Method and apparatus for controlling access between home device and external server in home network system

• US 9,479,504 B2
• Filed: 12/10/2013
• Issued: 10/25/2016
• Est. Priority Date: 12/10/2012
• Status: Expired due to Fees

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Bae, Eun-Hui, Chang, Yong, Kong, Dong-Keon, Kim, Se-Hoon, Lim, Hyoung-Kyu, Cho, Chi-Hong
• Primary Examiner(s): HO, DAO Q
• Application Number:
  US14/101,816
• Publication Number:
  US 20140165160A1
• Time in Patent Office: 1,050 Days
• Field of Search: 726/4, 713/168
• US Class Current: 1/1
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: H04L 12/2836 Protocol conversion between an external network and a home network controlling appliance services of a home automation network from a device located outside the home and the home network H04L12/2818; protocol conversion H04L69/08; adaptation of digital video signals for transport over a specific home network H04N7/24
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/104 Grouping of entities

Abstract

A method for controlling access between home devices and servers in a home network system is provided. The method includes determining whether first access of the home devices to each of the servers and second access of the servers to each of the home devices is restricted, and controlling the first access and second access based on respective access rights established according to the determination.

Claims

1. A method for controlling access by a gateway in a home network system, the method comprising:

receiving, from a device, a first access restriction request comprising server identification information and first restriction information, the first restriction information indicating at least one of at least one first restriction function and at least one first restriction application, the at least one first restriction function and the at least one first restriction application provided by a server identified by the server identification information;

receiving, from the server, a second access restriction request comprising device identification information and second restriction information, the second restriction information indicating at least one of at least one second restriction function and at least one second restriction application, the at least one second restriction function and the at least one second restriction application provided by a device identified by the device identification information;

generating a first restriction list based on the server identification information and the first restriction information;

storing the first restriction list in a database;

generating a second restriction list based on the device identification information and the second restriction information;

storing the second restriction list in the database;

receiving, from the server, a first access request comprising a device identification information and at least one of a first request function indicator and a first request application indicator;

determining whether a first requested function or a first requested application identified by the at least one of the first request function indicator and the first request application indicator is included in the first restriction list;

when the first requested function or the first requested application is included in the first restriction list, transmitting, to the server, a response indicating that access to the first requested function or the first requested application is restricted to the device;

receiving, from the device, a second access request comprising a server identification information and at least one of a second request function indicator and a second request application indicator;

determining whether a second requested function or a second requested application identified by the at least one of the second request function indicator and the second request application indicator is included in the second restriction list;

when the second requested function or the second requested application is included in the second restriction list, transmitting, to the device, a response indicating that access to the second requested function or the second requested application is restricted to the server;

receiving, from the device, a delete request comprising the at least one of the first request function indicator and the first request application indicator;

after deleting the at least one of the first request function and the first request application in the first restriction list, receiving, from the server, the first access request; and

transmitting, to the server, a response indicating that access to the first requested function or the first requested application is permitted.

2. The method of claim 1, further comprising:

receiving, from the server, a delete request comprising the at least one of the second request function indicator and the second request application indicator;

after deleting the at least one of the second request function and the second request application in the second restriction list, receiving, from the device, the second access request; and

transmitting, to the device, a response indicating that access to the second function or the second application is permitted.

3. A method for receiving a service by a device in a home network system, the method comprising:

generating an access restriction request comprising server identification information, and first restriction information, the first restriction information indicating at least one of at least one first restriction function and at least one first restriction application, the at least one first restriction function and the at least one first restriction application provided by a server identified by the server identification information;

transmitting, to a gateway, the access restriction request;

transmitting, to a gateway, an access request comprising server identification information and at least one of a second request function indicator and a second request application indicator; and

when a second requested function or a second requested application identified the at least one of the second request function indicator and the second request application indicator is included in a second restriction list, the second restriction list generated based on device identification information and second restriction information, receiving, from the gateway, a response indicating that access to the second requested function or the second requested application is restricted to the server,

wherein the second restriction information indicates that at least one of at least one second restriction function and at least one second restriction application, the at least one second restriction function and the at least one second restriction application provided by a device identified by the device identification information, and

wherein, after deleting the at least one of the second request function and the second request application in the second restriction list based on a delete request comprising the at least one of the second request function indicator and the second request application indicator by the server, when the access request is transmitted to the gateway, a response indicating that access to the second function or the second application is permitted, is received, from the gateway.

4. The method of claim 3, further comprising:

transmitting, to the gateway, a delete request comprising the at least one of the first request function indicator and the first request application indicator.

5. A gateway for controlling access in a home network system, the gateway comprising:

a receiver configured to;

receive, from a device, a first access restriction request comprising server identification information, and first restriction information, the first restriction information indicating at least one of at least one first restriction function and at least one first restriction application, the at least one first restriction function and the at least one first restriction application provided by a server identified by the server identification information,

receive, from the server, a second access restriction request comprising device identification information, and second restriction information, the second restriction information indicating at least one of at least one second restriction function and at least one second restriction application, the at least one second restriction function and the at least one second restriction application provided by a device identified by the device identification information,

receive, from the server, a first access request comprising a device identification information and at least one of a first request function indicator and a first request application indicator, and

receive, from the device, a second access request comprising the server identification information and at least one of a second request function indicator and a second request application indicator;

a controller configured to;

generate a first restriction list based on the server identification information and the first restriction information, store the first restriction list in a database,

generate a second restriction list based on the device identification information and the second restriction information, store the second restriction list in the database, determine whether a first requested function or a first requested application identified by the at least one of the first request function indicator and the first request application indicator is included in the first restriction list, and

determine whether a second requested function or a second requested application identified by the at least one of the second request function indicator and the second request application indicator is included in the second restriction list; and

a transmitter configured to;

when the first requested function or the first requested application identification is included in the first restriction list, transmit to the server, a response indicating that access to the first requested function or the first requested application is restricted to the device, and

when the second requested function or the second requested application is included in the second restriction list, transmit, to the device, a response indicating that access to the second requested function or the second requested application is restricted to the server

wherein the receiver is configured to receive, from the device, a delete request comprising the at least one of the first request function indicator and the first request application indicator,

wherein, after deleting the at least one of the first request function and the first request application in the first restriction list, the receiver is configured to receive, from the server, the first access request, and

wherein the transmitter is configured to transmit, to the server, a response indicating that access to the first requested function or the first requested application is permitted.

6. The gateway of claim 5,

wherein the receiver is configured to receive, from the server, a delete request comprising the at least one of the second request function indicator and the second request application indicator,

wherein, after deleting the at least one of the second request function and the second request application in the second restriction list, the receiver is configured to receive, from the device, the second access request, and

wherein the transmitter is configured to transmit, to the device, a response indicating that access to the second function or the second application is permitted.

7. A device for receiving a service in a home network system, the device comprising:

a controller configured to generate an access restriction request comprising server identification information, and first restriction information, the first restriction information indicating at least one of at least one first restriction function and at least one first restriction application, the at least one first restriction function and the at least one first restriction application provided by a server identified by the server identification information;

a transmitter configured to transmit, to a gateway the access restriction request, and an access request comprising server identification information and at least one of a second request function indicator and a second request application indicator; and

a receiver configured to, when a second requested function or a second requested application identified the at least one of the second request function indicator and the second request application indicator is included in a second restriction list, the second restriction list generated based on device identification information and second restriction information, receive, from the gateway, a response indicating that access to the second requested function or the second requested application is restricted to the server,

wherein the second restriction information indicates that at least one of at least one second restriction function and at least one second restriction application, the at least one second restriction function and the at least one second restriction application provided by a device identified by the device identification information, and

wherein, after deleting the at least one of the second request function and the second request application in the second restriction list based on a delete request comprising the at least one of the second request function indicator and the second request application indicator by the server, when the access request is transmitted to the gateway, the receiver is configured to receive, from the gateway, a response indicating that access to the second function or the second application is permitted.

8. The method of claim 7, wherein the transmitter is configured to transmit, to the gateway, a delete request comprising the at least one of the first request function indicator and the first request application indicator.