Apparatus and method for offering connections between network devices located in different home networks

• US 20030214955A1
• Filed: 05/14/2003
• Published: 11/20/2003
• Est. Priority Date: 05/14/2002
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Kim, Jun-hyeong
• Granted Patent: US 7,796,616 B2
• Time in Patent Office: Days
• US Class Current: 370/400
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 2212/00 Encapsulation of packets
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 67/14 Session management for real-time applications in data packet communications networks H04L65/1066
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A network connection apparatus for communicating between a network device located in a first private network and a second private network located outside the first private network. The apparatus includes an address acquisition module capable of acquiring a public IP address of a network management device from a DNS based on a domain name of the network management device of the second private network is provided. A connection management module is provided that is capable of forming a P2P connection to the network device if there is a request for a connection to the second private network from the network device. The connection management module is further capable of forming a virtual private network tunnel with the second private network based on the public IP address transferred from the address acquisition module. The connection management module is further capable of transferring to the network device a private IP address used in the second private network.

Claims

1. A network connection apparatus for communicating between a network device located in a first private network and a second private network located outside the first private network, comprising:

an address acquisition module capable of acquiring a public Internet protocol (IP) address of a network management device from a domain name server (DNS) based on a domain name of the network management device of the second private network; and

a connection management module capable of forming a peer-to-peer (P2P) connection to the network device if there is a request for a connection to the second private network from the network device,

wherein the connection management module is further capable of forming a virtual private network tunnel with the second private network based on the public IP address transferred from the address acquisition module, and

wherein the connection management module is further capable of transferring to the network device a private IP address used in the second private network.

2. The network connection apparatus according to claim 1, wherein the connection management module further comprises:

a P2P connection part capable of providing a P2P connection with the network device; and

a virtual private network (VPN) connection part capable of forming a virtual private network tunnel with the second private network.

3. A network connection apparatus used for communicating between a private network and a network device located outside the private network, comprising:

an authentication module capable of authenticating the network device requesting a connection; and

a connection management module capable of forming a virtual private network tunnel with the network device if a connection authentication signal is received from the authentication module and further capable of allocating a private IP address used inside the private network.

4. The network connection apparatus according to claim 3, further comprising a registration request module capable of requesting a registration of a unique domain name of a home gateway through a communication network and a public IP address allocated from an internet service provider.

5. The network connection apparatus according to claim 3, further comprising an encoding module capable of encoding data transferred outside the private network from the network device or decoding the encoded data transferred to the network device from outside the private network.

6. A network connection method for communicating between a network device located inside a first private network and a second private network located outside the first private network, the method comprising:

(a) receiving a requesting for a connection to the second private network from the network device;

(b) forming a P2P connection to the network device;

(c) forming a virtual private network tunnel between a home gateway to which the network device belongs and the second private network;

(d) notifying the network device of the forming of the virtual private network tunnel;

(e) performing an authentication procedure at the second private network regarding the network device and the virtual private network tunnel; and

(f) transferring an allocated private IP address to the network device.

7. The network connection method according to claim 6, wherein the step (c) includes a step of authenticating the connection as to the network device, and the step (d) is carried out only if the connection is authenticated.

8. A network connection method for communicating between a private network and a network device located outside the private network, the method comprising:

(a) receiving a request for a connection to the private network from the network device; and

(b) forming a virtual private network tunnel with the network device and allocating a private IP address used inside the private network.

9. The network connection method according to claim 8, further comprising, prior to step (a), requesting a domain name server through a communication network to register a unique domain name and a public IP address allocated from an internet service provider.

10. The network connection method according to claim 8, wherein the step (a) includes authenticating a connection to the network device, and the step (b) is carried out only if the connection to the network device is authenticated.