Method and apparatus for controlling of remote access to a local network

• US 8,561,147 B2
• Filed: 04/19/2006
• Issued: 10/15/2013
• Est. Priority Date: 04/19/2005
• Status: Active Grant

• Current Assignee: LG Electronics, Inc. (LG Corporation)
• Original Assignee: LG Electronics, Inc. (LG Corporation)
• Inventors: Lee, Kyung Ju, Song, Yu Kyoung
• Primary Examiner(s): Darrow, Justin T
• Application Number:
  US11/912,127
• Publication Number:
  US 20080289009A1
• Time in Patent Office: 2,736 Days
• Field of Search: 726 4- 6, 713/153, 713/155
• US Class Current: 726/4
• CPC Class Codes: H04L 12/2818 from a device located outside both the home and the home network access arrangements H04L12/2856; for remote control or remote monitoring of applications H04L67/025; arrangements for transmitting signals characterised by the use of a wireless eletrical link G08C17/00; telephonic communication systems adapted for combination with remote control systems H04M11/007
• CPC Class Codes: H04L 63/0227 Filtering policies mail message filtering H04L51/212
• CPC Class Codes: H04L 63/029 Firewall traversal, e.g. tunnelling or, creating pinholes
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network

Abstract

The present invention is to ensure security of a local network, e.g., a home network from remote access while allowing remote access. In a method of the present invention, if a device on the local network is to be accessed remotely, user identifying information (and/or device identifying information) and connection information of a target device, that are accompanied by the access, are compared with information of registered allowance entries and whether to allow the access is determined based on the comparison result. According to the method, remote access to a device invoked by a user (and/or a remote device) whose remote access is not set to allowance is blocked while remote access invoked by a user (and/or a remote device) whose remote access is set to allowance is admitted.

Claims

1. A method for managing remote access to a device connected to a local network, the method comprising:

instructing a network managing device to create permission information regarding at least one local device connected to the local network,

wherein the permission information is for determining whether the at least one local device can be accessed from a remote device not included in the local network, and

wherein the permission information includes at least an identifier of a user, a unique identifier for the at least one local device, a parameter designating either permission or refusal of external access of the at least one local device or connection information for connecting to the at least one local device; and

instructing the network managing device to search the created permission information for first permission information regarding a first device of the at least one local device when a request for access to the first device is received by the network managing device from the remote device,

wherein the network managing device determines whether to allow the access to the first device according to the first permission information, and

wherein the remote device is connected with the first device using the connection information upon determining to allow the access to the first device.

2. The method of claim 1, wherein the connection information includes connection protocol information, an IP address, and a port number.

3. The method of claim 1, wherein instructing the network managing device to create the permission information comprises:

transmitting a first command to the network managing device to create a list of remote access enabled devices or setting at least a user or a remotely-accessed device to allowance, the first command including at least the identifier of the user, the unique identifier for the at least one local device or information regarding the remotely-accessed device; and

transmitting a second command allowing remote access for the at least one local device, wherein the second command includes the unique identifier for the at least one local device and instructs the network managing device to search the list of remote access enabled devices for the unique identifier for the at least one local device and to obtain at least the identifier of the user or information regarding a remotely-accessed device associated with the unique identifier for the at least one local device.

4. The method of claim 3, wherein the first command and the second command each further comprises a parameter indicating remote access permission or remote access refusal.

5. An apparatus for managing remote access to a device connected to a local network, the apparatus comprising:

a microprocessor configured to;

instruct a network managing device to create permission information regarding at least one local device connected to the local network, wherein the permission information is for determining whether the at least one local device can be accessed from a remote device not included in the local network, and wherein the permission information includes at least an identifier of a user, a unique identifier for the at least one local device, a parameter designating either permission or refusal of external access of the at least one local device or connection information for connecting to the at least one local device; and

instruct the network managing device to search the created permission information for first permission information regarding a first device of the at least one local device when a request for access to the first device is received by the network managing device from the remote device,

wherein the network managing device determines whether to allow the access to the first device according to the first permission information, and

wherein the remote device is connected with the first device using the connection information upon determining to allow the access to the first device.

6. The apparatus of claim 5, wherein the connection information includes connection protocol information, an IP address, and a port number.

7. The apparatus of claim 5, wherein the microprocessor is further configured to:

transmit a first command to the network managing device to create a list of remote access enabled devices for setting at least a user or a remotely-accessed device to allowance, the first command including at least the identifier of the user, the unique identifier for the at least one local device or information regarding the remotely-accessed device; and

transmit a second command allowing remote access for the at least one local device, wherein the second command includes the unique identifier for the at least one local device and instructs the network managing device to search the list of remote access enabled devices for the unique identifier for the at least one local device and to obtain at least the identifier of the user or information regarding a remotely-accessed device associated with the unique identifier for the at least one local device.

8. The apparatus of claim 7, wherein the first command and the second command each further comprises a parameter indicative of remote access permission or remote access refusal.

9. A method for managing remote access to a device connected to a local network, the method comprising:

receiving a request for getting remote access permission information regarding at least one local device; and

transmitting a remote access permission message to a network managing device,

wherein the remote access permission message comprises at least an identifier of a user, a unique identifier for the at least one local device, a parameter designating either permission or refusal of external access of the at least one local device or connection information,

wherein permission information regarding at least one local device is created by the network managing device using the remote access permission message, and

wherein the permission information regarding the at least one local device is for determining whether the at least one local device can be accessed from a remote device not included in the local network.

10. The method of claim 9, wherein the connection information includes connection protocol information, an IP address, and a port number.

11. The method of claim 9, wherein the remote device is connected with the at least one local device using the permission information upon determining the at least one local device can be accessed.

12. An apparatus connected to a local network, the apparatus comprising:

a control device configured to;

receive a request for getting remote access permission information regarding at least one local device; and

transmit a remote access permission message to a network managing device,

wherein the remote access permission message comprises at least an identifier of a user, a unique identifier for the at least one local device, a parameter designating either permission or refusal of external access of the at least one local device or connection information,

wherein permission information regarding at least one local device is created by the network managing device using the remote access permission message, and

wherein the permission information regarding the at least one local device is for determining whether the at least one local device can be accessed from a remote device not included in the local network.

13. The apparatus of claim 12, wherein the connection information includes connection protocol information, an IP address, and a port number.

14. The apparatus of claim 12, wherein the remote device is connected with the at least one local device using the permission information upon determining the at least one local device can be accessed.