Connection support apparatus and gateway apparatus

• US 8,537,841 B2
• Filed: 08/09/2007
• Issued: 09/17/2013
• Est. Priority Date: 02/24/2005
• Status: Active Grant

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Takeyoshi, Haruyuki, Matsuoka, Naoki, Ishihara, Tomohiro
• Primary Examiner(s): Flynn, Nathan
• Assistant Examiner(s): LAKHIA, VIRAL S
• Application Number:
  US11/836,245
• Publication Number:
  US 20070274329A1
• Time in Patent Office: 2,231 Days
• Field of Search: 726/3, 726/11, 726 23- 25, 713/232, 713/262, 713168-170, 370/401
• US Class Current: 370/401
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

A problem is to provide a connection support apparatus and a gateway apparatus in which management of information is easy and remote access from a user terminal to the gateway apparatus can be performed easily and securely, and the problem is solved by including a control unit configured to perform control on a gateway apparatus to which a user apparatus connects so as to permit connection from the user apparatus for which authentication succeeds; and a communication unit configured to provide the user terminal with connection information used for connecting to the gateway apparatus.

Claims

1. A connection support apparatus comprising:

a control unit configured to perform an authentication of a user terminal based on user authentication information received from the user terminal, and to send a control request added with a random number to a gateway apparatus to open a closed port of the gateway apparatus in order to permit a connection from the user terminal for which the authentication succeeds; and

a communication unit configured to provide the user terminal with connection information, added with the random number, and used for connecting the user terminal to the gateway apparatus when the control unit receives a response to the control request from the gateway apparatus, wherein

the control unit adds the random number, an address list of address identifiers held by one or more other gateway apparatuses through which the user terminal communicates, and an application identifier to the control request when an address identifier of the user terminal is not unique.

2. The connection support apparatus as claimed in claim 1,

wherein the control unit adds the random number, an address identifier of the user terminal, and an application identifier to the control request when the address identifier of the user terminal is unique.

3. The connection support apparatus as claimed in claim 1, wherein the control unit performs a control on the gateway apparatus to which the user terminal connects according to a terminal type of the user terminal.

4. The connection support apparatus as claimed in claim 1, wherein the control unit performs a control on the gateway apparatus to which the user terminal connects according to a terminal accommodating carrier type of the user terminal.

5. The connection support apparatus as claimed in claim 1, wherein the communication unit provides the user terminal with a mechanism for connecting to the gateway apparatus when the user terminal includes a browser, in order to permit the connection of the user terminal to the gateway apparatus.

6. The connection support apparatus as claimed in claim 1, wherein messages are exchanged between the user terminal and the gateway apparatus via an encrypted communication route.

7. The connection support apparatus as claimed in claim 1, further comprising:

a session management unit configured to manage a session between the user terminal and the gateway apparatus by using a user identifier of a user who operates the user terminal and an identifier of the gateway apparatus or, by using the user identifier of the user, the identifier of the gateway apparatus, and an application identifier.

8. The connection support apparatus as claimed in claim 7, wherein the session management unit registers the session between the user terminal and the gateway apparatus when the control unit receives the response from the gateway apparatus after sending the control request to the gateway apparatus or when the user terminal connects to the gateway apparatus.

9. The connection support apparatus as claimed in claim 7, wherein the session management unit deletes a session between the user terminal and the gateway apparatus when a communication between the user terminal and the gateway apparatus ends or when a communication between the user terminal and an application of the gateway apparatus ends.

10. The connection support apparatus as claimed in claim 7, wherein the session management unit, after registering the session between the user terminal and the gateway apparatus, periodically sends a session check message added with the user identifier, the identifier of the gateway apparatus, and the application identifier to the gateway apparatus in order to check a status of the session to the user terminal.

11. The connection support apparatus as claimed in claim 1, further comprising:

a connection destination management unit configured to receive an identifier of the gateway apparatus and the connection information from the gateway apparatus when the connection information used for connecting the user terminal to the gateway apparatus is changed, and to manage the connection information.

12. A gateway apparatus comprising:

a setting unit configured to receive a control request added with a random number from a connection support apparatus, and to make settings for providing a user terminal for which an authentication in the connection support apparatus succeeds with a connection permission; and

a communication unit configured to send a response to the control request to the connection support apparatus, and to open a closed port of the gateway apparatus in order to permit a connection from the user terminal provided with the connection permission to the gateway apparatus based on a comparison of the random number included in the control request received from the connection support apparatus and the random number received from the user terminal, wherein

the setting unit makes settings for providing the user terminal with the connection permission according to the random number, an address list of address identifiers held by one or more other gateway apparatuses through which the user terminal communicates, and an application identifier that are included in the control request from the connection support apparatus when an address identifier of the user terminal is not unique.

13. The gateway apparatus as claimed in claim 12,

wherein the setting unit makes settings for providing the user terminal with the connection permission according to the random number, an address identifier of the user terminal, and an application identifier that are included in the control request from the connection support apparatus when the address identifier of the user terminal is unique.

14. The gateway apparatus as claimed in claim 12, wherein the setting unit does not permit a connection to an address other than a particular address when the user terminal makes the connection to the gateway apparatus using the particular address identified by a particular address identifier in the address list.

15. A connection method to connect a user terminal and a gateway apparatus using a connection support apparatus, comprising:

performing, by the connection support apparatus, an authentication of a user terminal based on user authentication information received from the user terminal;

sending, by the connection support apparatus to the gateway apparatus, a control request added with a random number to open a closed port of the gateway apparatus in order to permit a connection from the user terminal for which the authentication succeeds; and

providing, by the connection support apparatus to the user terminal, connection information added with the random number and used for connecting the user terminal to the gateway apparatus when a response is received from the gateway apparatus in response to the control request sent to the gateway apparatus by the sending, wherein

the control request further includes, when an address identifier of the user terminal is not unique, an address list of address identifiers held by one or more other gateway apparatuses through which the user terminal communicates and an application identifier.