System and method for establishing secured connection between home network devices

• US 20060112417A1
• Filed: 11/23/2005
• Published: 05/25/2006
• Est. Priority Date: 11/23/2004
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Lee, Joo-yeol, Lee, Jae-shin, Son, Kyoung-ho, Jung, Dong-shin, Yook, Hyun-gyoo, Jeong, Tae-jin
• Granted Patent: US 8,051,461 B2
• Time in Patent Office: Days
• US Class Current: 726/3
• CPC Class Codes: H04L 12/2803 Home automation networks
• CPC Class Codes: H04L 12/283 Processing of data at an internetworking point of a home automation network
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A system and method for establishing a secured connection between home network devices are provided. Particularly, a system and method for establishing a secured connection between a home network including a plurality of non-secured Universal Plug and Play (UPnP) devices and a secured external UPnP device by creating virtual UPnP devices for the respective corresponding non-secured UPnP devices are provided. The system for establishing a secured connection between home network devices includes a virtual UPnP device creation unit which creates a secured virtual UPnP device for a non-secured UPnP device, an information storage unit which stores correspondence information regarding the non-secured UPnP device and the virtual UPnP device, and a secured communication unit which securely communicates with a secured UPnP device with reference to the correspondence information.

Claims

1. A system for establishing a secured connection between home network devices, the system comprising:

a virtual Universal Plug and Play (UPnP) device creation unit which creates a secured virtual UPnP device for a non-secured UPnP device;

an information storage unit which stores correspondence information regarding the non-secured UPnP device and the virtual UPnP device; and

a secured communication unit which securely communicates with a secured UPnP device with reference to the correspondence information.

2. The system of claim 1, wherein the virtual UPnP device creation unit comprises:

a virtual control point creator which creates a secured virtual control point for a non-secured control point; and

a virtual controlled device creator which creates a secured virtual controlled device for a non-secured controlled device.

3. The system of claim 1, wherein the correspondence information comprises unique identifier (ID) information, hardware address information, Internet Protocol (IP) address information, service type information, and a secured external UPnP device list.

4. The system of claim 3, wherein the unique ID information specifies an ID which is generated using the hardware address information and then allotted to the secured virtual UPnP device.

5. The system of claim 1 further comprising a connection management unit which determines whether to allow an external UPnP device to communicate with the secured virtual UPnP device according to whether the external UPnP device is secured or non-secured.

6. A home network system comprising:

a non-secured Universal Plug and Play (UPnP) device in a home network;

a security gateway which creates a secured virtual UPnP device for the non-secured UPnP device; and

a secured external UPnP device which securely communicates with the non-secured UPnP device via the secured virtual UPnP device.

7. The home network system of claim 6, wherein the security gateway creates at least one secured virtual UPnP device for at least one non-secured UPnP device.

8. A method of establishing a secured connection between home network devices, the method comprising:

establishing a non-secured network to a non-secured controlled device;

creating a secured virtual controlled device for the non-secured controlled device;

establishing a secured network to a secured external control point via the secured virtual controlled device;

receiving a control command message from the secured external control point through the secured network; and

transmitting the control command message which is received to the non-secured controlled device through the non-secured network.

9. The method of claim 8, wherein the establishing of the non-secured network comprises:

receiving a description message for a discovery message previously transmitted to the non-secured controlled device from the non-secured controlled device; and

establishing a non-secured network with reference to the description message which is received.

10. The method of claim 8, where the establishing of the secured network comprises:

generating and storing correspondence information regarding the non-secured controlled device and the secured virtual controlled device;

transmitting a description message for a discovery message previously received using the correspondence information to the secured external control point; and

establishing a secured network to the secured external control point with reference to the discovery message.

11. A method of establishing a secured connection between home network devices comprising:

establishing a non-secured network to a non-secured control point;

creating a secured virtual control point for the non-secured control point;

establishing a secured network between to a secured external controlled device via the secured virtual control point;

receiving a control command message from the non-secured control point through the non-secured network; and

transmitting the control command message to the secured external controlled device through the secured network.

12. The method of claim 11, wherein the establishing of the non-secured network comprises:

transmitting a description message for a discovery message previously received to the non-secured control point to the non-secured control point; and

establishing a non-secured network with reference to the discovery message.

13. The method of claim 11, where the establishing of the secured network comprises:

generating and storing correspondence information regarding the non-secured control point and the secured virtual control point;

receiving a description message for a discovery message previously transmitted to the secured external controlled device from the secured external controlled device with reference to the stored correspondence information; and

establishing a secured network to the secured external controlled device with reference to the received description message.