Mode-based access control method and device

• US 20070039037A1
• Filed: 08/09/2006
• Published: 02/15/2007
• Est. Priority Date: 08/10/2005
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Oh, Seung-jae, Han, Se-hee, Son, Kyoung-ho, Lee, Sung-min, Yook, Hyun-gyoo
• Granted Patent: US 9,000,884 B2
• Time in Patent Office: Days
• US Class Current: 726/2
• CPC Class Codes: H04L 41/0883 Semiautomatic configuration, e.g. proposals from system
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

Provided is a mode-based access control method that includes: making a security mode list which indicates security setting states of devices existing in a home network; setting a specific security mode selected from the modes on the security mode list; and making the devices perform functions thereof in the specific security mode. Also, provided is a mode-based access control device includes: an authentication unit which checks information on a user and authenticates the user; a mode configuration unit which makes a security mode list indicating the security setting state of devices forming a home network; a mode setting unit which sets a specific security mode selected from modes on the security mode list; and an operating unit which causes the devices to perform functions thereof in the specific security mode.

Claims

1. A mode-based access control method comprising:

making a security mode list which indicates security setting states of devices existing in a network;

setting a specific security mode selected from the modes on the security mode list; and

making the devices perform functions thereof in the specific security mode.

2. The mode-based access control method of claim 1, further comprising:

converting the specific security mode when authentication of a new user is performed or authentication of a current user is released in the network.

3. The mode-based access control method of claim 1,

wherein the making of the security mode list comprises:

performing user authentication to check whether a user has an authority to make the security mode list;

editing the security mode list by adding a new mode to the security mode list or removing the existing mode from the security mode list;

grouping devices that each security mode can be applied to the security mode list;

setting service item values of the devices based on information on access control lists (ACL) of the devices; and

reflecting contents performed in the grouping of the device and the setting of the service item values in the security mode list.

4. The mode-based access control method of claim 3,

wherein the setting of the service item values comprises:

setting the service items and the conditions of the service items on the basis of the devices;

setting the conditions of the service items and a list of devices having the service items on the basis of the service items included in the devices; and

setting, based on a task to be performed by a host user, a list of service items forming the task.

5. The mode-based access control method of claim 1,

wherein the setting of the specific security mode comprises:

performing user authentication to check whether a user has an authority to set the security mode;

selecting a security mode that the user wants to set; and

synchronizing the ACLs of all the devices to be operated in the selected security mode.

6. The mode-based access control method of claim 5,

wherein the making the devices perform functions thereof comprises causing the devices having the synchronized ACLs to perform functions thereof according to the service item values of the devices.

7. The mode-based access control method of claim 2,

wherein the converting of the security mode comprises:

under the conditions that all or some of the devices in the home network are set in a security mode A and are synchronized, authenticating a user B, setting all or some of the devices to a security mode B, and synchronizing the devices by the user B; and

comparing a mode priority of the security mode A and the security mode B, resetting all or some of the devices to the security mode having a higher mode priority, and synchronizing the devices.

8. The mode-based access control method of claim 7,

wherein the converting of the security mode further comprises, when the authentication of the user who sets the device to the security mode having a higher mode priority is released in the home network, setting the devices to the security mode having a lower mode priority in order to synchronize the devices.

9. The mode-based access control method of claim 1,

wherein the security mode list comprises:

a parent mode which is set by only a host user having unlimited authority for access to all the devices forming the home network;

a child mode which is set by a child user having limited authority for access to some of the devices, services or content provided by the devices; and

a guest mode which is set by a guest user that cannot access all the devices forming the home network but who has temporary access granted by the host user.

10. The mode-based access control method of claim 9,

wherein the guest mode has the highest mode priority, followed by the child mode and the parent mode.

21. A computer-readable recording medium comprising a program which allows a computer to execute the mode-based access control method of claim 1.

11. A mode-based access control device comprising:

an authentication unit which checks information on a user and authenticates the user;

a mode configuration unit which makes a security mode list indicating the security setting state of devices forming a home network;

a mode setting unit which sets a specific security mode selected from modes on the security mode list; and

an operating unit which causes the devices to perform functions thereof in the specific security mode.

12. The mode-based access control device of claim 11, further comprising:

a mode converting unit which converts the security mode when the authentication of a new user is performed or the authentication of an existing user is released.

13. The mode-based access control device of claim 11,

wherein the mode configuration unit comprises:

a mode editing unit which edits the security mode list by adding a new mode to the security mode list or by removing the existing mode from the security mode list;

a device list administrating unit which groups devices to be operated in the modes of the security mode list;

a device access control list (ACL) editing unit which provides information on ACLs of the devices to set service item values of the devices; and

a mode list administrating unit which reflects content produced by the device ACL editing unit in the security mode list.

14. The mode-based access control device of claim 13,

wherein the setting comprises:

a device-unit-setting method that sets the service items and the conditions of the service items on the basis of the devices;

a service-list-unit setting method that sets the conditions of the service items and a list of devices having the service items on the basis of the service items included in the devices; and

a task unit setting that establishes a list of service items forming task based on the task to be performed by a host user.

15. The mode-based access control device of claim 11, wherein the mode setting unit selects the security mode set by the authenticated user and further comprises an SC function unit which synchronizes ACLs of all the devices to be operated in the selected security mode.

16. The mode-based access control device of claim 15,

wherein the operating unit causes the device having the synchronized ACL to perform a function thereof according to the service item value of the device.

17. The mode-based access control device of claim 12,

wherein, with all or some of the devices in the home network set to a security mode A, when a user B is authenticated and the user B sets all or some of the devices to a security mode B, the mode converting unit compares the mode priorities of the security mode A and the security mode B and resets all or some of the devices to one of the security modes having a higher mode priority.

18. The mode-based access control device of claim 17,

wherein, when the authentication of a user who sets the security mode having a higher mode priority is released in the home network, the mode converting unit resets the devices to the security mode having a lower mode priority.

19. The mode-based access control device of claim 11,

wherein the security mode list comprises:

a parent mode which is set by only a host user having unlimited authority for access to all the devices forming the home network;

a child mode which is set by a child user having limited authority for access to some of the devices, services or content provided by the devices; and

a guest mode which is set by a guest user that does not have access to all the devices forming the home network except temporary access allowed by the host user.

20. The mode-based access control device of claim 19,

wherein the guest mode has the highest mode priority, followed by the child mode and the parent mode.