Virtual private network (VPN) for servicing home gateway system through external disk management

• US 20010034758A1
• Filed: 02/21/2001
• Published: 10/25/2001
• Est. Priority Date: 02/24/2000
• Status: Abandoned Application

• Current Assignee: Lextron Systems, Inc.
• Original Assignee: Lextron Systems, Inc.
• Inventors: Kikinis, Dan
• Application Number:
  US09/791,511
• Publication Number:
  US 20010034758A1
• Time in Patent Office: Days
• US Class Current: 709/203
• CPC Class Codes: H04L 12/2803 Home automation networks
• CPC Class Codes: H04L 12/2836 Protocol conversion between an external network and a home network controlling appliance services of a home automation network from a device located outside the home and the home network H04L12/2818; protocol conversion H04L69/08; adaptation of digital video signals for transport over a specific home network H04N7/24
• CPC Class Codes: H04L 12/2856 Access arrangements, e.g. Internet access asynchronous transfer mode networks H04L12/5601; broadband local area networks H04L12/2801; optical access or distribution networks H04Q11/0067; access to open networks H04L12/5691; digital subscriber line end-user equipment and bit-level processing of data on a PSTN-based network H04M11/00; home network gateways H04L12/2834; wireless access networks H04W
• CPC Class Codes: H04L 12/2898 Subscriber equipments DSL modems H04M11/062; cable modems H04L12/2801
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04N 21/25875 involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/4181 for conditional access
• CPC Class Codes: H04N 21/4182 for identification purposes, e.g. storing user identification data, preferences, personal settings or data restricting access to computer systems by authenticating users using a predetermined code in combination with an additional device, e.g. dongle or smart card G06F21/123
• CPC Class Codes: H04N 21/43615 Interfacing a Home Network, e.g. for connecting the client to a plurality of peripherals home Audio Video Interoperability [HAVI] data switching networks H04L12/2805
• CPC Class Codes: H04N 21/43622 Interfacing an external recording device

Abstract

A local area network is provided. The local area network comprises, at least one Internet-capable appliance connected to the local area network for controlling integration of the local area network to a wide area network, a least one additional appliance connected to the local area network, the appliance capable of communication with data sources operating on the wide area network, a control device for recording and controlling aspects of connectivity and configuration of appliances connected to the local area network and a mass storage device accessible to the control device and to entities operating on the wide area network. A primary service provider maintains control over the controlling device for the purpose of enabling secondary providers of services to access the mass storage device and selected portions of the control device in order to effect and manage services as dictated and permitted by the primary service provider.

Claims

1. Any and all inventions disclosed in this document.

2. A local area network comprising:

at least one Internet-capable appliance connected to the local area network for controlling integration of the local area network to a wide area network;

a least one additional appliance connected to the local area network, the appliance capable of communication with data sources operating on the wide area network;

a control device for recording and controlling aspects of connectivity and configuration of appliances connected to the local area network; and

a mass storage device accessible to the control device and to entities operating on the wide area network;

characterized in that a primary service provider maintains some control over the controlling device for the purpose of enabling secondary providers of services including deliverable commodities to access the mass storage device and selected portions of the control device in order to effect and manage services in a fashion dictated and permitted by the primary service provider.

3. The local area network of

claim 2

, wherein the wide area network is the Internet network.

4. The local area network of

claim 2

, wherein the control device controls appliance configurations and activation on the local area network and controls service configurations and activation for services obtained from the wide area network.

5. The local area network of

claim 2

, wherein the mass storage device is partitioned into a plurality of virtual data storage areas.

6. The local area network of

claim 5

, wherein each virtual data storage area is dedicated to a specific one or ones of an entity providing a service for services accessible from the local area network.

7. The local area network of

claim 6

, wherein network access granted to individual ones of virtual data storage areas are conducted through separate virtual private networks established and associated with each virtual disk.

8. The local area network of

claim 2

, wherein the control device includes a removable memory card, the card containing user authentication data and device configuration data as well as service identification and configuration data.

9. A server software for managing remote network access for service entities to a control device connected to a mass storage device, the control device and mass storage device connected to a local area network comprising:

a portion thereof for partitioning the mass storage device into a plurality of virtual data storage areas;

a portion thereof for communicating to the control device and for communicating to the service entities;

a portion thereof for establishing separate virtual networks, the networks assigned to individual ones of the virtual data storage areas; and

a portion thereof for managing authentication and security over the virtual networks;

characterized in that a primary service provider maintaining the server software grants permission for selected service entities to setup and configure services on the control device including establishing the virtual networks between the individual service entities and the control device wherein the individual entities are assigned an individual or shared portion of a data storage area partitioned from the mass storage device and wherein the individual entities are granted limited control over the assigned virtual storage areas.

10. The server software of

claim 9

, wherein the control device and a mass storage device are integrated as one unit.

11. The server software of

claim 9

, wherein the local area network is a home-based network.

12. The server software of

claim 9

, wherein the local area network is a business-based network.

13. The server software of

claim 9

, wherein the local area network is integrated to a wide area network.

14. The server software of

claim 9

, wherein the wide area network is the Internet network.

15. The server software of

claim 13

, wherein the control device controls appliance configurations and activation on the local area network and controls service configurations and activation for services obtained from the wide area network.

16. The server software of

claim 9

, wherein each virtual data storage area is dedicated to a specific one or ones of the service entities providing a service for services accessible from the local area network.

17. The server software of

claim 9

, wherein the control device includes a removable memory card, the card containing user authentication data and device configuration data as well as service identification and configuration data.

18. A network-based system for facilitating secure private networks between service entities operating on a wide area network, the service entities serving a client operating on a local area network comprising:

a system server connected to the wide area network for serving as a network management facility accessible to the service entities;

a server software hosted on the system server for establishing the secure private networks;

a control device connected to the local area network for integrating devices on the network and for establishing an interface to the system server;

a mass storage device connected to the control device on the local area network for storing data; and

a user authentication key insert able to the control device for authenticating a user to the local area network and for identifying, configuring, and activating services made available by the service entities;

characterized in that the server software communicating with the control device partitions the mass storage device into a plurality of data storage areas, the data storage areas dedicated individually, in shared fashion, or both to the service entities such that the service entities have limited control over assigned storage areas and secure access to the storage areas through virtual private networks.

19. The network-based system of

claim 18

, wherein the system server is controlled by a primary service provider and the service entities are secondary service providers.

20. The network-based system of

claim 18

, wherein the network includes both of the wide area network and the local area network and wherein the wide area network is the Internet network.

21. The network-based system of

claim 18

, wherein the user authentication key is a removable memory card, the card containing user authentication data and device configuration data as well as service identification and configuration data.

22. The network-based system of

claim 21

, wherein the user authentication key is modular and may be used at a new location to automatically configure a new local area network to establish services.