KR20110008964A - Remote access service profile setting method and user authentication method for remote accessing upnp devices - Google Patents

Abstract

PURPOSE: A remote access service profile setting method is provided to efficiently performing an authentication procedure about a user who requests remote access to a home the UPNP device. CONSTITUTION: A user's UPNP(Universal Plug and Play) device information among RA(Remote Access) service profile is set based on UPNP device information received from a user's RA agent(S103). A UPNP device which is sharing with at least one user and ID among RA service profile information is set(S104). The RA agent receives the UPNP device information obtained through the SSDP(Simple Service Discovery Protocol) multicast message which is transmitted from the premises UPNP device.

Description

Remote access service profile setting method and user authentication method for remote accessing UPNP devices}

The present invention relates to a remote access service profile setting method and user authentication method for providing a remote access service for a universal plug and play device in a home.

Universal Plug and Play (hereinafter referred to as UPNP) protocol is an IP (IP) based standard protocol used for communication between devices in the home.

Recently, standardization of UPNP remote access (RA) technology for providing the same service as that located in a home to a remote device located outside is in progress. According to the UPNP RA standard, an in-house device performs a remote access server (RAS) function, and an external remote device is called a remote access client (RAC). It is necessary to perform the function. In addition, the Remote Access Transport Agent (hereinafter referred to as 'RATA') performs a function of providing a communication channel between the RAS and the RAC, and the Remote Access Discovery Agent (hereinafter referred to as 'RADA'). ) Performs the function of synchronizing information between remote locations, that is, reproducing information on UPNP devices located at a local site as it is at the remote site.

On the other hand, RAS and RAC provide RATA Config service and RADA Config service to set up RATA and RADA functions, and RAS provides inbound connection settings for setting up connection request processing from remote sites. Inbound Connection Config, hereinafter referred to as 'ICC') service. These RATA Config, RADA Config and ICC services are called through a separate management console located in the home.

As mentioned above, according to the UPNP RA standard, RATA Config, RADA Config, and ICC services should be called by a management console located in the home before allowing remote access to a specific device. Conventionally, the setting of the RA function through the management console is entirely performed by the home network operator, that is, the general user. Therefore, there is a need to provide a more convenient and automated RA function setting method.

Meanwhile, the UPNP RA standard specifies an authentication function for a user who requests remote access to an UPNP device as out of scope. Therefore, there is a need to provide an authentication method for a user who requests a remote access to a home UPNP device at a remote location.

The technical problem to be achieved by the present invention is to increase the convenience of setting the RAC and RAS, and to provide a remote access service profile setting method and user authentication method for efficiently authenticating a user requesting a remote access to the home UPNP device from a remote location will be.

In order to achieve the above object, a remote access authentication server according to a feature of the present invention sets up a remote access service profile of a user to provide a remote access service for a universal plug and play (UPNP) device in a home. How to

Setting retained UPNP device information of the user among information included in the remote access service profile based on UPNP device information received from the remote access agent of the user; And setting at least one ID of at least one user who is in a sharing relationship with the user and UPNP device information being shared with the at least one user among information included in the remote access service profile.

In addition, the remote access authentication server according to another aspect of the present invention authentication method for a user who requested to share in order to provide a remote access service to the home UPNP device,

Setting up a remote access service profile including IDs of at least one user who is shared with a corresponding user for each user and UPNP device information being shared with the at least one user; Transmitting a remote access service profile of the first user to a remote access agent connected using an ID of the first user; Receiving, from the remote access agent, an IP address of a user who requested sharing with the remote access agent; Searching for a session corresponding to the IP address among preset sessions; And transmitting the ID of the user corresponding to the retrieved session to the remote access agent.

In addition, the remote access authentication server according to another aspect of the present invention to authenticate a user who requested to share in order to provide a remote access service to the home UPNP device,

Setting up a remote access service profile including IDs of at least one user who is shared with a corresponding user for each user and UPNP device information being shared with the at least one user; Receiving an IP address of a user requesting sharing to the remote access agent and UPNP device information requested for sharing from a remote access agent connected using an ID of a first user; Searching for a session corresponding to the IP address among preset sessions; Performing authentication on the sharing authority of the user who requested the sharing by comparing the ID of the user corresponding to the searched session and UPNP device information requested for sharing with the remote access profile of the first user; And forwarding the authentication result to the remote access agent.

According to an embodiment of the present invention, it is possible to increase the convenience of RA agent setting and efficiently perform an authentication process for a user who requests a remote access to a home UPNP device at a remote location.

DETAILED DESCRIPTION Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art may easily implement the present invention. The present invention may, however, be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. In the drawings, parts irrelevant to the description are omitted in order to clearly describe the present invention, and like reference numerals designate like parts throughout the specification.

Throughout the specification, when a part is said to "include" a certain component, it means that it can further include other components, without excluding other components unless specifically stated otherwise.

Now, to provide a remote access (Remote Access, hereinafter referred to as "RA") service for the universal plug and play (Universal Plug and Play, hereinafter referred to as "UPNP") device in accordance with an embodiment of the present invention The remote access service profile setting method and the user authentication method will be described in detail with reference to the drawings.

FIG. 1 schematically illustrates a service network according to an embodiment of the present invention, and FIG. 2 illustrates an example of RA service profile setting according to an embodiment of the present invention.

Referring to FIG. 1, the RA authentication server 100 sets and stores an RA service profile for each user. In addition, the RA agent 200 generates and manages a session for a user who logs in, and generates and stores session information about the generated session. Here, the RA agent 200 corresponds to a remote access server (Remote Access Server, hereinafter referred to as "RAS") or a remote access client (Remote Access Client, referred to as "RAC"), RAS and RAC are each in-house It may be located at a home gateway and a remote terminal of a user.

In addition, the RA authentication server 100 may interwork with the RA agent 200 to perform remote access, that is, authentication of a user who requests sharing of the home UPNP device of the corresponding RA agent 200. Here, the RA authentication server 100 uses the session information for the RA service profile or currently established sessions for authentication of the user who requested sharing.

Meanwhile, the RA authentication server 100 may transmit and share corresponding RA service profiles to RA agents 200 of users who have a sharing relationship with each other, thereby allowing the users to authenticate the user who requested sharing with reference thereto. have.

The RA service profile includes the user ID (ID) of the corresponding user, retained UPNP device information (device list and device attribute information), the user ID of at least one user that is shared with the corresponding user, and the shared UPNP device. And information (at least one of a user ID allowed to share with the UPNP device owned by the corresponding user and the share allowed UPNP device information, and a user ID and UPNP device information to which the corresponding user is to share the UPNP device).

2 illustrates an example of RA service profile setting according to an embodiment of the present invention, wherein User K and User L in case User K shares Network-Attached Storage (NAS) located in Home B of User L are illustrated in FIG. For example, RA service profile. Referring to FIG. 2, User L has a PC, NAS, and TV, which are UPNP devices of Home B, and allows User K to share the NAS. In addition, UPNP device possessed by User K has a remote terminal PDA, and Use K is shared with User L's NAS. Accordingly, User K can play contents stored in the NAS corresponding to the media server among the UPNP devices owned by User L through his PDA.

Next, a remote access service profile setting method and a user authentication method for providing RA service to an in-house UPNP device according to a first embodiment of the present invention will be described in detail with reference to FIGS. 3 to 6.

3 is a flowchart illustrating a method of setting a RA service profile according to a first embodiment of the present invention. 4 illustrates an example of collecting an UPNP device attribute by an RA agent according to the first embodiment of the present invention, and FIG. 5 illustrates an example of setting an RA service profile through an RA authentication server. .

Referring to FIG. 3, when the RA authentication server 100 accesses and logs in to the RA authentication server 100 through a user terminal (S101), the RA agent 200 of the corresponding user IP (IP). Check the address (S102). The user terminal may be the RA agent 200 or another terminal of the user such as a PC.

Therefore, the RA authentication server 100 recognizes the IP address of the user terminal as the IP address of the RA agent 200 according to the user's selection information input through the user terminal, or the IP address directly input by the user. The agent 200 recognizes the IP address.

The RA authentication server 100 confirming the IP address of the RA agent 200 in step S102 receives the UPNP device information (device list and device attribute information) held by the user from the RA agent 200 of the corresponding IP address. Then, the UPNP device information of the RA service profile is set based on the received UPNP device information (S103).

Meanwhile, the RA service profile is initially generated according to the RA service subscription procedure of the user, and can be changed at the request of the user. Therefore, every time a RA service profile is created and changed, a method of registering the UPNP device and attribute information of the corresponding device with the RA authentication server 100 one by one causes inconvenience to the user.

Therefore, in an embodiment of the present invention, the RA agent 200 receives a Simple Service Discovery Protocol (SSDP) multicast message transmitted by UPNP devices in the home, and uses the attribute information of the UPNP device included in the received message to UPNP. Create device information. Then, the generated UPNP device information is transmitted to the RA authentication server 100. 4 is an example of device attribute information included in an SSDP multicast message transmitted by a PC which is a UPNP device located in Home B. The RA agent 200 located in Home B generates a list of UPNP devices in Home B using the same. do.

If the UPNP device information is set in step S103, the RA authentication server 100, based on the selection information input from the user terminal, the user ID to allow sharing and the sharing permission UPNP device information, the ID of the user to be shared and the UPNP device to be shared Information is set (S104). FIG. 5 illustrates the above-described RA service profile setting process of the RA authentication server 100 in the form of a user interface.

6 is a flowchart illustrating a user authentication method of an RA authentication server according to a first embodiment of the present invention.

Referring to FIG. 6, when a user accesses the RA authentication server 100 through the RA agent 200 and logs in using a user ID and a password (S201), the RA authentication server 100 may refer to S103 of FIG. 3. As in step S202, UPNP device information is received from the RA agent 200 (S202). In this case, the RA agent 200 may access the RA authentication server 100 and log in in various ways. The RA agent 200 may drive a separate access program to allow the user to directly enter a user ID and password to access the RA authentication server 100 or the RA agent using a previously stored user ID and password. When booting the 200, the RA authentication server 100 may be automatically accessed.

Then, the RA service profile corresponding to the user ID used for login is searched and read from among the RA service profiles set through the above-described steps of FIG. 3. The UPNP device information included in the corresponding RA service profile is compared with the UPNP device information received from the RA agent 200. If there is a change, the UPNP device information of the RA service profile is updated based on the UPNP device information received from the RA agent 200. For example, when a PC, which is an UPNP device, is assigned a private IP address using the Dynamic Host Configuration Protocol (DHCP) method, the IP address at the time of connection may be different from the IP address of the corresponding PC included in a pre-stored RA service profile. Therefore, in such a case, it is necessary to update the RA service profile to reflect the changed IP address.

The RA authentication server 100 confirming the UPNP device information in step S202 creates a session for the RA agent 200 connected afterwards. In operation S203, session information about the generated session is generated and stored.

In the first embodiment of the present invention, the RA authentication server 100 generates a session every time a user login occurs in preparation for accessing the RA authentication server 100 at several places by sharing one user ID. Create session information for the session. Then, the timer for validating the session is driven, and if the timer exceeds a preset value, the session is deleted. Therefore, the RA agent 200 requiring continuous communication needs to extend the session by performing a re-login process and initializing the timer before the timer exceeds a preset value.

Meanwhile, the RA authentication server 100 that has generated session information on the RA agent 200 checks the ID of a user who is in a sharing relationship with the corresponding user among the RA service profiles of the corresponding user, that is, the user who is allowed to share and the ID of the user to be shared. (S204). Based on this, session information about a session corresponding to a user ID having a sharing relationship among the preset sessions is inquired (S205). In addition, the RA service profile of the user corresponding to the current session is obtained using the IP address of the current session and the IP address corresponding to the inquired session information, that is, the RA agent 200 connected to the current session and the RA agents connected to the inquired session. Transfer (S206). Accordingly, the RA service profile of the RA agents of the users who are in the sharing relationship with each other, that is, the sharing agent of each other, is shared.

Then, when a user requests a sharing request for the UPNP device he owns, based on the RA service profiles received from the RA authentication server 100 to determine whether the IP address used in the sharing request is the user's IP address sharing relationship with the user The sharing request is authenticated as valid.

Next, a user authentication method for providing an RA service for an in-house UPNP device according to a second embodiment of the present invention will be described in detail with reference to FIG. 7.

Meanwhile, since the RA service profile setting method for providing the RA service for the home UPNP device according to the second embodiment of the present invention is the same as the RA service profile setting method of the first embodiment of the present invention described above, it will be described in detail below. Omit.

7 is a flowchart illustrating a user authentication method for providing an RA service to an in-house UPNP device according to a second embodiment of the present invention.

Meanwhile, steps S301 to S303 in the user authentication method according to the second embodiment of the present invention are similar to steps S201 to S203 of the first embodiment, and thus detailed descriptions thereof will be omitted below.

Referring to FIG. 7, when a login using a user ID and a password occurs in steps S301 to S303, and a session is generated with the RA agent 200 used for login, the RA authentication server 100 uses the user used for login. The RA service profile corresponding to the ID is searched among the prestored RA service profiles (304). The searched RA service profile is transmitted to the IP address corresponding to the current session, that is, the RA agent 200 connected to the current session (S305).

Then, when the RA agent 200 of the currently established session receives a sharing request for the UPNP device from a remote location, the RA agent 200 transmits the IP address used for transmission of the sharing request to the RA authentication server 200.

Receiving an IP address used for a sharing request from the RA agent 200 (S306), the RA authentication server 100 searches for a session corresponding to the received IP address among the set sessions using previously stored session information (S307). ). Then, the user ID corresponding to the retrieved session is transmitted to the RA agent 200 of the current session (S308).

Upon receiving this, the RA agent 200 performs an authentication process for the user who requested the sharing based on the RA service profile received in step S305, and confirms whether the user who requested the sharing has a legitimate sharing authority. That is, by checking whether there is a user ID that matches the user ID received from the RA authentication server 100 among the IDs of the sharing permission users included in the RA service profile, the sharing authority of the user who requested the sharing is checked.

Next, a user authentication method for providing an RA service for a home UPNP device according to a third embodiment of the present invention will be described in detail with reference to FIG. 8.

Meanwhile, since the RA service profile setting method according to the third embodiment of the present invention is the same as the RA service profile setting method of the first embodiment of the present invention, a detailed description thereof will be omitted below.

8 is a flowchart illustrating a user authentication method for providing an RA service to an in-house UPNP device according to a third embodiment of the present invention.

Meanwhile, steps S401 to S405 in the user authentication method according to the third embodiment of the present invention are similar to steps S301 to S305 of the second embodiment, and thus detailed descriptions thereof will be omitted below.

Referring to FIG. 8, when the RA agent 200 receiving the RA service profile of the corresponding user from the RA authentication server 100 through S401 to S405 is received, a sharing request for the UPNP device is received from a remote location. The IP address used for the transmission of the sharing request and information on the UPNP device that is requested to share the information is transmitted to the RA authentication server 200.

Upon receiving this (S406), the RA authentication server 100 searches for a session corresponding to the received IP address among preset sessions using previously stored session information (S407). The user ID corresponding to the searched session is searched for, and the searched user ID and UPNP device information requested for sharing received from the RA agent 200 are shared with the user ID and the sharing permission UPNP device information included in the RA service profile. In comparison, the authentication process for the sharing authority of the user who requested the sharing is performed (S408). Then, the authentication result of the sharing authority of the user who requested the sharing is transmitted to the RA agent 200 (S409).

Here, the RA authentication server 100 determines that there is no sharing authority when the session corresponding to the received IP address is not found or the user ID requesting sharing does not have the sharing authority for the UPNP device receiving the sharing request. 200). On the other hand, if it is determined that the user ID requesting the sharing has the sharing authority for the UPNP device requesting the sharing, it transmits the sharing authority to the RA agent 200.

Upon receiving this, the RA agent 200 allows or denies sharing to the UPNP device that has been requested to share according to the authentication result of the sharing authority received from the RA authentication server 100.

As described above, the RA agent 200 collects UPNP device information held by the user based on the SSDP multicast message transmitted between UPNP devices, so that the user connects to the RA authentication server 100 to set the RA service profile. Since there is no need to register the UPNP device and input the attribute information of the UPNP device, user convenience is increased.

In addition, the RA authentication server 100 sets the RA service profile for each user to allow sharing with the user's ID and the UPNP device information to be shared, and thus, the sharing authority authentication process for the user who requested the sharing is more efficient. There is an effect that can be performed with.

The embodiments of the present invention described above are not only implemented by the apparatus and method but may be implemented through a program for realizing the function corresponding to the configuration of the embodiment of the present invention or a recording medium on which the program is recorded, The embodiments can be easily implemented by those skilled in the art from the description of the embodiments described above.

Although the embodiments of the present invention have been described in detail above, the scope of the present invention is not limited thereto, and various modifications and improvements of those skilled in the art using the basic concepts of the present invention defined in the following claims are also provided. It belongs to the scope of rights.

1 schematically illustrates a service network according to an embodiment of the present invention.

2 illustrates an example of RA service profile setting according to an embodiment of the present invention.

3 is a flowchart illustrating a method of setting a RA service profile according to a first embodiment of the present invention.

4 illustrates an example of collecting an UPNP device attribute by an RA agent according to the first embodiment of the present invention.

5 illustrates an example of setting an RA service profile through an RA authentication server according to the first embodiment of the present invention.

6 is a flowchart illustrating a user authentication method of an RA authentication server according to a first embodiment of the present invention.

7 is a flowchart illustrating a user authentication method for providing a RA service for a UPNP device according to a second embodiment of the present invention.

8 is a flowchart illustrating a user authentication method for providing a RA service for a UPNP device according to a third embodiment of the present invention.

Claims (13)

In the remote access authentication server to set up a user's remote access service profile to provide a remote access service for the universal plug and play (UPNP) device in the home, Setting retained UPNP device information of the user among information included in the remote access service profile based on UPNP device information received from the remote access agent of the user; And Setting an ID of at least one user who is shared with the user and information on UPNP devices being shared with the at least one user among information included in the remote access service profile; Remote access service profile setting method comprising a. The method of claim 1, The setting of the retained UPNP device information may include: Receiving, by the remote access agent, the UPNP device information obtained through a simple service discovery protocol (SSDP) multicast message transmitted from the in-house UPNP device from the remote access agent; Remote access service profile setting method comprising a. The method of claim 1, The at least one user's ID includes at least one user's ID to allow sharing with the UPNP device owned by the user and at least one user's ID having the UPNP device to be shared by the user. How to set up a remote access service profile. In the method of authenticating a user who requested a share in order to provide a remote access service to the UPNP device in the home, the remote access authentication server, Setting up a remote access service profile including IDs of at least one user who is shared with a corresponding user for each user and UPNP device information being shared with the at least one user; Transmitting a remote access service profile of the first user to a remote access agent connected using an ID of the first user; Receiving, from the remote access agent, an IP address of a user who requested sharing with the remote access agent; Searching for a session corresponding to the IP address among preset sessions; And Transmitting the ID of the user corresponding to the searched session to the remote access agent User authentication method comprising a. The method of claim 4, wherein Establishing a session with the remote access agent; Starting a timer for validating a session established with the remote access agent; And Deleting a session established with the remote access agent when the timer exceeds a preset value; User authentication method further comprising. The method of claim 4, wherein Delivering the remote access service profile of the first user, Updating a remote access service profile of the first user based on the UPNP device information received from the remote access agent; And Delivering an updated remote access service profile to the remote access agent User authentication method comprising a. The method of claim 6, The UPNP device information received from the remote access agent is collected by the remote access agent using a message transmitted from the UPNP device held by the first user. The method of claim 4, wherein The user ID corresponding to the searched session is used for authentication of the user who requested the sharing in the remote access agent. The method of claim 8, The authentication may be performed based on a result of comparing an ID of at least one user who is shared with the first user included in the remote access service profile of the first user and an ID of a user corresponding to the searched session. User authentication method. In the method of authenticating a user who requested a share in order to provide a remote access service to the UPNP device in the home, the remote access authentication server, Setting up a remote access service profile including IDs of at least one user who is shared with a corresponding user for each user and UPNP device information being shared with the at least one user; Receiving an IP address of a user requesting sharing to the remote access agent and UPNP device information requested for sharing from a remote access agent connected using an ID of a first user; Searching for a session corresponding to the IP address among preset sessions; Performing authentication on the sharing authority of the user who requested the sharing by comparing the ID of the user corresponding to the searched session and UPNP device information requested for sharing with the remote access profile of the first user; And Transferring the authentication result to the remote access agent User authentication method comprising a. The method of claim 10, Transferring the remote access service profile of the first user to the remote access agent User authentication method further comprising. The method of claim 10, Establishing a session with the remote access agent; Starting a timer for validating a session established with the remote access agent; And Deleting a session established with the remote access agent when the timer exceeds a preset value; User authentication method further comprising. The method of claim 10, Performing the authentication, Compare the ID of at least one user who is shared with the first user included in the first remote access service profile, the UPNP device information being shared with the ID of the user corresponding to the searched session, and the UPNP device information requested to be shared. Steps to User authentication method comprising a.

Images