Apparatus and method for offering connections between network devices located in different home networks

• US 7,796,616 B2
• Filed: 05/14/2003
• Issued: 09/14/2010
• Est. Priority Date: 05/14/2002
• Status: Expired due to Fees

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Kim, Jun-hyeong
• Primary Examiner(s): Shah; Chirag G
• Assistant Examiner(s): Rivas; Salvador E
• Application Number:
  US10/437,013
• Publication Number:
  US 20030214955A1
• Time in Patent Office: 2,680 Days
• Field of Search: 370/230, 370/230.1, 370/245
• US Class Current: 370/401
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 2212/00 Encapsulation of packets
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A network connection apparatus for communicating between a network device located in a first private network and a second private network located outside the first private network. The apparatus includes an address acquisition module capable of acquiring a public IP address of a network management device from a DNS based on a domain name of the network management device of the second private network is provided. A connection management module is provided that is capable of forming a P2P connection to the network device if there is a request for a connection to the second private network from the network device. The connection management module is further capable of forming a virtual private network tunnel with the second private network based on the public IP address transferred from the address acquisition module. The connection management module is further capable of transferring to the network device a private IP address used in the second private network.

Claims

1. A network connection apparatus for communicating between a network device located in a first private network and a second private network located outside the first private network, comprising:

an address acquisition module residing in a memory acquires a public Internet protocol (IP) address of a network management device from a domain name server (DNS) based on a domain name of the network management device of the second private network; and

a connection management module residing in a memory forms a peer-to-peer (P2P) connection to the network device if there is a request for a connection to the second private network from the network device,

wherein the connection management module residing in a memory forms a virtual private network tunnel with the second private network based on the public IP address transferred from the address acquisition module, and

wherein the connection management module residing in the memory transfers and allocates to the network device in the first private network a private IP address used in the second private network.

2. The network connection apparatus according to claim 1, wherein the connection management module residing in the memory further comprises:

a P2P connection part that provides a P2P connection with the network device; and

a virtual private network (VPN) connection part that forms a virtual private network tunnel with the second private network.

3. A network connection apparatus used for communicating between a private network and a network device located outside the private network, comprising:

an authentication module residing in a memory that authenticates the network device requesting a connection; and

a connection management module residing in a memory that forms a virtual private network tunnel with the network device if a connection authentication signal is received from the authentication module and further transfers and allocates a private IP address used inside the private network.

4. The network connection apparatus according to claim 3, further comprising a registration request module residing in a memory that requests a registration of a unique domain name of a home gateway through a communication network and a public IP address allocated from an internet service provider.

5. The network connection apparatus according to claim 3, further comprising an encoding module residing in a memory that encodes data transferred outside the private network from the network device or decoding the encoded data transferred to the network device from outside the private network.

6. A network connection method for communicating between a network device located inside a first private network and a second private network located outside the first private network, the method comprising:

(a) receiving a requesting for a connection to the second private network from the network device;

(b) forming a P2P connection to the network device;

(c) forming a virtual private network tunnel between a home gateway to which the network device belongs and the second private network;

(d) notifying the network device of the forming of the virtual private network tunnel;

(e) performing an authentication procedure at the second private network regarding the network device and the virtual private network tunnel; and

(f) transferring and allocating an allocated private IP used in the second network address to the network device in the first private network.

7. The network connection method according to claim 6, wherein the step (c) includes a step of authenticating the connection as to the network device, and the step (d) is carried out only if the connection is authenticated.

8. A network connection method for communicating between a private network and a network device located outside the private network, the method comprising:

(a) receiving a request for a connection to the private network from the network device; and

(b) forming a virtual private network tunnel with the network device and transferring allocating a private IP address used inside the private network to the network device.

9. The network connection method according to claim 8, further comprising, prior to step (a), requesting a domain name server through a communication network to register a unique domain name and a public IP address allocated from an internet service provider.

10. The network connection method according to claim 8, wherein the step (a) includes authenticating a connection to the network device, and the step (b) is carried out only if the connection to the network device is authenticated.