# US 9,148,404 B2 · System for accessing data of cloud database using transparent technology

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 9,148,404 B2
- Document ID: US9148404B2
- Status: Granted
- Kind: B2
- Application number: 14/019,547
- Filed: 2013-09-06
- Published: 2015-03-12
- Granted: 2015-09-29
- Earliest claimed: 2013-09-06
- Assignees: Syscom Computer Engineering Co.
- Applicants: Syscom Computer Engineering Co.
- Inventors: Ching-Ju Chuang; Pei-Fen Hu; Shu-Yuan Hu; Kun-Ting Chiu
- Web page: https://patentgrep.com/patent/US9148404B2

## CPC

- H04L 63/0218: {Distributed architectures, e.g. distributed firewalls}
- H04L 63/029: {Firewall traversal, e.g. tunnelling or, creating pinholes}
- H04L 67/02: based on web technology, e.g. hypertext transfer protocol [HTTP]
- H04L 67/1001: for accessing one among a plurality of replicated servers
- H04L 12/4641: {Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272)}
- H04L 63/02: {for separating internal from external traffic, e.g. firewalls}
- H04L 63/0272: {Virtual private networks}
- H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

Disclosed is a system for accessing data of a cloud database via transparent technology, and the system includes at least one channel server and at least one cloud database end. When a connection notice is outputted from an application end, the user channel unit detects a first server address and a first database address in a HTTP data format, and connects to a corresponding channel server via the HTTP tunnel to send a database request, so that the channel server can convert the first database address in the HTTP data format into a TCP/IP data format and then connect to a corresponding database end. Therefore, the application end can access data from the database behind the firewall via the Internet without modifying any program code.

## Claims

### Claim 1

A system for accessing data of a cloud database via transparent technology, applied in a client-server architecture and comprising an application end and at least one cloud database end, and provided for the application end to access data from the database behind a firewall via the Internet without requiring any modification of a program code, characterized in that the application end pre-executes a first database configuration file, and the system for accessing data of a cloud database via transparent technology comprises a user channel unit and at least one channel server, and the user channel unit pre-executes a second database configuration file to obtain an address list and connect to the application end, and the address list contains at least one first server address and at least one first database address; and when the user channel unit receives a connection notice outputted from the application end, the address list is inquired to obtain the first server address and the first database address in the HTTP data format according to the connection notice, the user channel unit connects to the channel server corresponding to the first server address and transmits a database request containing the first database address to the channel server using a HTTP tunnel and tunneling through the firewall, so that the channel server can analyze the database request and convert the first database address in the HTTP data format to a TCP/IP data format, and then connect to the corresponding database end according to the first database address in the TCP/IP data format and complete a connection between the application end and the database end by tunneling through the firewall.

### Claim 2 (depends on 1)

The system for accessing data of a cloud database via transparent technology according to claim 1, wherein the application end supports an open database connectivity driver.

### Claim 3 (depends on 2)

The system for accessing data of a cloud database via transparent technology according to claim 2, wherein the application end pre-executes the first database configuration file to designate a port for connecting the user channel unit, so that when the user channel unit receives the connection notice, the user channel unit is connected to the application end via a network through the port.

### Claim 4 (depends on 3)

The system for accessing data of a cloud database via transparent technology according to claim 3, further comprising a connection management server, and a plurality of database ends being in use, and the connection management server connecting to the user channel unit through the firewall and the HTTP tunnel; and the user channel unit outputting an acknowledge instruction when the user channel unit receives the connection notice, so that the connection management server detects the using status of each database end to feed back a second server address and a second database address in a HTTP data format to the user channel unit, and the database request and the second database address are outputted to the channel server corresponding to the second server address through the HTTP Tunnel, and the channel server analyzes the database request and converts the second database address in the HTTP data format into a TCP/IP data format, and then completes a connection between the application end and the database end according to the database end corresponding to the second database address.

### Claim 5 (depends on 4)

The system for accessing data of a cloud database via transparent technology according to claim 4, wherein the connection management server pre-executes a third database configuration file to obtain the address list and record the first server address and the first database address, and when the connection management server detects the using status of each database end and knows the database end that can provide the best service, the corresponding first server address and first database address are captured from the address list to respectively produce and feed back the second server address and the second database address to the user channel unit.

### Claim 6 (depends on 5)

The system for accessing data of a cloud database via transparent technology according to claim 5, wherein the user channel unit and the channel server creates the HTTP tunnel by using a Socket Over HTTP Tunneling (SOHT) technology.

### Claim 7 (depends on 1)

The system for accessing data of a cloud database via transparent technology according to claim 1, wherein when the database end is not behind the firewall, the application directly connects to the database end via the original TCP/IP.