# US 12,015,608 B2 · Data gateway system and data intercommunication method

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,015,608 B2
- Document ID: US12015608B2
- Status: Granted
- Kind: B2
- Application number: 17/520,629
- Filed: 2021-11-06
- Published: 2023-04-06
- Granted: 2024-06-18
- Earliest claimed: 2021-09-29
- Assignees: Digiwin Software Co., Ltd; Data Systems Consulting Co., Ltd.
- Applicants: Digiwin Software Co., Ltd; Data Systems Consulting Co., Ltd.
- Inventors: Kuan-Hui Wu; Guoxin Sun
- Web page: https://patentgrep.com/patent/US12015608B2

## CPC

- H04L 41/045: comprising client-server management architectures
- H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint}
- H04L 41/085: Retrieval of network configuration; Tracking network configuration history
- H04L 43/50: Testing arrangements
- H04L 63/0236: {Filtering by address, protocol, port number or service, e.g. IP-address or URL}
- H04L 63/0435: {wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption (cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06)}
- H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)}
- H04L 67/561: Adding application-functional data or data for application control, e.g. adding metadata
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A data gateway system and a data intercommunication method are provided. The data gateway system includes a client system and a cloud server. The client system includes a first connector module and a listener module. The cloud server includes a second connector module and an authentication management module. The listener module performs a command listening for the cloud server. When the listener module obtains a connection configuration information, the client system sends a connection request command to the cloud server through the first connector module, so that the cloud server receives the connection request command through the second connector module, and issues a gateway code. The cloud server sends the gateway code to the first connector module of the client system through the second connector module, so that the client system establishes a connection between the client system and the cloud server based on the gateway code.

## Claims

### Claim 1

A data gateway system, comprising:
a client system, set in a private cloud environment, and the client system comprising:
a first connector module; and
a listener module;
a cloud server, set in a public cloud environment, and the cloud server comprising:
a second connector module; and
an authentication management module,
wherein the listener module performs a command listening for the cloud server, when the listener module obtains connection configuration information, the client system sends a connection request command to the cloud server through the first connector module, so that the cloud server receives the connection request command through the second connector module, and determines whether the client system has a permission through the authentication management module according to the connection request command, so as to issue a gateway code,
wherein the cloud server sends the gateway code to the first connector module of the client system through the second connector module, so that the client system establishes a connection between the client system and the cloud server based on the gateway code.

### Claim 2 (depends on 1)

The data gateway system according to claim 1, wherein the client system comprises a first gateway module, and the first gateway module comprises the first connector module, the listener module, and a first command processing module,
wherein the cloud server comprises a second gateway module, and the second gateway module comprises the second connector module, the authentication management module, and a second command processing module,
wherein the listener module of the client system listens to the second command processing module of the cloud server to determine whether the second command processing module generates the connection configuration information.

### Claim 3 (depends on 2)

The data gateway system according to claim 2, wherein the second gateway module
stores the gateway code in a configuration management module when the authentication management module issues the gateway code.

### Claim 4 (depends on 3)

The data gateway system according to claim 3, wherein the second gateway module further comprises:
a connection management module, wherein when the second command processing module of the cloud server obtains gateway information, the second command processing module obtains a configuration command from the configuration management module according to the gateway information, and sends the configuration command to the first gateway module of the client system through the second connector module, so that the client system performs a connection test through the connection management module according to the configuration command.

### Claim 5 (depends on 4)

The data gateway system according to claim 4, wherein the first gateway module further comprises:
a data source interface, the connection management module performing the connection test on the data source interface,
when the connection test fails, the client system performing the connection test again according to the configuration command through the connection management module,
when the connection test is passed, the client system notifying the cloud server that the connection is successful through the first connector module.

### Claim 6 (depends on 5)

The data gateway system according to claim 5, wherein the first gateway module further comprises:
a configuration management module, wherein when the connection test is passed, the client system stores the configuration command in the configuration management module.

### Claim 7 (depends on 5)

The data gateway system according to claim 5, wherein when the connection test is passed, the second command processing module of the cloud server configures a metadata collection command, and sends the metadata collection command to the client system through the second connector module, so that the first command processing module of the client system obtains metadata from the data source interface according to the metadata collection command,
the client system sends the metadata to the cloud server through the first connector module, so that the cloud server determines that a connection configuration is completed according to the metadata.

### Claim 8 (depends on 5)

The data gateway system according to claim 5, wherein the client system further comprises:
a data source;
a data processing module, coupled to the first gateway module and the data source, and comprising:
a data detector; and
a third connector module,
the data detector of the data processing module accesses the data source through the third connector module according to a data-fetching command sent by the cloud server to obtain a target data.

### Claim 9 (depends on 8)

The data gateway system according to claim 8, wherein the data processing module further comprises:
a data stream control module; and
a data encryption module,
wherein the second gateway module of the cloud server further comprises:
a data decryption module, wherein the data processing module encrypts the target data through the data encryption module, and sends the encrypted target data to the cloud server through the data stream control module and the third connector module, so that the cloud server decrypts the encrypted target data through the data decryption module to obtain the target data.

### Claim 10 (depends on 9)

The data gateway system according to claim 9, wherein the client system performs at least one of data format conversion, data filtering, and data desensitization on the target data through the data processing module.

### Claim 11

A data intercommunication method, comprising:
performing a command listening for a cloud server through a listener module of a client system;
when the listener module obtains connection configuration information, sending a connection request command to the cloud server through a first connector module by the client system;
receiving the connection request command through a second connector module of the cloud server;
determining, by an authentication management module of the cloud server, whether the client system has a permission according to the connection request command, so as to issue a gateway code;
sending the gateway code to the first connector module of the client system through the second connector module of the cloud server; and
establishing a connection between the client system and the cloud server through the client system based on the gateway code.

### Claim 12 (depends on 11)

The data intercommunication method according to claim 11, wherein the client system comprises a first gateway module, and the first gateway module comprises the first connector module, the listener module, and a first command processing module,
wherein the cloud server comprises a second gateway module, and the second gateway module comprises the second connector module, the authentication management module, and a second command processing module,
wherein the listener module of the client system listens to the second command processing module of the cloud server to determine whether the second command processing module generates the connection configuration information.

### Claim 13 (depends on 12)

The data intercommunication method according to claim 12, further comprising:
when the authentication management module issues the gateway code, storing the gateway code through a configuration management module of the second gateway module of the cloud server.

### Claim 14 (depends on 13)

The data intercommunication method according to claim 13, further comprising:
when the second command processing module of the cloud server obtains gateway information, obtaining a configuration command from the configuration management module according to the gateway information through the second command processing module;
sending the configuration command to the first gateway module of the client system through the second connector module; and
performing a connection test through a connection management module in the first gateway module of the client system according to the configuration command.

### Claim 15 (depends on 14)

The data intercommunication method according to claim 14, wherein the step of performing the connection test through the connection management module in the first gateway module of the client system according to the configuration command comprises:
performing the connection test on a data source interface through the connection management module;
when the connection test fails, performing the connection test again through the connection management module according to the configuration command; and
when the connection test is passed, notifying the cloud server that a connection is successful through the first connector module.

### Claim 16 (depends on 15)

The data intercommunication method according to claim 15, wherein when the connection test is passed, the client system stores the configuration command in the configuration management module in the first gateway module.

### Claim 17 (depends on 15)

The data intercommunication method according to claim 15, further comprising:
when the connection test is passed, configuring a metadata collection command through the second command processing module of the cloud server;
sending the metadata collection command to the client system through the second connector module;
obtaining metadata from the data source interface according to the metadata collection command through the first command processing module of the client system;
sending the metadata to the cloud server through the first connector module of the client system; and
determining that a connection configuration is completed through the cloud server according to the metadata.

### Claim 18 (depends on 15)

The data intercommunication method according to claim 15, further comprising:
a data detector of a data processing module of the client system accesses a data source of the client system through a third connector module of the data processing module according to a data-fetching command sent by the cloud server so as to obtain a target data.

### Claim 19 (depends on 18)

The data intercommunication method according to claim 18, further comprising:
encrypting the target data through a data encryption module of the data processing module;
sending the encrypted target data to the cloud server through a data stream control module of the data processing module and the third connector module; and
decrypting the encrypted target data through a data decryption module of the cloud server so as to obtain the target data.

### Claim 20 (depends on 19)

The data intercommunication method according to claim 19, wherein the step before encrypting the target data further comprises:
performing at least one of data format conversion, data filtering, and data desensitization on the target data through a data conversion module of the data processing module.