Domain managing method, domain extending method and reference point controller electing method

• US 8,667,108 B2
• Filed: 12/30/2008
• Issued: 03/04/2014
• Est. Priority Date: 03/06/2006
• Status: Expired due to Fees

• Current Assignee: LG Electronics, Inc. (LG Corporation)
• Original Assignee: LG Electronics, Inc. (LG Corporation)
• Inventors: Jeong, Man-soo, Park, Il-gon, Pak, Koo-yong, Chung, Min-gyu, Cho, Sung-hyun, Kim, Soo-jung, K, Kiran Kumar
• Primary Examiner(s): Salad, Abdullahi
• Assistant Examiner(s): Tran, Jimmy H
• Application Number:
  US12/346,642
• Publication Number:
  US 20090144384A1
• Time in Patent Office: 1,890 Days
• Field of Search: 709/206, 709/208, 709/213, 709/209, 709/223, 709/204, 709/221, 709/225, 709/246, 705/51, 705/59
• US Class Current: 709/223
• CPC Class Codes: G06F 21/1012 to domains
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/166 at the transport layer
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: Y10S 707/99931 Database or file accessing
• CPC Class Codes: Y10S 707/99932 Access augmentation or optimizing
• CPC Class Codes: Y10S 707/99933 Query processing, i.e. searching
• CPC Class Codes: Y10S 707/99934 Query formulation, input preparation, or translation
• CPC Class Codes: Y10S 707/99935 Query augmenting and refining, e.g. inexact access
• CPC Class Codes: Y10S 707/99936 Pattern matching access
• CPC Class Codes: Y10S 707/99937 Sorting
• CPC Class Codes: Y10S 707/99938 Concurrency, e.g. lock management in shared database
• CPC Class Codes: Y10S 707/99939 Privileged access
• CPC Class Codes: Y10S 707/9994 Distributed or remote access
• CPC Class Codes: Y10S 707/99941 Database schema or data structure

Abstract

A method of managing a domain, a method of extending a domain, and a method of selecting a reference point controller are provided. The method of operating the domain includes: receiving a request for authenticating a reference point controller from a reference point controller candidate; invalidating a membership of the stored reference point controller; generating a unique reference point controller membership for verifying that the reference point controller candidate is a new reference point controller; and transmitting the generated reference point controller membership to the reference point controller candidate. Accordingly, even when an error occurs in the reference point controller, the function of the reference point controller can be rapidly replaced by using the reference point controller candidate.

Claims

1. A method for operating a domain, the method comprising:

performing, among devices associated with the domain, a controller election process for electing a controller of the domain and, based on comparing a capability of each device with other devices, wherein the controller is responsible for;

receiving a request from a client,

in response to receiving the request, checking whether the client is located in a local area, and

issuing, to the client, a first credential which verifies that the client is located in the local area upon determining that the client is located in the local area;

electing one of the devices as the controller of the domain based on performing the controller election process for electing the controller of the domain;

performing at least one candidate election process for electing controller candidates based on comparing a capability of each device with other devices;

electing the controller candidates based on performing the at least one candidate election process for electing the controller candidates, each controller candidate having priority based on the capability of each of the controller candidates; and

replacing the controller with a first controller candidate having the highest priority among the controller candidates when the controller has entered a failure state,

wherein to join the domain, the client submits, to a domain manager of the domain, any one of the first credential issued by the controller and a second credential issued by the domain manager, wherein

the first credential includes a controller membership verifying the controller, and a client membership issued to the client, and

the second credential is issued by the domain manager when the domain is generated and includes the client membership and a domain credential provided by the domain manager, and

wherein the domain manager determines that the client is in a local status or a remote status based on whether the first credential or the second credential, respectively, is submitted to the domain manager.

2. The method of claim 1, wherein at least one of the controller election process and the candidate election process comprises:

by a first device,

setting a first capability value that indicates a capability of the first device;

generating a first message that includes the first capability value and a first domain identifier identifying a domain that authenticates the first device;

broadcasting the generated first message to one or more other devices;

receiving a second message, wherein the second message has been broadcast from a second device and includes a second capability value that indicates a capability of the second device, and a second domain identifier identifying a domain that authenticates the second device;

determining whether the capability of the first device is higher than the capability of the second device by comparing the first capability value with the second capability value within the received second message;

checking whether the second domain identifier within the received second message is the same as the first domain identifier; and

if the capability of the first device is higher than the capability of the second device and the second domain identifier equals the first domain identifier, broadcasting the first message, or else stopping the broadcasting of the first message.

3. The method of claim 1, further comprising:

performing, among devices associated with the domain, a proxy election process for electing a controller proxy, based on comparing a capability of each device with each other; and

electing one of the devices as the controller proxy for constructing an extended domain associated with the domain based on performing the proxy election process.

4. A device for operating a domain, the device comprising:

a processor configured to;

perform, among devices associated with the domain, a controller election process for electing a controller of the domain and, based on comparing a capability of each device with other devices, wherein the controller is responsible for;

receiving a request from a client,

in response to receiving the request, checking whether the client is located in a local area, and

issuing, to the client, a first credential which verifies that the client is located in the local area upon determining that the client is located in the local area;

elect one of the devices as the controller of the domain based on performing the controller election process for electing the controller of the domain;

perform at least one candidate election process for electing controller candidates based on comparing a capability of each device with other devices;

elect the controller candidates based on performing the at least one candidate election process for electing the controller candidates, each controller candidate having priority based on the capability of each of the controller candidates; and

replace the controller with a first controller candidate having the highest priority among the controller candidates when the controller has entered a failure state,

wherein to join the domain, the client submits, to a domain manager of the domain, any one of the first credential issued by the controller and a second credential issued by the domain manager, wherein

the first credential includes a controller membership verifying the controller, and a client membership issued to the client, and

the second credential is issued by the domain manager when the domain is generated and includes the client membership and a domain credential provided by the domain manager, and

wherein the domain manager determines that the client is in a local status or a remote status based on whether the first credential or the second credential, respectively, is submitted to the domain manager.

5. The device of claim 4, wherein at least one of the controller election process and the candidate election process comprises:

setting a first capability value that indicates a capability of a first device;

generating a first message that includes the first capability value and a first domain identifier identifying a domain that authenticates the first device;

broadcasting the generated first message to one or more other devices;

receiving a second message, wherein the second message has been broadcast from a second device and includes a second capability value that indicates a capability of the second device, and a second domain identifier identifying a domain that authenticates the second device;

determining whether the capability of the first device is higher than the capability of the second device by comparing the first capability value with the second capability value within the received second message;

checking whether the second domain identifier within the received second message is the same as the first domain identifier; and

if the capability of the first device is higher than the capability of the second device and the second domain identifier equals the first domain identifier, broadcasting the first message, or else stopping the broadcasting of the first message.

6. The device of claim 4, the processor further configured to:

perform, among devices associated with the domain, a proxy election process for electing a controller proxy, based on comparing a capability of each device with each other; and

elect one of the devices as the controller proxy for constructing an extended domain associated with the domain based on performing the proxy election process.

7. A system for operating a domain, the system comprising:

devices associated with the domain, the devices comprising memory and one or more processors that execute operations that include;

performing, among devices associated with the domain, a controller election process for electing a controller of the domain and, based on comparing a capability of each device with other devices, wherein the controller is responsible for;

receiving a request from a client,

in response to receiving the request, checking whether the client is located in a local area, and

issuing, to the client, a first credential which verifies that the client is located in the local area upon determining that the client is located in the local area;

electing one of the devices as the controller of the domain based on performing the controller election process for electing the controller of the domain;

performing at least one candidate election process for electing controller candidates based on comparing a capability of each device with other devices;

electing the controller candidates based on performing the at least one candidate election process for electing the controller candidates, each controller candidate having priority based on the capability of each of the controller candidates; and

replacing the controller with a first controller candidate having the highest priority among the controller candidates when the controller has entered a failure state,

wherein to join the domain, the client submits, to a domain manager of the domain, any one of the first credential issued by the controller and a second credential issued by the domain manager, wherein

the first credential includes a controller membership verifying the controller, and a client membership issued to the client, and

the second credential is issued by the domain manager when the domain is generated and includes the client membership and a domain credential provided by the domain manager, and

wherein the domain manager determines that the client is in a local status or a remote status based on whether the first credential or the second credential, respectively, is submitted to the domain manager.

8. The system of claim 7, wherein at least one of the controller election process and the candidate election process comprises:

by a first device, setting a first capability value that indicates a capability of the first device;

generating a first message that includes the first capability value and a first domain identifier identifying a domain that authenticates the first device;

broadcasting the generated first message to one or more other devices;

receiving a second message, wherein the second message has been broadcast from a second device and includes a second capability value that indicates a capability of the second device, and a second domain identifier identifying a domain that authenticates the second device;

determining whether the capability of the first device is higher than the capability of the second device by comparing the first capability value with the second capability value within the received second message;

checking whether the second domain identifier within the received second message is the same as the first domain identifier; and

if the capability of the first device is higher than the capability of the second device and the second domain identifier equals the first domain identifier, broadcasting the first message, or else stopping the broadcasting of the first message.

9. The system of claim 7, wherein the operations further include:

performing, among devices associated with the domain, a proxy election process for electing a controller proxy, based on comparing a capability of each device with each other; and

electing one of the devices as the controller proxy for constructing an extended domain associated with the domain based on performing the proxy election process.