# US 10,122,688 B2 · Communication system

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 10,122,688 B2
- Document ID: US10122688B2
- Status: Granted
- Kind: B2
- Application number: 15/039,671
- Filed: 2014-11-25
- Published: 2017-10-19
- Granted: 2018-11-06
- Earliest claimed: 2013-11-26
- Assignees: Hms Industrial Networks AB
- Applicants: Hms Industrial Networks AB
- Inventors: Vilhelm Persson; Lars-Åke Ekstrand; Jonas Åkerlund; Lars Dunemark; Jens Jakobsen
- Web page: https://patentgrep.com/patent/US10122688B2

## CPC

- H04L 63/029: {Firewall traversal, e.g. tunnelling or, creating pinholes}
- H04L 12/4633: {Interconnection of networks using encapsulation techniques, e.g. tunneling}
- H04L 12/66: Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
- H04L 63/0272: {Virtual private networks}
- H04L 63/107: {wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals}
- H04L 63/0471: {applying encryption by an intermediary, e.g. receiving clear information at the intermediary and encrypting the received information at the intermediary before forwarding}
- H04L 63/06: {for supporting key management in a packet data network (cryptographic mechanisms or cryptographic arrangements for key management H04L9/08)}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

This invention relates to a method in a communication system comprising a gateway and a server. The method comprises: sending a request for establishment of a communication tunnel from the gateway to the server; transmitting a secret from the server to the gateway in response to receiving the request in the server; establishing a communication tunnel by connecting a tunnel client in the gateway to a tunnel server in the server using the received secret; receiving data from a device connected to the gateway and transmitting at least a portion of the data to the tunnel server via the communication tunnel.

## Claims

### Claim 1

A method in a communication system, said system comprising a gateway and a server, said method comprising:
sending a request for establishment of a communication tunnel between the server and the gateway;
transmitting a secret from the server to the gateway;
establishing a communication tunnel by connecting a tunnel client in the gateway to a tunnel server in the server using the received secret;
receiving, at a first input on the gateway, data from a device connected to the gateway;
categorizing, at the gateway, the data received from the device in to at least a first and a second category based on the content of the received data;
transmitting at least a portion of the data to the tunnel server via the communication tunnel, wherein the portion of the data transmitted to the tunnel server comprises the first category of data, and the second category of data is not transmitted to the tunnel server;
receiving a signal at a second input on the gateway; and
disabling communication via the communication tunnel on a condition that the signal on the second input corresponds to a predetermined signature.

### Claim 2 (depends on 1)

The method according to claim 1, further comprising storing at least a portion of the received data in the gateway for subsequent transmission to the tunnel server.

### Claim 3 (depends on 1)

The method according to claim 1, wherein the received data is encrypted in the gateway prior to transmission to the tunnel server.

### Claim 4 (depends on 1)

The method according to claim 1, further comprising sending second data from the gateway to server, the second data comprising information related to the location of the gateway.

### Claim 5 (depends on 4)

The method according to claim 4, further comprising transmitting the secret from the server on a condition that the location of the gateway corresponds to location data stored at the server.

### Claim 6 (depends on 1)

The method according to claim 1, further comprising providing a signal at an output on the gateway, said signal indicating if communication is established between the gateway and the server.

### Claim 7

A communication system comprising:
a server configured to send a request for establishment of a communication tunnel between the server and a gateway;
said server further configured to transmit a secret to the gateway, wherein said gateway comprises a tunnel client configured to establish a communication tunnel to a tunnel server in the server using the received secret; and
said gateway is further configured to:
receive, at a first input on the gateway, data from a device connected to the gateway,
categorize the data received from the device in to at least a first and a second category based on the content of the received data,
transmit at least a portion of the data to the tunnel server via the communication tunnel, wherein the portion of the data transmitted to the tunnel server comprises the first category of data, and the second category of data is not transmitted to the tunnel server,
receive a signal at a second input on the gateway; and
disable communication via the communication tunnel on a condition that the signal on the second input corresponds to a predetermined signature.

### Claim 8 (depends on 7)

The communication system according to claim 7, wherein the gateway comprises a memory configured to store at least a portion of the received data for subsequent transmission to the tunnel server.

### Claim 9 (depends on 7)

The communication system according to claim 7, wherein the gateway is configured to encrypt the received data prior to transmission to the tunnel server.

### Claim 10 (depends on 7)

The communication system according to claim 7, wherein the gateway is configured to transmit second data related to the location of the gateway to the server.

### Claim 11 (depends on 10)

The communication system according to claim 10, wherein the server is configured transmit the secret on a condition that the location of the gateway corresponds to location data stored at the server.

### Claim 12 (depends on 7)

The communication system according to claim 7, wherein the gateway comprises an output, and the gateway is configured to provide a signal at the output indicating if communication is established between the gateway and the server.

### Claim 13

A gateway device comprising a processor and memory, the processor configured to:
receive a request for establishment of a communication tunnel between a server and the gateway;
receive a secret to from the server;
establish a communication tunnel with a tunnel server in the server using the received secret;
receive, at a first input, data from a device connected to the gateway;
categorize the data received from the device in to at least a first and a second category based on the content of the received data;
transmit at least a portion of the data to the tunnel server via the communication tunnel, wherein the portion of the data transmitted to the tunnel server comprises the first category of data, and the second category of data is not transmitted to the tunnel server;
receive a signal at a second input on the gateway; and
disable communication via the communication tunnel on a condition that the signal on the second input corresponds to a predetermined signature.

### Claim 14 (depends on 13)

The gateway device according to claim 13, wherein memory is configured to store at least a portion of the received data for subsequent transmission to the tunnel server.

### Claim 15 (depends on 13)

The gateway device according to claim 13, wherein the processor is configured to transmit second data related to the location of the gateway to the server.