Patent Application
20050160185
The present invention falls within a technical field relating to a household electric appliance capable of connecting with a network, a server for relaying data between such a household electric appliance and other devices, and a method for communicating with the household electric appliance.
As the dispersion of networks, such as the Internet, and the like, a broader variety of household electric appliances have been connected to the networks. These household electric appliances are identified by addresses in communication.
Meanwhile, in recent years, the service of readily confirming whether or not accident happened to an aged person who lives alone, or the like, by monitoring the use status of a household electric appliance which is used in ordinary life, a so-called safety monitoring service, has been started.
In the case where such monitoring of the use status of a household electric appliances is performed using a household electric appliance which is connected to a network all the time, stringent access control needs to be exerted for privacy protection.
Although there are various known techniques for ensuring the security in networks, such as access control, and the like, stringent access control and communication flexibility (usability) are generally in a tradeoff relationship, and it is not necessarily easy to achieve both of them. Especially when an input/output interface with limited manipulability, such as an interface provided to a household electric appliance, is used and a primary user of the household electric appliance is an aged person, it is difficult to enforce complicated settings for access control.
Devices designed for the purpose of controlling permission for communication are disclosed in, for example, Japanese Unexamined Patent Publication No. 2001-36636 and Japanese Patent Publication No. 2,634,933. These devices impose restrictions on signaling in a line connection through a public line, or the like, or control the connection of lines by ID number verification at the time of an incoming call, and are therefore inapplicable to improvement of the security in a network which provides a connection all the time. The settings for line control are determined through a keyboard (operation panel) of a personal computer or a decoding terminal device. It is difficult to achieve both security and manipulability with a limited user interface of a household electric appliance.
In view of the above problems, an objective of the present invention is to readily ensure the security by access control, or the like, using a limited input/output interface of a household electric appliance without complicated setting manipulations.
In order to achieve the above objective, the first household electric appliance of the present invention is a household electric appliance capable of connecting with a network, comprising: a network interface which is connected to the network; and access control means for receiving only an access from one device having a predetermined address through the network interface to give the device a permission for communication.
With the above structure, only one device having a predetermined address can access the household electric appliance. Therefore, the security is readily ensured without complicated setting manipulations for authentication information, or the like, even when the household electric appliance is connected to the network all the time.
The second household electric appliance of the present invention is based on the first household electric appliance, wherein the device permitted for communication is a device to which a provider of the household electric appliance provides a service related to the household electric appliance.
The third household electric appliance of the present invention is based on the second household electric appliance, wherein the device permitted for communication has in advance information for specifying the household electric appliance to which the service is to be provided; and the household electric appliance further includes address transmission means for transmitting an address of the household electric appliance over the network, together with the information for specifying the household electric appliance, to the device permitted for communication.
The fourth household electric appliance of the present invention is based on the second household electric appliance, wherein the service related to the household electric appliance includes at least one of the service of controlling the household electric appliance, monitoring the status of the household electric appliance, or providing maintenance of the household electric appliance, the service of providing information related to the household electric appliance, and the service of relaying a communication between the household electric appliance and another communication device.
The fifth household electric appliance of the present invention is based on the fourth household electric appliance, wherein the household electric appliance is a refrigerator.
With the above structures, a user can receive various services related to the household electric appliance while the security is ensured as described above.
The sixth household electric appliance of the present invention is based on the fourth household electric appliance, wherein the device permitted for communication stores in advance information for specifying the household electric appliance and information for specifying a communication device whose communication is to be relayed; the device permitted for communication receives an address of the household electric appliance over the network together with the information for specifying the household electric appliance; the device permitted for communication stores registration information including the address of the household electric appliance and the information for specifying the communication device in conjunction with each other based on the information for specifying the household electric appliance, the information for specifying a communication device whose communication is to be relayed, and the address of the household electric appliance; the device permitted for communication provides the service of relaying a communication between the household electric appliance and the communication device according to the registration information; and the household electric appliance further includes address transmission means for transmitting the address of the household electric appliance, together with the information for specifying the household electric appliance, to the device permitted for communication.
The seventh household electric appliance of the present invention is based on the fourth household electric appliance, wherein: the device permitted for communication stores in advance information for specifying the household electric appliance and information for specifying a user of the household electric appliance; the device permitted for communication receives an address of the household electric appliance over the network together with the information for specifying the household electric appliance; the device permitted for communication stores registration information including the address of the household electric appliance and authentication information in conjunction with each other based on the information for specifying the household electric appliance, the information for specifying a user of the household electric appliance, and the address of the household electric appliance, the authentication information including the information for specifying the user of the household electric appliance and a password; the device permitted for communication provides the service of relaying a communication between the household electric appliance and the communication device according to the registration information; and the household electric appliance further includes address transmission means for transmitting the address of the household electric appliance, together with the information for specifying the household electric appliance, to the device permitted for communication.
The eighth household electric appliance of the present invention is based on the fourth household electric appliance, wherein: the device permitted for communication stores registration information including the address of the household electric appliance and authentication information in conjunction with each other, the authentication information including the information for specifying a user of the household electric appliance and a password; the device permitted for communication provides the service of relaying a communication between the household electric appliance and the communication device according to the registration information; and the household electric appliance further includes information acquisition means for acquiring information specifying the user which is stored by the device permitted for communication in memory means from which the household electric appliance can acquire information, and address transmission means for transmitting the address of the household electric appliance, together with the information for specifying the user, to the device permitted for communication.
With the above structures, an address of the household electric appliance, or the like, is securely stored in a device which is permitted to communicate with the household electric appliance, such as a relay server, or the like, and such device readily relays a communication between the household electric appliance and the communication device. Thus, even if a device which is directly permitted to establish a communication with the household electric appliance is one relay server, or the like, restrictions on a communication partner are relaxed without impairing the security.
The ninth household electric appliance of the present invention is based on the eighth household electric appliance, which further comprises: user specifying information storage means for storing the information that specifies the user, the information being obtained from the information acquisition means; and communication interruption means for interrupting a communication with the device permitted for communication if the information for specifying the user which is stored in the user specifying information storage means is different from the information for specifying the user which is newly obtained from the information acquisition means.
In the above structure, a communication with the server, or the like, is interrupted when the information that specifies the user is changed. For example, when the user is replaced with another by the transfer of the household electric appliance, or the like, the new user is prevented from using a service which is to be charged on the former user, and the former user is prevented from accessing the household electric appliance from a communication device whose communication is relayed by the server.
The tenth household electric appliance of the present invention is based on the fourth household electric appliance, wherein the another communication device whose communication with the household electric appliance is permitted to be relayed is modified only based on an instruction from the device having the predetermined address or an instruction from a device which is permitted for communication by the device having the predetermined address.
The eleventh household electric appliance of the present invention is based on the tenth household electric appliance, which further comprises: a display section for displaying information indicative of one or more devices whose communication can be permitted to be relayed due to the modification; and a manipulation section for receiving a selection manipulation among the devices displayed on the display section, wherein the modification/addition means modifies or adds the device whose communication is permitted to be relayed, according to the selection manipulation.
The twelfth household electric appliance of the present invention is based on the first household electric appliance, wherein the network interface is connected to the network via wireless communication.
The thirteenth household electric appliance of the present invention is based on the first household electric appliance, wherein: the access control means receives, at least in its default state, only an access from one device having the predetermined address to give the device a permission for communication; and the household electric appliance further includes modification/addition means for modifying or adding the device permitted for communication only based on an instruction from the device having the predetermined address or an instruction from a device which is permitted for communication by the device having the predetermined address.
The fourteenth household electric appliance of the present invention is based on the twelfth household electric appliance, wherein: a display section for displaying information indicative of one or more devices which can be permitted for communication; and a manipulation section for receiving a selection manipulation among the devices displayed on the display section, wherein the modification/addition means modifies or adds the device permitted for communication according to the selection manipulation.
The fifteenth household electric appliance of the present invention is based on the fourteenth household electric appliance, wherein the household electric appliance is a refrigerator.
With the above structures, a device permitted for communication can be modified or added, and a communication is permitted within a limited extent. Therefore, communication flexibility is improved without deteriorating the security. Especially, even when a network interface which accepts a wireless signal is used so that access control with a router, or the like, is difficult, the security is readily ensured.
The sixteenth server of the present invention is a server capable of communicating with a household electric appliance which receives only an access from one device having a predetermined address through a network interface to give the device a permission for communication, the server comprising: a relay permission database in which information for specifying a communication device whose data communication with the household electric appliance is permitted to be relayed is registered in conjunction with the household electric appliance; and relay means for relaying data between the household electric appliance and the communication device according to the information registered in the relay permission database.
With the above structure, even when the household electric appliance is accessed by limited devices which have a permission to access, a device, such as a personal computer, or the like, whose communication is permitted to be relayed by the server, can communicate with the household electric appliance by relaying of the relay means. Specifically, complicated settings, such as settings for communication permission in the household electric appliance, settings for relay permission in the server, or the like, may be determined using a personal computer which has a variety of user interfaces, or the like. Therefore, it is only required that simple display and manipulations are provided in the household electric appliance. Thus, convenience for a user of the household electric appliance is improved, while the high security is achieved as described above.
The seventeenth server of the present invention is based on the sixteenth server, which further comprises conversion means for converting data transmitted between the household electric appliance and the communication device to a format which complies with input/output interfaces of the household electric appliance and the communication device.
With the above structure, in each of the household electric appliance and other devices, display and manipulations are performed in accordance with the display characteristics and manipulation properties. Therefore, it may only be required that simple display and manipulations are provided in the household electric appliance. Thus, convenience is readily improved in both the household electric appliance and the other devices.
The eighteenth server of the present invention is based on the sixteenth server, which further comprises: permission device information storage means for storing information that specifies the household electric appliance and information that specifies the communication device; and registration means for registering the address of the household electric appliance and the information that specifies the communication device in conjunction with each other in the relay permission database when the address of the household electric appliance over the network is received from the household electric appliance together with the information that specifies the household electric appliance, based on the received information and the information stored in the permission device information storage means.
The nineteenth server of the present invention is a server capable of communicating with a household electric appliance which receives only an access from one device having a predetermined address through a network interface to give the device a permission for communication, the server comprising: a relay permission database in which authentication information is registered in conjunction with the household electric appliance, the authentication information being used for determining whether or not to permit relaying of data between the household electric appliance and another communication device; and relay means for relaying data between the household electric appliance and the communication device according to the information registered in the relay permission database.
Also with the above structures, convenience for a user of the household electric appliance is improved as described above, while high security is ensured.
The twentieth server of the present invention is based on the nineteenth server, which further comprises conversion means for converting data transmitted between the household electric appliance and the communication device to a format which complies with input/output interfaces of the household electric appliance and the communication device.
With the above structure, in each of the household electric appliance and other devices, display and manipulations are performed in accordance with the display characteristics and manipulation properties. Therefore, it may only be required that simple display and manipulations are provided in the household electric appliance. Thus, convenience is readily improved in both the household electric appliance and the other devices.
The twenty-first server of the present invention is based on the nineteenth server, wherein: the authentication information registered in the relay permission database includes information that specifies a user of the household electric appliance and a password; and the server further includes household electric appliance specifying information storage means for storing the information that specifies the household electric appliance, which is received together with the authentication information, in conjunction with the information that specifies the user, and registration means for registering the address of the household electric appliance and the authentication information in conjunction with each other in the relay permission database when the address of the household electric appliance over the network is received from the household electric appliance together with the information that specifies the household electric appliance, based on the received information and the information stored in the household electric appliance specifying information storage means.
The twenty-second server of the present invention is based on the nineteenth server, wherein: the authentication information stored in the relay permission database includes information that specifies a user of the household electric appliance and a password; and the server further includes user information output means for allowing memory means which is capable of exchanging information with the household electric appliance to store the information that specifies the user, and registration means for registering an address of the household electric appliance over the network, which is received from the household electric appliance based on the information stored in the memory means, and the authentication information in conjunction with each other in the relay permission database based on the address of the household electric appliance and the information that specifies the user.
The twenty-third server of the present invention is based on the twenty-second server, wherein: the memory means is a communication device capable of communicating with each of the household electric appliance and the server; and the user information output means transmits the information that specifies the user to the communication means.
The twenty-fourth server of the present invention is based on the twenty-second server, wherein: the memory means is a recording medium insertable to the household electric appliance or a device connected to the household electric appliance; and the user information output means records the information that specifies the user in the recording medium.
Also with the above structures, convenience for a user of the household electric appliance is improved as described above, while high security is ensured as described above.
The twenty-fifth communication method is a method for communicating with a household electric appliance, comprising the steps of: referring to a relay permission database in which a household electric appliance and a communication device are registered in conjunction with each other, the household electric appliance receiving only an access from one device which has a predetermined address through a network interface to give the device a permission for communication, the communication device whose data communication with the household electric appliance being permitted to be relayed; and relaying data between the household electric appliance and the communication device according to the information registered in the relay permission database.
The twenty-sixth communication method is a method for communicating with a household electric appliance, comprising the steps of: referring to a relay permission database in which a household electric appliance and authentication information are registered in conjunction with each other, the household electric appliance receiving only an access from one device which has a predetermined address through a network interface to give the device a permission for communication, the authentication information being used for determining whether or not to permit relaying data to/from the household electric appliance; and relaying data between the household electric appliance and the communication device according to the information registered in the relay permission database.
With the above structures, even when the household electric appliance is accessed by limited devices which have a permission to access, a device, such as a personal computer, or the like, whose communication is permitted to be relayed, can communicate with the household electric appliance by relaying at the step of relaying data. Complicated settings, such as settings for communication permission in the household electric appliance, settings for relay permission in the server, or the like, may be performed using a personal computer which has a variety of user interfaces, or the like. Therefore, it may only be required that simple display and manipulations are achieved in the household electric appliance. Thus, convenience for a user of the household electric appliance is improved, while the high security is ensured as described above.
Hereinafter, embodiments of the present invention are described with reference to the drawings.
(Embodiment 1)
Hereinafter, embodiment 1 of the present invention is described with reference to the drawings.
The refrigerator 101 and the relay server 103 have structures as shown in
A filter section 112 permits only a communication with a partner device having a specific IP (Internet Protocol) address. When the refrigerator 101 is in a default state, only a communication with the relay server 103 is permitted. It is preferable that various authentication protocols, IPsec protocol (Security Architecture for the Internet Protocol) of IPv6 (Internet Protocol version 6), or the like, are used for the purpose of improving the security of a communication between the refrigerator 101 and the relay server 103, or the like.
An network interface card (NIC) 113 performs a process of a communication protocol with the network 102.
A setting change section 114 changes the settings of a communication partner device which is permitted by the filter section 112 to communicate with the refrigerator 101.
A product number storage section 115 stores a product number allocated to the refrigerator 101.
An IP address storage section 116 stores an IP address which is uniquely allocated to the refrigerator 101 over the network 102.
An NIC 121 of the relay server 103 performs a process of a communication protocol with the network 102 as does the NIC 113.
A relay control section 122 relays a communication between the refrigerator 101 and the cellular mobile phone 105 or the personal computer 106. That is, even if the refrigerator 101 is capable of communicating only with the relay server 103 as described above, the relay function of the relay control section 122 allows the refrigerator 101 to communicate with the personal computer 106, or the like. Furthermore, the relay control section 122 ensures the communication security and provides communication flexibility without performing complicated setting manipulations in the refrigerator 101.
In a connectable device database 123, a partner device, data transmitted to/from which is relayed by the relay control section 122, is registered in conjunction with the refrigerator 101.
When data is relayed, a data conversion section 124 performs data conversion according to the differences in the input/output interface between the refrigerator 101 and the personal computer 106, or the like, whereby display and manipulations at the refrigerator 101 are simplified so as to be readily operated, while various display forms and manipulations can be performed at the personal computer 106, or the like.
An operation of the network system having the above structure is described.
At the default state as of sold, the refrigerator 101 is capable of communicating with the relay server 103 due to the communication control by the filter section 112. For example, by registering access terminals, data transmitted to/from which is relayed by the relay server 103, such as the cellular mobile phone 105, the personal computer 106, or the like, in the relay server 103 when the refrigerator 101 is sold, communications between the refrigerator 101 and the access terminals are enabled under relay control by the relay control section 122. More specifically, relay of data is performed by the registration process and communication process which are shown in
The relay control is performed in the relay control section 122 based on the above registration, whereby a communication is established between the refrigerator 101 and the cellular mobile phone 105.
The personal computer 106 generally has a relatively large screen and an input device, such as a keyboard, a mouse, and the like, and therefore can readily offers various input and representation methods which use a Web browser, for example. Even if the refrigerator 101 has a relatively small screen or can make a selection from only two or three choices with a touch panel or several buttons, message conversion by the data conversion section 124 helps to offer display that is readily observed and an operation method that enables easy operations. In such a conversion, the name of a sender, e.g., “from Mr./Ms. xxx” as shown in
As described above, the relay function of the relay control section 122 of the relay server 103 is utilized for data transmission/reception, whereby flexible communications are achieved without decreasing the security or making complicated setting manipulations at the refrigerator 101.
As described above, due to the relay function of the relay server 103, modifications to and addition of access terminals which can communicate with the refrigerator 101 can be realized by changing the registered information in the connectable device database 123 of the relay server 103. These modifications can readily achieved using, for example, the personal computer 106, or the like, with a user interface having high manipulability, without requiring any manipulation at the refrigerator 101.
Alternatively, in the same manner, a communication with a server other than an access terminal may be relayed by the relay server 103. For example, it is considered to be realistic in view of user support and maintenance that the relay server 103 which is connected at the time of sales of the refrigerator 101 is provided by a party which is related to the distribution of the relay server 103, such as the manufacturer, retailer, post-sale support company of the refrigerator 101, or the like. On the other hand, however, the variety of services is increased by making one or more of various services, such as provision of information, or the like, selectable according to the preference of a user, the cost, or the like. Alternatively, various services may be collectively offered to user's products of different manufacturers. Specifically, the information registered in the connectable device database 123 is changed such that a communication between the refrigerator 101 and an ASP server 141, which is a server of a application service provider, such as a provider of an information providing service, is relayed by the relay server 103, for example, as shown in
Specific examples of the above services include recipe information provided to cooking devices, descriptions provided to washing machines about the materials of cloths and how to wash them, maintenance information provided to air conditioners, such as a notice of filter exchange, and the like, provision of information (contents), such as product information (information about new products and replacement purchases), and the like, mechanical breakdown diagnosis and malfunction detection notice, unattended (programmed) recording in recording devices, information about device control, such as power control for energy saving, etc. Further, the service of confirming the safety of a user by checking the opening/closing of the door of the refrigerator 101 from the personal computer 106, or the like, or by receiving a mail which includes such information, and the service of confirming the temperature of a warehouse or food stocks in the warehouse from the cellular mobile phone 105, or the like, are also possible.
The settings for receiving other services from the other servers as shown above may be determined by the personal computer 106, or the like. Alternatively, for example, the settings can be readily determined by displaying candidate service provider companies (servers) such that they are selectable by the operation of a key or touch panel as shown in
Further, as shown in
In
The display and manipulations at the refrigerator 101 are not limited to those achieved with the display panel 101a and the touch panel 101b, but various devices may be employed. Since complicated setting manipulations can be performed by the personal computer 106, a simplified image display which enables a user to make a selection among several choices while observing a simple screen is offered, instead of improving the multi-functionality, whereby the manipulability is improved for a user who is not accustomed to manipulating devices. The display panel 101a, or the like, is not necessarily fixed to the refrigerator 101, but may be a detachable slave device which can establish a communication with the main part of the refrigerator 101 by wireless, or the like. In this case, exchange of massages can be performed at a place outside the kitchen, and thus, the convenience is further improved. Such slave device, or the like, produces only a low output, and therefore, the power consumption thereof is readily reduced. Further, it is not necessary to subscribe to a public line service, and communications are established only between the slave device and the main part of the refrigerator 101. Thus, the security level may be relatively low.
(Embodiment 2)
Hereinafter, a network system is described wherein determination whether or not to permit use of services, such as relaying of communications, at the cellular mobile phone 105, or the like, is made not with an access terminal ID as described above, but with a user ID. It should be noted that, in the following embodiments, components having the same functions as those of the components of embodiment 1 are denoted by the same reference numerals, and descriptions thereof are omitted.
Although the refrigerator 101 of embodiment 2 is the same as that of embodiment 1 as shown in
In this network system, registration of a user and establishment of a communication are performed as described below and as shown in
The relay control is performed in the relay control section 122 based on the above registration, whereby a communication is established between the refrigerator 101 and the cellular mobile phone 105. This communication is the same as that of embodiment 1 (
(Embodiment 3)
A network system of embodiment 3 can establish a communication between the cellular mobile phone 105 and the refrigerator 101. As shown in
The information registered in the connectable device database 123 of the relay server 103 as described above are the same as those of the example described in embodiment 2, and based on these information, the relay control (Steps (A) to (D) described in embodiment 1) is performed in like manner. It should be noted that, since the user ID and password transmitted from the relay server 103 at the time of user registration are received and retained by the cellular mobile phone 105, the entry manipulation of the user ID and password can be omitted when the user accesses the refrigerator 101 by using the cellular mobile phone 105.
(Embodiment 4)
In the network system of embodiment 3, as shown in
In embodiment 4, for example, when the owner of the refrigerator 101 is changed after the registration in the relay server 103 has been completed, the original user registration is deleted. Specifically, as described above, the router 152 periodically multicasts the user ID based on the IC card 162 inserted therein. If the refrigerator 101 is transferred to another user and is connected to a network where an IC card 162 of a different user is inserted in the router 152, the user ID notified by the router 152 is different from a user ID stored in the user ID storage section 117 of the refrigerator 101.
When such a mismatch is detected, the principal part controller 111 interrupts the use of services through the relay server 103, whereby a new user is prevented from using a service which is to be charged on the former user, and the former user is prevented from accessing the refrigerator 101 from the cellular mobile phone 105. When the above mismatch is detected, for example, registration is conducted at the relay server 103 with a new user ID on user's permission, or registered information of the former user which are associated with the refrigerator 101 may be deleted on user's permission. In the above case, if the refrigerator 101 is temporarily used by the different user and the former user uses the refrigerator 101 again, the registered information is kept aside without being completely deleted such that the registered information can be used again when the former user uses the refrigerator 101 again.
In order to achieve an appropriate operation even when the user is changed, it is only required that the refrigerator 101 and a device for storing the user ID are separated from each other. Thus, for example, the user ID may be transmitted to the router 152 through the cellular mobile phone 105 as in embodiment 3. Alternatively, another device connected to the local network may store the user ID.
(Other Features)
In embodiments 1 to 3, change of the user cannot be directly detected as in embodiment 4, and therefore, it is difficult to automatically delete the user registration. However, it is easy to manually delete the user registration. Specifically, the user registration information relating to the refrigerator 101 may be deleted from the retailer terminal 107 as in the user registration operation of embodiments 1 and 2 or may be deleted from the cellular mobile phone 105 as in the user registration operation of embodiment 3. Alternatively, in one possible example, deletion of the registered information is requested to the relay server 103 using the cellular mobile phone 105, and a registration deletion command, or the like, which is transmitted from the relay server 103 according to the request, is supplied to the refrigerator 101 through the cellular mobile phone 105 or the IC card 162, such that the refrigerator 101 notifies the relay server 103 about the final deletion. In this case, even if the password is leaked out, the security is still high because the final deletion is not notified when the refrigerator 101 is not on hand. Furthermore, a request for deletion may be made to the relay server 103 by manipulating the touch panel 101b of the refrigerator 101.
As described above, according to the present invention, the security is readily ensured by access control, or the like, using a limited input/output interface of a household electric appliance without complicated setting manipulations.
| Number | Date | Country | Kind |
|---|---|---|---|
| 2001-382222 | Dec 2001 | JP | national |
| Filing Document | Filing Date | Country | Kind |
|---|---|---|---|
| PCT/JP02/13117 | 12/16/2002 | WO |
