The present invention relates to a home server or a home controller, and especially to an apparatus, a system, and a method which can implement an internet-connection having a function for preventing an unjust access to the home server or the home controller.
As examples of information communication devices which access a telephone line by using a modem used mainly in a home, there are PCs (Personal Computers), PDAs (Personal Digital Assistances), and home servers such as a desktop box (hereafter referred to as a home server.) When communicating, such as accessing a telephone line by using a modem, a home server itself calls up the internet service provider in order to connect itself to an internet. Some home servers can respond to a call-up sent from an external telephone.
Here, an example of a method of accessing an internet via a telephone line by using a modem is described in pages 41 and 42 of a book “ALL CONCERNING AN INTERNET CAN BE FIGURED OUT BY DIAGRAMMATIC EXPLANATION” by Osamu Koizumi, Nihon Jitugyoh publishing company.
In the above conventional techniques, a home server which can respond to a call-up from an external telephone responds to all call-ups. It may give many chances of unjust accesses to the home server from the outside that the home server responds to all unspecified telephone-number calls from outside, which in turn causes security problems. Further, since the home server cannot be connected to an internet by a remote operation, if it is required to access the home server from the outside via an internet, it is necessary to connect the home server to an internet full-time. Thus, this increases the internet-connection charge (telephone charge), and also causes a security problem.
The present invention is aimed at providing a function for making it possible that a home server responds to a call-up from a specific sending source, and for connecting the home server.
To achieve the above objective, the present invention provides a home server, which receives a requirement sent from a sending source (a calling-up person or machine) via a communication line, offers an internet service, and controls equipment connected to a home server in its own home, said home server comprising: telephone number coincidence-checking means (a unit for confirming on a registration of a telephone number corresponding to a telephone accessing the home server) for determining whether or not it can be accepted to perform a requirement sent via said communication line; modem means for said requirement, which has been accepted by said telephone number coincidence-checking means; protocol-processing means for converting said requirement; internet service-offering means for offering an internet service corresponding to said internet service-requirement converted by said protocol-processing means to said sending source; and control means for controlling equipment in said home if said internet service-requirement, which is to be offered by said internet service-offering means, needs a control process concerning said internet service; and a service provider which receives said internet service and tries the performing of connection corresponding with the connection-requirement for said internet service, which has been required from the sending source.
Hereafter, details of the embodiments will be explained with references to
PC 60 is connected to a public telephone network via a telephone line 401. A home server 1 in a home 51 includes a unit 101 for checking on registration of a telephone number corresponding to a telephone accessing the home server 1 (telephone number coincidence-checking means.) The home server 1 is connected to the public telephone network 400 via a telephone line 40. Further, a FAX telephone 311 is connected to the public telephone network 400 via the home server 1 by using a telephone line 4001.
As the server 1, a gateway device in a home, a home controller, a desktop box, etc., can be assumed.
The device 60 is not restricted to a personal computer, and will be a device which includes a modem, or with which a modem can be used. Further, a PDA (Personal Digital Assistant) and a portable telephone can also be used as the device 60. The telephone lines 40 and 4001 can be implemented by any one of radio communication and fixed-line communication. The device 311 can possess only a time-shift function, or along with a facsimile function. Further, the home 51 can be any one of a detached house, a housing complex, a facility, or an apparatus installed in the open air, such as a vending machine.
In the following, the fundamental operations of this system of the embodiment will be explained mainly with reference to
Meanwhile, the telephone lines 40 and 4001 are connected to the public telephone network 400 and the FAX telephone 311, respectively. Further, the telephone lines 40 and 4001 are connected to each other in the unit 10100 which controls the home server 1 so as to be connected telephone lines under default conditions.
Operations of the unit 101 for checking on registration of a telephone number corresponding to a telephone accessing the home server 1 are explained below with reference to a flow chart shown in
In the operation in step 9017, the telephone response of the home server 1 is stopped, or will be stopped after the calling to the FAX telephone 311 is finished.
Meanwhile, the unit 10100 for controlling connection of the home server 1 to telephone lines, which is situated in the unit 101, can be implemented by using a circuit which switches connections among the telephone lines, and a control logic circuit. Also, a part or the whole of the control logic circuit can also be implemented using a control software program performed by a microcomputer. Further, the unit 10101 for retrieving telephone numbers can also be implemented using a telephone number-display function used by a telephone in which a telephone number-display service is provided by NTT (Nippon Telegraph & Telephone Corporation) is available, and a comparator for comparing a telephone number of a sending source with telephone numbers recorded in the list which has been registered in the data base 1011 for registering telephone numbers. The function of the comparator can also be implemented using a control software program performed by a microcomputer. Moreover, the signal-determining unit 10101 can be implemented by making use of a circuit portion for recognizing a signal, which is included in the modem 102.
With reference to
When a call-up is sent from a sending source to this home server, the BELL-calling unit 101003 detects the call-up, and turns on the switch 101002.The telephone number receiving module 101004 takes in the telephone number of the sending source, and sends the taken-in telephone number to the unit 10101 for retrieving telephone numbers. The unit 10101 for retrieving telephone numbers compares the telephone number of the sending source with the registered telephone numbers in the data base 1011. The result of the comparison is informed to the coincidence checking device 101006. If the telephone number of the sending source coincides with any one of the registered telephone number, the coincidence checking device 101006 connects the call-up to the signal-determination unit 10102, and it is determined whether or not the contents of the call-up is a modem-connection requirement for data transmission, for example, by a PC. Conversely, if the coincidence checking device 101006 determines that the telephone number is not registered, the switch 101002 is turned off. The determination results of the signal-determination unit 10102 is processed at the processor 101008. If the call-up sent from the sending source is a modem-connection requirement for data transmission, the processor 101008 switches the connection of the switch 101001 to the connection between the telephone line 40 and the modem 102. Otherwise, the processor 101008 disconnects the telephone line 40 from the telephone number receiving module 101004.
The present invention is effective for preventing unjust connection from the outside of the home server 1, which in turn improves the security of the home server 1, by the connection-control function of the home server 1, in which a connection of the home server 1 to only a telephone whose number is registered in advance, is permitted. Further, since only a requirement of connecting the home server 1 to the modem 102, which is sent from a telephone other than telephones whose numbers are registered in advance, is not accepted, operation requirements of other devices connected to the home server 1, such as the FAX telephone, are not hindered. Meanwhile, since a telephone number is not set in the telephone but in a switchboard to which a telephone is connected, it is very difficult to tamper with a telephone. Accordingly, using a telephone for authentication is an effective measure which improves the security of the home server 1, because it is assured that the switchboard is connected to a telephone line by which the telephone of the sending source is connected to the switchboard.
In this embodiment, although the FAX telephone 311 is connected to the telephone line 4001 connected to the home server 1, it is possible to connect the FAX telephone 311 to a telephone line installed in the home 51, situated in parallel to the telephone line 40. Also, if the FAX telephone 311 includes a FAX signal-determining means (determining of modem signals) which is the same signal-determining means of the unit 10102, it brings the same effects as those obtained by the above embodiment.
Meanwhile, in this embodiment, the analog type modem 102 is connected to the analog telephone-lines. However, the present invention can also be applied to a system in which a digital type transmission line such as ISDN is used.
A PC 62 in an office 52 is connected to an internet 410. The portable telephone 61 is connected to the internet 410 via a portable telephone network 43 and an internet-connection center 70 of the portable telephone 61. Further, the home server 1 in the home 51 is connected to an internet-connection service provider 71 via the telephone line 40 and the public telephone network 400. This service provider 71, which is connected to the internet 400, includes an internet-connection call service unit 7101.
The portable telephone 61 is a telephone having an internet-connection function, for example, an i-mode type portable telephone.
The connection requirement 71010 corresponds, for example, to URL (Uniform Resource Locator), that is: http://home page of service provider/a name of a registered user/.
The authentication unit 71013 executes the authentication processing by using a pair of an input LOGIN name and an input pass word, or only an input pass word.
The internet-connection call service 7101 is explained below with reference to a flow chart shown in
As described above, the connection between the internet-connection service provider 71 and the home server 1 in the home 51 has become possible. Further, if a terminal device can be connected to an internet, the terminal device can be connected to the home server 1 from anyplace. Therefore, it is not necessary to always connect the home server 1 to an internet, which in turn can reduce a telephone line-using fee or an internet-connection service charge. Furthermore, it has become possible to reduce unjust accesses from the outside, because continuous connection of the home server 1 to an internet becomes unnecessary.
In addition, if the access target of the connection-requirement is the home server 1 in step 9022, it is possible to prevent an unjust access required from the outside and improve the security of the home server 1, by connecting only a telephone, whose number is registered, to the home server 1, and not connecting a telephone, whose number is not registered, to the home server 1.
Even if the internet-connection call service 7101 does not include the authentication unit 71013, the service from the internet-connection service provider 71 to the home server 1 in the home 51 is possible. However, all PC sources which know the registered members can try to access the home server 1 via an internet to which the home server 1 is connected. This causes the deterioration in the security of the home server 1, and frequent connection to the home server 1.
Meanwhile, in the pay flow of the telephone fee, it is possible that the user 50 directly pay the fee to the telephone company not through the service provider 71.
Also, the telephone company 400 can execute a business of communication connection services. Moreover, the user 50 is not restricted to an individual, and the user 50 can be a legal entity.
The PC 60 is connected to the internet 410 via the access point 1 (711) in the route of the telephone line 401, the public telephone network 400, and the internet service provider. The home server 1 in the home 51 is connected to the access point 2 (710) via the telephone line 40, and the public telephone network 400. This access point 710 is connected to the internet 410, and includes an internet-connection call service unit 7101.
In the composition shown in
In the system composed in the embodiment, which is shown in
Selection of the e-mail address in step 9035 is possible by providing a list of telephone number of sending source—e-mail address pair, such as that shown in
Also, in step 9031, it is possible that the home server 1 does not use the unit 101 for checking on registration of a telephone number corresponding to the telephone accessing the home server 1, and alternatively, it is possible to check a password sent from PC.
In this embodiment, the I/O devices such as infrared ray send/receive devices 301 and 3011 are connected to the controllers 110 and 110i p. Moreover, infrared ray device-mounting components 321-32Q (Q is a positive integer) are connected to each other by an infrared ray signal 43 network. Also, infrared ray device-mounting components 3211-321R (R is a positive integer) are also connected to each other by an infrared ray signal 44 network. In addition, operations of respective group of the infrared send/receive components are controlled by a corresponding controller 110 or 110P.
Further, in this embodiment, the controller 1102 is incorporated into the household electrical appliance 1112.
The I/O devices 301-30M (M is a positive integer), such as an infrared ray sending device, an infrared ray receive device, a thermometer, a humidity indicator, a speaker, a microphone, an inverter, a household electrical appliance, etc. are to be controlled or monitored.
The network devices 1111-111S (S is a positive integer) are, for example, PDA (Personal Digital Assistances), a portable telephone, a network household electrical appliance, and so on.
The network 41 can be created by a network using telephone lines as typified by Ethernet or HomePNA, or a network using lighting lines as typified by HomePlug. The wireless network 42 can also be implemented by Bluetooth, Home RF, IEEE 802.11, etc.
In the system composition shown in
The telephone lines 40 and 401 are connected to the unit 101 for checking on registration of a telephone number corresponding to a telephone accessing the home server 1, and the LANs 41 and 42 are connected to the LAN controllers 1021 and 1022. Further, the I/O devices 301 and 30M (M is a positive integer) are connected to the I/O resource 105. The central part 10 includes a CPU core 103, an OS kernel 104, the I/O resource 105 such as a digital input/output device, an analog input/output device, a serial port typified by RS-232C, etc., LAN controllers 1021 and 1022, and various kinds of program groups which are executed by the CPU core 103.
Various kinds of program groups includes a modem driver 201, a PPP (Point-to-Point Protocol) 202, a PPP authentication program 2021, a TCP (Transmission control program)/IP (Internet Protocol), an application program-authentication program 205, application programs 2041-204L (L is a positive integer), a service task-authentication program 206, various types of service tasks 2071-207N, and 2081 -208k (N and K are positive integers), protocol stacks 2031 and 2032, and LAN drivers 2011 and 2012.
In this example shown in this figure, a WEB server 2041, a mail-sending program 2042, an application-control program 2043, a program 204L for monitoring application programs, are loaded. The service tasks 2071-207n perform the processing of input information to and output information from the various kinds of devices connected to the I/O resource 5. The service tasks 2081-208K monitor and control the units connected to the LANs 41 and 42. Further, the service task 2081 monitors and controls units connected to the LAN 41 via the protocol stacks 2031 and the LAN driver 2011. Further, the service task 208K monitors and controls units connected to the LAN 42 via the protocol stack 2032 and the LAN driver 2012 (for example, the ON/OFF controlling, or operation states of household electric appliances connected to LAN 42 shown in
The PPP authentication unit 2021 is an authentication service-implementing program using a LOGIN name and a pass word, and a user using the a remote terminal, who intends to access the controller 110 via the telephone line 40, cannot access the controller 110 if the sending source (the user) is not permitted by the authentication program. Further, the application program-authentication program 205 executes the authentication of performing each application program, and only an application program permitted by the application program-authentication program 205 can be performed. The service task-authentication program 206 executes the authentication of performing each of the service tasks 2071-207N, and 2081-208K, and only a service task permitted by the service task-authentication program 206 can be executed.
A method of the application program-authentication 205 is similar to that of the service task-authentication 206. That is, the application program-authentication 205 executes the authentication function by using the class level of each application group and its priority level of each application program.
As described above, since four authentication stages of checking on registration of the telephone number of the sending source, the PPP authentication, the application program-authentication, and the task service-authentication, are provided in the controller 110, an unjust access to the home server 1 from the outside can be prevented, which in turn can compose a network system in a home, whose security is remarkably improved.
Meanwhile, it is possible to compose a network system without one or more authentication functions in the above four functions.
Further, although the two kinds of the LANs 41 and 42 are connected to the controller 110 in
In accordance with the present invention, since the unit 101, which is included in the home server 1, for checking on registration of a telephone number corresponding a telephone accessing to the home server 1 connects a call-up of only a registered telephone number an unjust connection to the home server 1 from the outside can be prevented, the security of the home server 1 can be greatly improved.
Furthermore, only at a necessary time, it has become possible to connect a dial-up IP to the home server 1 from the internet-connection service provider 71. Therefore, it is not necessary to always connect the home server 1 to an internet-connection service provider, which in turn can reduce the telephone line-using fee and the internet-connection service charge. In addition, this can remarkably reduce the higher probability of that unjust accesses to the home server 1 from the outside due to continuous connection to the internet-connection provider.
Number | Date | Country | Kind |
---|---|---|---|
2000-386771 | Dec 2000 | JP | national |
This application is a continuation of U.S. patent application Ser. No. 09/916,348, filed Jul. 30, 2001, which is based on Japanese Patent Application No. 2000-386771, filed Dec. 15, 2000, the entire disclosures of which are hereby incorporated reference in their entirety.
Number | Date | Country | |
---|---|---|---|
Parent | 09916348 | Jul 2001 | US |
Child | 11357341 | Feb 2006 | US |