Methods, devices and modules for secure remote access to home networks
First Claim
Patent Images
1. A method, comprising:
- retrieving a public encryption key of a server device by the terminal; and
registering the terminal at the server device with a public key of the terminal.
1 Assignment
0 Petitions
Accused Products
Abstract
A method, a terminal, and a server are provided to enable to remotely and securely grant, by an owner of a server, access to the server for a third party. A mechanism is defined to establish a trust relationship between a mobile device and a home gateway while in a home network and later to use that trust relationship when granting access to the home network (via remote access through the home gateway) to other devices.
45 Citations
25 Claims
-
1. A method, comprising:
-
retrieving a public encryption key of a server device by the terminal; and
registering the terminal at the server device with a public key of the terminal. - View Dependent Claims (2)
-
-
3. A method, comprising:
-
requesting a terminal registered at a server device to authorize access to a requesting terminal;
when access is authorized, creating an access certificate by the registered terminal based on a public key of the requesting terminal and a private key of the registered terminal; and
informing the requesting terminal of the created access certificate to remotely authorize the requesting terminal access to the server device.
-
-
4. A method, comprising:
-
presenting, by a terminal not registered at a server device, an access certificate to the server device;
checking, at the server device, that the access certificate is signed by a terminal registered at the server device; and
when checking is successful, granting access to the server for the terminal not registered at the server.
-
-
5. A method, comprising:
-
requesting a terminal administering access to a server device to authorize access to a requesting terminal, when access is authorized, creating an access right for the requesting terminal at the administrating terminal; and
informing the requesting terminal of the created access right to remotely authorize the requesting terminal access to the server device. - View Dependent Claims (6)
-
-
7. A method, comprising:
-
presenting, by a terminal not administering a server device, an access right to the server device, checking, at the server device, that the access right is signed by a terminal administering the server device; and
when checking is successful, granting access to the server for the terminal not administering the server device.
-
-
8. A method, comprising:
-
retrieving a public encryption key of a server device by a terminal; and
registering the terminal at the server device with a private encryption key and a corresponding public encryption key of the terminal, wherein only the public encryption key is delivered to other terminals. - View Dependent Claims (9)
-
- 10. A terminal configured to retrieve a public encryption key of a server device, and configured to be registered at the server device with a public key.
-
12. A terminal configured to be registered at a server, configured to receive a request to authorize access to a requesting terminal, and configured to create an access certificate based on a public key of the requesting terminal and a private key of the registered terminal when access is authorized, and configured to inform the requesting terminal of the created access certificate to remotely authorize the requesting terminal access to the server.
-
13. A terminal configured not to be registered at a server, and configured to present an access certificate to the server, wherein the access certificate is signed by a terminal registered at the server, and access to the server is granted for the terminal not registered at the server.
- 14. A terminal configured to administer access to a server, configured to receive a request to authorize access to a requesting terminal, configured to create an access right for the requesting terminal when access is authorized, and configured to inform the requesting terminal of the created access right to remotely authorize the requesting terminal access to the server.
- 16. A terminal configured to retrieve a public encryption key of a server device, wherein the terminal is registered at the server device with a private encryption key and a corresponding public encryption key of the terminal, and wherein only the public encryption key is delivered to other terminals.
-
18. A server device configured to receive, from a terminal not registered at the server device, an access certificate, and configured to check that the access certificate is signed by a terminal registered at the server device, wherein access to the server device is granted for the terminal not registered at the server device in case the check is successful.
-
19. A server device configured to receive, from a terminal not administering the server device, an access right, and configured to check that the access right is signed by a terminal administering the server device, wherein access to the server device is granted for the terminal not administering the server in case the check is successful.
-
20. A terminal, comprising:
-
retrieving means for retrieving a public encryption key of a server device; and
registering means for registering the terminal at the server device with a public key.
-
-
21. A terminal, comprising:
- .
registering means for registering the terminal at a server;
receiving means for receiving a request to authorize access to a requesting terminal; and
creating means for creating an access certificate based on a public key of the requesting terminal and a private key of the registered terminal when access is authorized, wherein the requesting terminal is informed of the created access certificate to remotely authorize the requesting terminal access to the server.
- .
-
22. A terminal not registered at a server, comprising:
presenting means for presenting an access certificate to the server, the access certificate is signed by a terminal registered at the server, for granting access to the server for the terminal not registered at the server.
-
23. A terminal, comprising:
-
administering means for administering access to a server;
receiving means for receiving a request to authorize access to a requesting terminal;
creating means for creating an access right for the requesting terminal when access is authorized; and
informing means for informing the requesting terminal of the created access right to remotely authorize the requesting terminal access to the server.
-
-
24. A server, comprising:
-
receiving means for receiving, from a terminal not registered at a server, an access certificate; and
checking means for checking whether the access certificate is signed by a terminal registered at the server, wherein access to the server is granted for the terminal not registered at the server.
-
-
25. A server, comprising:
-
receiving means for receiving, from a terminal not administering the server, an access right; and
checking means for checking whether the access right is signed by a terminal administering the server, wherein access to the server is granted for the terminal not administering the server.
-
Specification