Home gateway for executing a function of a security protocol and a method thereof

• US 20030128695A1
• Filed: 12/17/2002
• Published: 07/10/2003
• Est. Priority Date: 01/04/2002
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Park, Sang-Do
• Granted Patent: US 7,440,465 B2
• Time in Patent Office: Days
• US Class Current: 370/352
• CPC Class Codes: H04L 12/2803 Home automation networks
• CPC Class Codes: H04L 12/2825 Reporting to a device located outside the home and the home network access arrangements H04L12/2856; for remote control or remote monitoring of applications H04L67/025; telephonic communication systems adapted for combination with telemetering systems H04M11/002
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0281 Proxies
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 69/12 Protocol engines
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A communication connecting apparatus that is able to execute a function of a security protocol for home devices that lack the ability to process a security protocol. The communication connecting apparatus, according to the present invention, comprises a protocol detector for detecting a key exchange protocol in a packet received from an external device, a list storage unit for storing a list of devices for executing a certification procedure, and an agent unit for executing a certification procedure by transmitting a certification signal to the external device when a device corresponding to the key exchange unit exists in a device list. By this method, security can be assured not only outside but also inside of the home network in transceiving data between a device connected to the home network and the remote client.

Claims

1. A communication connecting apparatus comprising:

a protocol detector for detecting a key exchange protocol in a packet received from an external device;

a list storage unit for storing a list of internal devices, for executing a certification procedure; and

an agent unit for executing the certification procedure by sending a certification signal to the external device when an internal device corresponding to the key exchange protocol exists in the list.

2. The communication connecting apparatus of claim 1, further comprising a key storage unit for storing a session key for forming a communication path between the internal device and the external device, wherein the agent unit connects the internal device and the external device by retrieving the session key corresponding to the key exchange protocol and transmitting the session key to the internal device.

3. The communication connecting apparatus of claim 2, wherein the key exchange unit further stores a private key provided to the internal device, the agent unit retrieves the private key corresponding to the key exchange protocol and sends the private key to the external device, and the external device identifies the internal device by the received private key.

4. The communication connecting apparatus of claim 2, wherein the key storage unit further stores a public key provided to the internal device, the agent unit transmits the public key to the external device when the internal device corresponding to the key exchange protocol does not exist in the list, and the external device identifies the internal device by the received public key.

5. A communication connecting method comprising the steps of:

detecting a key exchange protocol in a packet received from an external device;

searching a list of internal devices for executing a certification procedure based on the detected key exchange protocol, and

executing the certification procedure by sending a certification signal to the external device when an internal device corresponding to the key exchange protocol exists in a list storage unit.

6. The communication connecting method of claim 5, further comprising the steps of:

generating one or more session keys for forming a communication path between the internal device and the external device; and

selecting one of said one or more session keys corresponding to the key exchange protocol, and transmitting said one of said one or more session keys to the internal device,

wherein the internal device is connected to the external device through a communication path according to the session key received.

7. The communication connecting method of claim 6, further comprising the steps of:

generating one or more unique private keys; and

selecting one of said one or more unique private keys corresponding to the key exchange protocol and transmitting said one of said one or more unique private keys to the external device,

wherein the external device identifies the internal device by the received said one of said one or more private keys.

8. The communication connecting method of claim 5, further comprising the steps of:

generating one or more public keys; and

transmitting one of said one or more public keys to the external device when the internal device corresponding to the key exchange protocol does not exist in the list,

wherein the external device identifies the internal device by said one of said one or more public keys received.