Communication system using home gateway and access server for preventing attacks to home network

• US 20050160477A1
• Filed: 02/28/2005
• Published: 07/21/2005
• Est. Priority Date: 08/31/2000
• Status: Abandoned Application

• Current Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Original Assignee: Kabushiki Kaisha Toshiba (Toshiba Corporation)
• Inventors: Saito, Takeshi
• Application Number:
  US11/066,386
• Publication Number:
  US 20050160477A1
• Time in Patent Office: Days
• US Class Current: 726/12
• CPC Class Codes: H04L 12/2805 Home Audio Video Interoperability [HAVI] networks
• CPC Class Codes: H04L 12/2807 Exchanging configuration information on appliance services in a home automation network arrangements for maintenance or administration involving network analysis for automatically determining the actual topology of a network H04L41/12; hardware or software tools for network management using graphical user interfaces H04L41/22; address allocation H04L61/50
• CPC Class Codes: H04L 12/2818 from a device located outside both the home and the home network access arrangements H04L12/2856; for remote control or remote monitoring of applications H04L67/025; arrangements for transmitting signals characterised by the use of a wireless eletrical link G08C17/00; telephonic communication systems adapted for combination with remote control systems H04M11/007
• CPC Class Codes: H04L 12/282 based on user interaction within the home receiver circuitry for displaying additional information being controlled by a remote control apparatus H04N21/42204
• CPC Class Codes: H04L 12/2836 Protocol conversion between an external network and a home network controlling appliance services of a home automation network from a device located outside the home and the home network H04L12/2818; protocol conversion H04L69/08; adaptation of digital video signals for transport over a specific home network H04N7/24
• CPC Class Codes: H04L 2012/2841 Wireless
• CPC Class Codes: H04L 2012/2845 Telephone line
• CPC Class Codes: H04L 2012/2849 Audio/video appliances
• CPC Class Codes: H04L 41/18 Delegation of network management function, e.g. customer network management [CNM]
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/1441 Countermeasures against malicious traffic countermeasures against attacks on cryptographic mechanisms H04L9/002

Abstract

In a communication system using a home gateway device and an access server device, the security function for the home network side is provided by the access server device on the service provider side, so that it becomes possible to prevent attacks from the malicious users with respect to the home network, without implementing excessive security functions in the home gateway device on the home network side and without requiring professional skills for setting and management to the user of the home gateway device.

Claims

1-14. -14. (canceled)

15. A home gateway device to be provided at a home network, comprising:

an interface unit configured to relay communications between the home network and a prescribed access network;

a registration unit configured to register an access server device in charge of access control for the home gateway device, with which communications are possible through the prescribed access network; and

a control unit configured to handle accesses from outside the home network by permitting only those accesses which are made from the access server device which is registered by the registration unit in advance.

16. The home gateway device of claim 15, further comprising a processing unit configured to transfer a prescribed message received from the access server device when an access made from the access server device is permitted, to a destination communication device on the home network after applying a protocol conversion according to a protocol of the home network.

17. The home gateway device of claim 16, wherein the interface unit relays AV data of a prescribed format received from the destination communication device after transferring the prescribed message to the destination communication device, to the access server device;

and

the processing unit applies a prescribed conversion processing to the AV data to be relayed by the interface unit.

18. The home gateway device of claim 15, further comprising a unit configured to return a home page containing contents regarding devices connected to the home network in response to a prescribed message received from the access server device when an access made from the access server device is permitted.

19. The home gateway device of claim 15, further comprising:

an automatic configuration recognition unit configured to carry out an automatic configuration recognition with respect to the home network, transmitting an inquiry message regarding an unknown device or service when the unknown device or service that is not registered in advance is detected on the home network as a result of the automatic configuration recognition, and receiving a response message containing data regarding the unknown device or service inquired by the inquiry message from the access server device.

20. The home gateway device of claim 15, further comprising a unit configured to apply encryption processing or digital signature processing to communications with the access server device.