, the network host 12 Establish the instrument line to the relay server 18; as in step S10 As shown, the network host 12 first sends the identification information of the network host to the relay gateway i 8 through the communication port opened by the firewall 14 to enable the relay. The closed channel 18 performs identification information audit, and if the relay gateway 18 audits identification information If it is successful, the connection is maintained in step s 12 and the network host 12 is allowed to transmit information. Then, the mobile device 24 establishes a connection to the relay server 18; as shown in step s20, the 'mobile device 24 sends the relay to the relay through the wireless communication network. Server 18

Page 10 200525978 V. Description of the invention (7) _Li Connected The connection request sent by the mobile device 24 carries identification information, that is, mobile device identification information, which can be a communication port number or 1? Address or domain name Or at least one of a string; if the relay gateway 18 audits the identification information successfully, it is allowed to stay connected. ^ Then the mobile device 24 and the network host 12 perform connection pairing through the relay server 18; as shown in step S30, the relay gateway 18 performs connection pairing based on the mobile device identification information and the network host identification information. If the connection is successful, the information is allowed to move in two directions between the device 24 and the network host 12. At last, the network host will push the information from the data source server to the mobile device; first check if there is any in step S40. If there is new information, step S42 receives the new information from the data source feeder 10, and the network host 12 can push the encrypted information to the mobile device μ based on the IP protocol as step = 4. The encryption used for this encryption The algorithm can be an asymmetric encryption algorithm. In addition, the network host 12 also == 疋 first transmits the information to the wireless line from the gateway 22, & 'this step S46 helmet green 1 from μ = such as As shown in step S48, the information is pushed to the mobile device 24 through the ... channel μ gateway 22. Please refer to the second and fifth figures again. In step S4, the method of the machine 12 checking whether the data source server 10 has new information is as follows: First, the network host 12 registers the user account. The server 10 can be fed, and the data source server 10 reads the data belonging to the second application: the source, and transmits the identification code of each piece of data to the network host M, so that the host 12 checks the past receipt What is the difference between the identification code of each of the data and this ^ for the network identification code, so as to check which identities of identification ^ 疋 belong to this inspection

Page 11 200525978 V. Description of the invention (8) --- a-New identification code that appears now, and then 'web host 12 source server 10 requests to read the complete data content. The most W code to the data is As shown in step S44, some or all of the new assets can be dumbfounded to the network host 12 device 24. Fend it to action In step S42, the method of the data source server 10 master and the network host 12 includes the following steps: Passing to: a new data source server !. After the connection to the network ::: 10 is connected, the data source server 10 will connect the new server 12 to the connection 2 ′ This network host 12 judges this; the network host • sets 2. After the judgment is completed, the network host 12 is transmitted to the mobile device 24. Or all new data. So, ‘under the framework of the present invention, the user &: requests for information and waits for the wireless data network. After reaching the data source feeder, it will be pushed to the mobile device 3 U = reel from two? Furthermore, you can connect through the network host ΐ ΐ ϊ inside the firewall without changing the configuration of the fire pedal, so that the mobile device and the network host can enter and exchange with each other carefully. , Solved the firewall blocking data, and using encryption technology between the mobile device and the network host, and effectively solved the security problems that may occur when negative signal transmission = ^ The embodiment described is only to explain the technology of the present invention Thoughts and special features: In order to enable those skilled in the art to understand the invention ^ ^ ^, when the scope of the patent of the invention cannot be limited, that is, the equal changes or modifications made by the spirit disclosed by Da Ming, Should still

Page 12 200525978 V. Description of the invention (9) 萆 It is within the patent scope of the present invention. 13 Page 13 Relay gate network security Internet master connection with wireless signal relay gate information editor User interface connection module Full module Road machine connection module Closes the transmission module exhaust: Connection module Code module surface module 200525978 Simple description of the circle [Simplified illustration of the diagram] The first figure is the system architecture circle of the present invention. The second figure is the network host used in the present invention. The third figure is the relay channel used in the present invention. ° The fourth figure is a block diagram of a mobile device used in the present invention. The fifth figure is the flow chart of the information transmission on the network according to the present invention. [Description of the main component symbols] 10 Data source server φ Network host 1 2 1 Data source server connection module 1 2 4 Information coding module 14 Firewall 18 relay gateway 182 mobile device connection module 20 wireless communication network 24 mobile device 242 network security module, ^ 244 configuration module

Claims (1)

200525978 6. Scope of Patent Application 1_. A system including: information pushed from a server in a firewall to a mobile device is at least one data source server, and the network host passes the gateway to make the network host The relay gateway can be pushed; and at least one mobile device asks, 'The relay gateway is pushed to the mobile device based on 1? Information, and the information is received. 2. For example, if the item No. 1 of the scope of patent application is pushed to the system of the mobile device, a data source server is connected to the network server between the data source server; a relay gateway connection module, and a closed network Connect and transmit data J 丨 Xiaom listen to a fireproof phosphine η Open communication port of the fire wall Connect to / relay information Send from the data source server Connect to the relay protocol using a wireless communication network or via a wireless The message gateway will cause the mobile device to be persuaded by the firewall in the wireless communication network ^, wherein the network host further includes: a group, which is responsible for establishing and connecting from the network host, checking and receiving From the data source is responsible for establishing and relaying materials from the network host; a message encoding module that encodes the transmission information; and a face-to-face security module that encrypts the information and passes it to the server. Following the gateway, the server. 2. Responsible for decrypting the information from the relay gateway and transmitting it to the source server. 2 As described in item 1 of the scope of the patent application, the information is pushed from the fire prevention device to the 耔 毹 酤 里 ΛΑ? The system of a full-automatic servo device of Beixun Tianren, where the relay gateway further includes: 、 Weekly host connection module, which is used for receiving and management by the network host. 1 ~ 200525978 VI. Patent application scope soap connection; a mobile device connection module that receives and manages the connection established by the stand; and the device builds a connection pairing transmission module that pairs the mobile device and the machine Connection between them, and after the successful pairing, the information can be transmitted in both directions between the network and the mobile device. Wang Jixing 4 / The system for pushing information from a firewall to a mobile device as described in item 1 of the scope of the patent application, where the mobile device further includes a ^ gateway relay connection module, which is used to establish and manage the action zero The connection and information transmission between the gateways; ^ an information coding module, responsible for the coding processing of the mobile device and the relay; a force_Beixun network security module, which is sent to the encryption The information of the relay gateway is from the relay gateway; Responsible for presenting the user interface & display and input of the mobile device; and a configuration module, which manages the user's account setting parameters. For example, the system described in item 1 of the scope of the patent application, where the information is served by the server inside the firewall, and the server is powered by a server. The source server is a mail server or a database server. To the automation system, from the system in which the information is transferred from the server in the firewall to the mobile device as described in item 1 of the patent application scope, where the data source server is, SMTP, WebDAV, SOAP, XMLRPC, or HTTP Agreement that information Page 16 200525978 VI. The scope of patent application passed to the network host. 7. The system for pushing information from the server in the firewall to the mobile device as described in item 1 of the scope of the patent application, where the network host uses TCP, POP3, IMAP4, Iiop, DII0P, SMTP, MAPI, WebDAV, The SOAP, XMLRPC, or HTTP protocol communicates with the source server. 8. The system for pushing information from a server in the firewall to a mobile device as described in item 1 of the scope of the patent application, wherein the wireless communication network is a wireless network capable of transmitting IP-based protocol packets. 9. The system for pushing information from a server in a firewall to a mobile device as described in item 1 of the scope of the patent application, wherein the wireless message gateway is selected from one of an SMS gateway, an MMS gateway, or a WAP gateway By. 10. A method for pushing information from a server in a firewall to a mobile device, which includes the following steps: A network host establishes a connection to a relay feeder through an open communication port of the firewall; a mobile device Establish a connection to the relay server; pair the mobile device with the network host through the relay server; and subscribe to the fan line, the network host will encrypt the information and push it to the mobile farm. 1. The method of pushing information to a mobile device as described in the scope of the patent application, where the network owner = 疋 or the information from a data source via a wireless message gateway ^ Details Mobile device. Server 35 is pushed to the server as described in Item 10 of the scope of patent application. 200525978 VI. Push the patent application server to the gateway to establish the network communication port number, and when the relay network host transmits 13, if the application server is pushed to the server to establish the mobile installation line; and the Mobile device communication port number, for confirming whether or not 14, if the application server is pushed to the host through the • the relay gate information for the device and the network 15, if the application server is pushed to the algorithm, the host is selected from the steps of the mobile device line A method for identifying an IP address, wherein the network host to the relay further includes: information is transmitted to the relay gateway 'the identification information is at least one of a domain name or a string of characters; auditing with the gateway Send information. The scope of the patent is that the mobile device successfully identifies the information, then keeps connected and allows the method described in item 10 to pass the information from the temple inside the firewall. The step of connecting the mobile device to the relay further includes: wireless The communication network establishes a connection with the relay server through a connection IP address, establishes a connection with the patent range of the mobile device, and relays the server ’s server. According to the patented range of the connection paired host, the mobile device symmetrically adds identification in the request. Information 'The identification information is at least one of a domain name or a string of information. The method described in Item 10 is to use the information in a firewall, where the mobile device and the network device are connected and paired. The steps further include: identification information of the mobile device and the network organization, and information is allowed after the connection is paired; The method described in item 10 to pass information inside a firewall, wherein the encryption uses a lease determination method or an asymmetric encryption algorithm. Page 18 200525978 VI. Patent application scope 16. The method of sending information from a server to a mobile device as described in item J 0 of the patent application scope, wherein after the network owner 2 :: after serving encryption, In the step of pushing to the mobile device, the subcontracting and messaging host first notified the mobile device of a new event, and then said that the network went to the network host to read the complete information content. "仃 动 装置 U: The host computer checks whether the data source server has new information. The following steps include the following steps: π :: $ The host passes the user account to a data source server; acquires the data belonging to the user account, and Every time the 07 identification code is passed to the network host; ί ί: ί Γ Check that each data identification code received is the same as the one received this time. 3 = 0 = same, so as to check which identification codes belong to The new identification code of 1 Z 35 this time; whole = 2 roots :: The identification code requests the data source server to finish reading 1 order, and sets: the host passes part or all of the new data content to the装 装 # 18 :: Γΐ: source server master In order to transfer the new data to the web host, you include the following steps: A source server receives one ~ The source server creates a disk = data; the data, 7S h /, the connection of the web host The network host passes the received new data to the network host; and the host determines which mobile devices the new data should be passed to; 200525978 Page 20