DE102007046668A1 - Usable device e.g. printer, access providing method for computer, involves establishing connection between computer and usable devices via network based on device code, and installing driver for devices on computer based on device code - Google Patents

Abstract

The method involves reading a device code (240) from a memory unit of transponders (201, 211,221, 231,241) e.g. radio frequency identification tag (RFID) tag and wireless local area network (WLAN) tag, fixed to usable devices (21-24), using a reading device i.e. mobile telephone (141), attached to computers (11-14). A connection between the computer and the usable devices is established via a communication network (1) based on the device code. A driver for the usable devices is installed on the computer based on the device code. An independent claim is also included for a system for providing an access for a computer to a usable device via a communication network.

Description

In extensive communication networks with a variety of for authorized User or group of accessible resources or devices often the problem, a spatial one close, basically quickly available Device, like printer or scanner, over conventional Find and search for network search tools for use. Because conventional Network search tools, especially in the case of extensive communication networks, How big Corporate networks, aiming at an accurate picture of their complexity, designed a device search often tedious. This also applies to a navigation within a Directory of resources and devices within the communication network, many times over a big Number of hierarchical levels of the directory. Accordingly makes navigating within such a directory to find the device as often confusing, error prone and lengthy. in principle can solved these problems be that on devices Labels or cards with device IDs are attached. However, you can the device IDs then maybe also by unauthorized persons who, for example, do not have access to network search tools have to be read. In addition, a reading, recording and subsequent input the device identifier on a network computer uncomfortable and quite error prone.

Of the The present invention is therefore based on the object, a method for providing access to a computer over a communications network usable device to provide quick and easy access to the device.

These The object is achieved by a Method solved by the features specified in claim 1. advantageous Further developments of the present invention are specified in the dependent claims.

One An essential aspect of the present invention is that for the provision an access for a calculator on an over a communication network usable device a device identifier from a storage unit one on the device attached transponder by means of a computer assigned reader is read out. Based on the device identifier is a connection between the computer and the device via the Communication network established. This will make a faster and more user friendly Access to a via a communication network allows useable device.

The can be assigned to the computer reader For example, be a mobile phone that has a reading unit for reading of the transponder. A read device ID can then via standard computer interfaces, like a bluetooth, infrared or USB interface, from the mobile phone transferred to the computer become.

Corresponding a preferred embodiment of the method according to the invention is determined by the device identifier on the computer a driver for the device Installed. This can, for example, automatically and if necessary after a user confirmation respectively. In this way the comfort is increased, and it becomes potential Error sources, for example due to a manual installation a wrong device driver eliminated.

Of the Transponder can be for example an RFID tag or a WLAN tag. In the latter case, the reading device as a WLAN access point operated. Advantageously, the WLAN tag determines its location in a vicinity of the computer, a signal strength of a radio link to as a WLAN access point operated reading device and transmitted this as measurement result to the reading device. Such automated location of the Transponders carries to another increase ease of use.

Preferably is the device identifier encoded stored in the storage unit. An electronic key to decryption the encrypted equipment identity is granted at a Authorization available on the computer made, so that one Reading the device identifier by Unauthorized persons can be prevented. Alternatively or additionally the device identifier Protected by a code against unauthorized access in the storage unit be saved. In a readout attempt, the code is queried. An access to the device identifier will then only be granted if the code is correctly stated.

The The present invention will become more apparent from an embodiment closer to the drawing explained. It shows the

figure a schematic representation of a communication network with several Computers through which to a plurality of over the communication network usable devices by the method according to the invention can be accessed.

In the figure is a communication network 1 represented to which a network server 2 , a transmitting / receiving station 3 for wireless network access, multiple computers 11 - 14 and through the calculator 11 - 14 usable devices 21 - 24 are connected. At the devices 21 - 24 In the present exemplary embodiment, these are printers and scanners. The calculator 11 - 14 and devices 21 - 24 are distributed across multiple locations, buildings, and spaces within a large organization, such as an agency or a company. Authorized network users can also access the network server 2 access, for example for commissioning or maintenance work or for administration purposes.

At the network server 2 and on the devices 21 - 24 are transponders 201 . 211 . 221 . 231 . 241 attached. In memory units of the transponder 201 . 211 . 221 . 231 . 241 are identifiers of the server 2 or the devices 21 - 24 stored by which they are clearly identified and within the communication network 1 can be addressed. To provide access to a computer 11 - 14 on the server 2 or on one of the devices 21 - 24 is done by means of a computer 11 - 14 associated reader a device identifier from the storage unit of the server 2 or on the respective device 21 - 24 attached transponders 201 . 211 . 221 . 231 . 241 read. A server identifier 20 For example, during maintenance by a portable computer 11 of a service employee being called to the network server 2 within the communication network 1 to address.

to Fuse opposite Unauthorized access is the device identifier encoded stored in the respective storage unit. For decryption becomes an electronic key available on the computer made, if an appropriate user authorization exists. additionally can the device identifier protected by a code against unauthorized access in the Memory unit to be stored. At a Ausleseversuch becomes the code queried. If the code is correctly entered, it will become Access to the device identifier granted.

As a reading device can also be a mobile phone 141 be used, which has a reading unit for reading a transponder. The read device ID 240 Can then use a Bluetooth, infrared or USB interface from the mobile phone 141 on the calculator 14 be transmitted.

Based on the read device identifier is a connection between the respective computer 11 - 14 and the respective device 21 - 24 or server 2 over the communication network 1 built up. In addition, a suitable driver for the selected device is installed on the computer using the device ID. Such a driver may be, for example, from the network server 2 be retrieved.

For example, the device identifier is used to locate a printer or scanner through a network server 2 provided directory service significantly accelerated. In addition, by using a directory service for setting up a connection between a computer and a device that can be used via the communication network, it can be effectively ensured that only one user or computer, which is even assigned to a network domain, can access the device. Conversely, only one connection can be established to a device that is registered in a network domain. In this way, for example, unwanted manipulation of confidential data on an unregistered device can be prevented.

A directory service generally provides an association list that associates and manages properties to various network objects, such as users or machines. For a directory service, for example, the network server 2 managed database that stores information about the communication network such as users, user groups, and computers.

• – Lightweight Directory Access Protocol (LDAP),
• – Kerberos,
• – CIFS (Common Internet File System),
• – Domain Name System (DNS).

A directory system can be object-based or object-oriented. Objects are treated as data records and object properties as attributes. The objects are again stored in containers. For a realization of a directory system, for example, the following communication protocols or services can be used:

• Lightweight Directory Access Protocol (LDAP),
• - Kerberos,
• - CIFS (Common Internet File System),
• - Domain Name System (DNS).

One LDAP server provides information about users and their group affiliation ready. Also other objects, like digital certificates of a computer, are stored there in a directory.

Kerberos is a protocol that allows a user to receive a ticket Granting Ticket (TGT) must authenticate. The Ticket Granting Ticket allows a reference of service tickets for access to a selected service within the communication network. A user needs only once his password Enter to receive a Ticket Granting Ticket. A call from Service tickets will then be in background mode.

CIFS is a protocol for storing files in a communication network.

DNS serves to locate computer systems and to find service information. Also offers DNS, for example, due to its standardized protocol possibility for connection to the Internet.

object-based Support directory systems An inheritance of properties of an object to a child or derived objects. A derivative of a new object type can be simplified, for example, by using a schema which defines a procedure pattern for a derivative.

• – Ressourcen, wie Drucker, Scanner, Kameras,
• – Dienste, wie E-Mail,
• – Konten, wie Benutzerkonten, Gruppenkonten und Computerkonten.

In an object-based directory system, objects can be classified into the following categories:

• - resources, such as printers, scanners, cameras,
• - services, such as e-mail,
• - Accounts, such as user accounts, group accounts and computer accounts.

With An object-based directory service can be used by an administrator Organizing, providing objects within the communication network and monitor. Furthermore can Network users at the object level access restrictions be granted.

The on the devices 21 - 24 attached transponder 211 . 221 . 231 . 241 can be RFID tags or Wi-Fi tags. If Wi-Fi tags are used, they will be the computers 11 - 14 assigned reading devices each operated as a wireless access point. For locating in a vicinity of a computer, a WLAN tag determines, for example, a signal strength of a radio link to the respective reading device operated as a WLAN access point and transmits a resulting measurement result to the reading device.

alternative to RFID or Wi-Fi tags can also NEC tags (near field communication) are used. NEC based on a combination of a smart card and contactless connection techniques. NEC operates in a frequency range of 13.56 MHz and offers a Data transfer rate of up to 424 kbps with a range of about 10 centimeters, what kind of the present application is quite sufficient. As a reader can at NEC tags used an NFC-enabled mobile phone become. Such mobile phones are already commercially available.

The Application of the present invention is not to that described here embodiment limited.

Claims (7)

Method for providing access for a Calculator on an over a communication network usable device in which - from one Storage unit one on the device attached transponder by means of a computer assigned reader a device identifier is read, - based the device identifier a connection between the computer and the device via the communication network is built. The method of claim 1, wherein the basis of the device identifier on the computer a driver for that Device installed becomes. Method according to one of claims 1 or 2, wherein the transponder an RFID tag is. System according to one of claims 1 or 2, wherein the transponder is a Wi-Fi tag and the reading device is operated as a WLAN access point. The system of claim 4, wherein the WLAN tag is at its Locate in a near area of the computer a signal strength of a Wireless connection to as a WLAN access point operated reading device determined and transmitted a measurement result to the reading device. Method according to one of claims 1 to 5, wherein the device identifier encoded is stored in the memory unit, and in which an electronic key for decryption the encrypted equipment identity with a granted permission available on the computer is done. Method according to one of claims 1 to 6, wherein the device identifier protected by a code against unauthorized access in the Memory unit is stored, and in which the code in a Ausleseversuch is queried, and in which an access to the device identifier only with a code match granted becomes.