UPnP VPN gateway configuration service

• US 20060168656A1
• Filed: 01/27/2005
• Published: 07/27/2006
• Est. Priority Date: 01/27/2005
• Status: Active Grant

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Corporation
• Inventors: Stirbu, Vlad
• Granted Patent: US 8,261,341 B2
• Time in Patent Office: Days
• US Class Current: 726/15
• CPC Class Codes: H04L 12/2834 Switching of information between an external network and a home network access arrangements H04L12/2856
• CPC Class Codes: H04L 2012/2849 Audio/video appliances
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic

Abstract

A system and method for creating a virtual private network through a VPN gateway configuration service. The VPN gateway configuration service inherits UPnP zero-configuration characteristics and also provides an interface for configuring the VPN gateway that enables the configuration of any VPN gateway device, regardless of manufacturer. Additionally, the device control protocol defined by the VPN gateway configuration service can provide client provisioning, as well as enabling the configuration of gateway-to-gateway virtual private networks.

Claims

1. A method of creating a virtual private network, comprising the steps of:

providing a first local area network including a first Internet gateway device;

providing an electronic device including a virtual private network configuration service; and

configuring the electronic device using virtual private network configuration service in order to permit communication between the electronic device and other devices within the first local area network through the first Internet gateway device.

2. The method of claim 1, further comprising the step of creating a first virtual private network tunnel between the electronic device and the first Internet gateway device when the electronic device is outside of the first local area network, the first virtual private network tunnel allowing the electronic device to communicate directly with other devices within the first local area network while the electronic device is outside of the first local area network.

3. The method of claim 1, wherein the step of configuring the electronic device includes the adjustment of required security protocols within the electronic device.

4. The method of claim 1, wherein the step of configuring the electronic device includes the adjustment of authentication and privacy parameters for security protocols within the electronic device.

5. The method of claim 1, wherein the step of configuring the electronic device includes the adjustment of session timeouts for the electronic device.

6. The method of claim 1, wherein the step of configuring the electronic device includes the obtaining of at least one IP address of the first Internet gateway device.

7. The method of claim 1, wherein the electronic device comprises a portable telephone.

8. The method of claim 1, further comprising the steps of:

connecting the electronic device to a second Internet gateway device for a second local area network; and

transmitting information regarding the first Internet gateway device from the electronic device to the second Internet gateway device, the information allowing a second virtual private network tunnel to be created between the first Internet gateway device and the second Internet gateway device,

wherein the second virtual private network tunnel enables communication among the electronic device, devices within the first local area network, and devices within the second local area network.

9. A computer program product for creating a virtual private network, comprising:

computer code for providing a first local area network including a first Internet gateway device;

computer code for providing an electronic device including a virtual private network configuration service; and

computer code for configuring the electronic device using virtual private network configuration service in order to permit communication between the electronic device and devices within the first local area network through the first Internet gateway device while the electronic device is outside of the first local area network.

10. The computer program product of claim 9, further comprising computer code for creating a first virtual private network tunnel between the electronic device and the first Internet gateway device when the electronic device is outside of the first local area network, the first virtual private network tunnel allowing the electronic device to communicate directly with other devices within the first local area network.

11. The computer program product of claim 9, wherein the computer code for configuring the electronic device includes computer code for obtaining of at least one IP address of the first Internet gateway device.

12. The computer program product of claim 9, further comprising:

computer code for connecting the electronic device to a second Internet gateway device for a second local area network; and

computer code for transmitting information regarding the first Internet gateway device from the electronic device to the second Internet gateway device, the information allowing a second virtual private network tunnel to be created between the first Internet gateway device and the second Internet gateway device,

wherein the second virtual private network tunnel enables communication among the electronic device, devices within the first local area network, and devices within the second local area network.

13. An electronic device, comprising:

a processor; and

a memory unit operatively connected to the processor, the memory unit including computer code for configuring the electronic device using a virtual private network configuration service so as to be capable of communication with a first Internet gateway device.

14. The electronic device of claim 13, wherein the memory unit further comprises computer code for creating a first virtual private network tunnel between the electronic device and the first Internet gateway device when the electronic device is outside of a first local area network associated with the first Internet gateway device, the first virtual private network tunnel allowing the electronic device to communicate directly with other devices within the first local area network while the electronic device is outside of the first local area network.

15. The electronic device of claim 13, wherein the memory unit further comprises:

computer code for connecting the electronic device to a second Internet gateway device for a second local area network; and

computer code for transmitting information regarding the first Internet gateway device from the electronic device to the second Internet gateway device, the information allowing a second virtual private network tunnel to be created between the first Internet gateway device and the second Internet gateway device,

wherein the second virtual private network tunnel enables communication among the electronic device, devices within the first local area network, and devices within the second local area network.

16. A system for creating a virtual private network, comprising:

a first local area network including a first Internet gateway device; and

an electronic device, comprising;

a processor, and

a memory unit operatively connected to the processor, the memory unit including computer code for configuring the electronic device using a virtual private network configuration service so as to be capable of communication with the first Internet gateway device.

17. The system of claim 16, wherein the memory unit further includes computer code for creating a first virtual private network tunnel between the electronic device and the first Internet gateway device when the electronic device is outside of the first local area network, the first virtual private network tunnel allowing the electronic device to communicate directly with other devices within the first local area network while the electronic device is outside of the first local area network.

18. The system of claim 16, wherein the memory unit further includes;

computer code for connecting the electronic device to a second Internet gateway device for a second local area network; and

computer code for transmitting information regarding the first Internet gateway device from the electronic device to the second Internet gateway device, the information allowing a second virtual private network tunnel to be created between the first Internet gateway device and the second Internet gateway device,

wherein the second virtual private network tunnel enables communication among the electronic device, devices within the first local area network, and devices within the second local area network.

19. A system for creating a virtual private network, comprising:

a first Internet gateway device positioned within a first network; and

a second Internet gateway device positioned within a second network,

wherein each of the first Internet gateway device and the second Internet gateway device includes computer code for configuring the respective Internet Gateway device using a virtual private network configuration service so as to be capable of creating a virtual private network tunnel between the first Internet gateway device and the second Internet gateway device, the virtual private network tunnel enabling communication between devices within the first network and devices within the second network.

20. A system for creating virtual private network, comprising:

a mobile electronic device; and

an Internet gateway device control point built into the mobile electronic device, the Internet gateway device control point including virtual private network configuration service,

wherein the virtual private network configuration service enables the creation of a virtual private network tunnel with a remote Internet gateway device, the virtual private network tunnel enabling communication between the mobile electronic device and devices within the same network as the remote Internet gateway device.

21. An Internet gateway device, comprising:

a virtual private network gateway; and

a virtual private network configuration service,

wherein the virtual private network configuration service enables the creation of a virtual private network tunnel between the virtual private network gateway and a remote network, and wherein the virtual private network tunnel enables communication between the Internet gateway device and devices within the remote network.