System for remote access of a user premises

• US 9,961,097 B2
• Filed: 11/10/2014
• Issued: 05/01/2018
• Est. Priority Date: 12/17/1998
• Status: Expired due to Fees

• Current Assignee: Portus Singapore Pte. Ltd.
• Original Assignee: Portus Singapore Pte. Ltd.
• Inventors: Lindquist, Charles Cameron, Lindquist, Timothy John
• Primary Examiner(s): BIAGINI, CHRISTOPHER D
• Application Number:
  US14/536,784
• Publication Number:
  US 20150088983A1
• Time in Patent Office: 1,268 Days
• CPC Class Codes: G08B 25/10 using wireless transmission systems G08B25/009 takes precedence
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/1425 Traffic logging, e.g. anomaly detection
• CPC Class Codes: H04L 67/025 for remote control or remote monitoring of applications
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04L 67/12 specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: H04M 11/04 with alarm systems, e.g. fire, police or burglar alarm systems

Abstract

A home security and control system for monitoring and controlling an external environment such as a home environment comprising: an Internet browser connectable to an extranet; an extranet located external to the home environment and accessible via the Internet browser; a communications server located in the extranet and adapted to interconnect on demand with one of a series of connection gateways located in predetermined home environments; and a connection gateway located in the home environment adapted to control and/or monitor the operation of at least one security device in the home environment; wherein upon accessing a predetermined address by the Internet browser on the extranet, the communications server connects to a predetermined one of the connection gateways to control and/or monitor the operation of the security device. The extranet can ideally be implemented as a Virtual Private Network (VPN) across an Internet substrate.

Claims

1. A system for remote access of a user premises comprising:

a first hardware processing circuitry running an access browser module;

a second hardware processing circuitry located in a first network; and

a connection gateway that is located in, and is part of a local network of, the user premises;

wherein;

the second hardware processing circuitry is external to the user premises, is accessible via the access browser module, and is configured to communicate on-demand with the connection gateway;

the connection gateway is integrated with or communicatively coupled to one or more networked components of the local network of the user premises; and

the system is configured such that user-input of a Uniform Resource Locator (URL), in accordance with which the first hardware processing circuitry, using the access browser module, accesses an address on the first network, begins a sequence in which the second hardware processing circuitry responsively serves to the first hardware processing circuitry, via the access browser module, information regarding at least one of the one or more networked components of the local network, which information the second hardware processing circuitry obtains from the connection gateway without a direct communicative coupling between the second hardware processing circuitry and the at least one networked component of the local network,

wherein the sequence includes the first hardware processing circuitry transmitting to the second hardware processing circuitry authentication data indicating authority to access the at least one networked component of the local network, the transmission of the authentication data being required for the serving of the information to the first hardware processing circuitry, and wherein;

the user premises is one of a plurality of user premises;

the connection gateway is one of a plurality of connection gateways, each of which is located in, and is part of a respective local network of, a respective one of the plurality of user premises, and to each of which the second hardware processing circuitry is configured to connect; and

the sequence further including the second hardware processing circuitry determining which one of the local networks the authentication data indicates authority to access,

the sequence further including the second hardware processing circuitry establishing a new communication session between the first hardware processing circuitry and the connection gateway of the respective local network that the authentication data indicates authority to access upon verification of the authentication data, and

wherein the second hardware processing circuitry receives, via the connection gateway, selected information from at least one of the networked components of the local network of the user premises, and stores the selected information in the first network for subsequent review by a user associated with the user premises, without requiring the user to provide the authentication data, and

wherein the authority to access the at least one networked component of the local network by transmitting the authentication data also provides authority to access and review the previously stored selected information in the first network via the access browser module.

2. The system of claim 1, wherein the access browser module is an Internet browser.

3. The system of claim 1, wherein the first network is an extranet.

4. The system of claim 1, wherein the second hardware processing circuitry is configured to interconnect on-demand with the connection gateway.

5. The system of claim 1, wherein the second hardware processing circuitry is not communicatively coupleable to the at least one networked component of the local network.

6. The system of claim 1, wherein the second hardware processing circuitry stores information identifying a plurality of users, information identifying respective ones of the plurality of user premises which respective ones of the users are permitted to access, and, for each of the connection gateways, respective connection information for communicating with the respective connection gateway.

7. The system of claim 1, wherein the second hardware processing circuitry performs dynamic webpage generation in the sequence, which begins in response to the user-input of the URL, the dynamic webpage generation being personalized according to the authentication data.

8. The system of claim 1, wherein the second hardware processing circuitry obtains the information from the connection gateway via the new communications session.

9. The system of claim 1, wherein the URL identifies the address.

10. The system of claim 1, wherein the second hardware processing circuitry includes a plurality of components distributed in the first network.

11. The system of claim 1, wherein the first hardware processing circuitry is external to the user premises.

12. The system of claim 1, wherein the second hardware processing circuitry controls and provides network access between (a) the at least one networked component of the local network and (b) components that are external to the local network.

13. The system of claim 1, wherein accessing of the at least one networked component of the local network using the second hardware processing circuitry is possible only by interaction with information served by the connection gateway .

14. The system of claim 1, wherein accessing of the at least one networked component of the local network using the second hardware processing circuitry is possible only by interaction with a web-based data served by the connection gateway.

15. The system of claim 1, wherein the first hardware processing circuitry is embodied in a mobile device.

16. The system of claim 1, wherein the information is presented as a webpage by the access browser module.

17. The system of claim 1 wherein the accessing includes at least one of controlling and monitoring one or more of the networked components.

18. The system of claim 1 wherein the selected information is event information captured by one of the networked components as a result of the occurrence of a predetermined event detected by one of the networked components.

19. A system for remote access of a user premises comprising:

a first hardware processing circuitry including a user interface;

a second hardware processing circuitry located in a first network; and

a connection gateway that is located in, and is part of a local network of, the user premises;

wherein;

the second hardware processing circuitry is external to the user premises, is accessible by the first hardware processing circuitry, and is configured to communicate on-demand with the connection gateway;

the connection gateway is integrated with or communicatively coupled to one or more networked components of the local network of the user premises; and

the system is configured such that user-input of a Uniform Resource Locator (URL) using the user interface, in accordance with which the first hardware processing circuitry accesses an address on the first network, begins a sequence in which the second hardware processing circuitry responsively serves to the first hardware processing circuitry, for display using the user interface, information regarding at least one of the one or more networked components of the local network, which information the second hardware processing circuitry obtains from the connection gateway without a direct communicative coupling between the second hardware processing circuitry and the at least one networked component of the local network,

wherein the sequence includes the first hardware processing circuitry transmitting to the second hardware processing circuitry authentication data indicating authority to access the at least one networked component of the local network, the transmission of the authentication data being required for the serving of the information to the first hardware processing circuitry, and wherein;

the user premises is one of a plurality of user premises;

the connection gateway is one of a plurality of connection gateways, each of which is located in, and is part of a respective local network of, a respective one of the plurality of user premises, and to each of which the second hardware processing circuitry is configured to connect; and

the sequence further including the second hardware processing circuitry determining which one of the local networks the authentication data indicates authority to access,

the sequence further including the second hardware processing circuitry establishing a new communication session between the first hardware processing circuitry and the connection gateway of the respective local network that the authentication data indicates authority to access upon verification of the authentication data, and

wherein the second hardware processing circuitry receives, via the connection gateway, selected information from at least one of the networked components of the local network of the user premises, and stores the selected information in the first network for subsequent review by a user associated with the user premises, without requiring the user to provide the authentication data, and

wherein the authority to access the at least one networked component of the local network by transmitting the authentication data also provides authority to access and review the previously stored selected information in the first network via the user interface.

20. The system of claim 19 wherein the accessing includes at least one of controlling and monitoring one or more of the networked components.

21. The system of claim 19 wherein the selected information is event information captured by one of the networked components as a result of the occurrence of a predetermined event detected by one of the networked components.

22. The system of claim 19, wherein the first network is an extranet.

23. A system for remote access of a user premises comprising:

a first hardware processing circuitry running an access browser module;

a second hardware processing circuitry located in a first network; and

a connection gateway that is located in, and is part of a local network of, the user premises;

wherein;

the second hardware processing circuitry is external to the user premises, is accessible via the access browser module, and is configured to communicate on-demand with the connection gateway;

the connection gateway is integrated with or communicatively coupled to one or more networked components of the local network of the user premises; and

the system is configured such that user-input of a Uniform Resource Locator (URL), in accordance with which the first hardware processing circuitry, using the access browser module, accesses an address on the first network, begins a sequence in which the second hardware processing circuitry responsively serves to the first hardware processing circuitry, via the access browser module, information regarding at least one of the one or more networked component of the local network and presented by the access browser module, via interaction with which presentation, at the first hardware processing circuitry, the at least one networked component is controllable (a) through a communication session established between the second hardware processing circuitry and the connection gateway and (b) without a direct communicative coupling between the second hardware processing circuitry and the at least one networked component,

wherein the sequence includes the first hardware processing circuitry transmitting to the second hardware processing circuitry authentication data indicating authority to access the at least one networked component of the local network, the transmission of the authentication data being required for the serving of the information to the first hardware processing circuitry, and wherein;

the user premises is one of a plurality of user premises;

the connection gateway is one of a plurality of connection gateways, each of which is located in, and is part of a respective local network of, a respective one of the plurality of user premises, and to each of which the second hardware processing circuitry is configured to connect; and

the sequence further including the second hardware processing circuitry determining which one of the local networks the authentication data indicates authority to access,

the sequence further including the second hardware processing circuitry establishing a new communication session between the first hardware processing circuitry and the connection gateway of the respective local network that the authentication data indicates authority to access upon verification of the authentication data, and

wherein the second hardware processing circuitry receives, via the connection gateway, selected information from at least one of the networked components of the local network of the user premises, and stores the selected information in the first network for subsequent review by a user associated with the user premises, without requiring the user to provide the authentication data, and

wherein the authority to access the at least one networked component of the local network by transmitting the authentication data also provides authority to access and review the previously stored selected information in the first network via the access browser module.

24. The system of claim 23 wherein the accessing includes at least one of controlling and monitoring one or more of the networked components.

25. The system of claim 23 wherein the selected information is event information captured by one of the networked components as a result of the occurrence of a predetermined event detected by one of the networked components.

26. The system of claim 23, wherein the first network is an extranet.