KR20230104404A - Security-enhanced Smart Hub Device and Smart Home Network System Including the same - Google Patents

Abstract

A smart hub device according to an embodiment of the present invention is a packet from any one of a home Internet network providing Internet service within one household and a home IoT network providing IoT service for IoT devices located within the one household. an input/output unit for receiving or outputting; and a controller that converts and outputs packets received from the home Internet network and determines whether or not to communicate with respect to packets received from the home IoT network, wherein the controller includes, for packets received from the home IoT network, When the packet permitting signal is received, the corresponding packet is output, and when the packet blocking signal is received, the corresponding packet is blocked.

Description

Security-enhanced smart hub device and smart home network system including the same {Security-enhanced Smart Hub Device and Smart Home Network System Including the same}

The present specification relates to a smart hub device with enhanced security and a smart home network system including the same.

Recently, interphones and video phones used in houses and multi-housing are being developed into home automation, home network, smart home, and IoT/AI. In particular, in the case of common houses, there are structural limitations to effectively provide IoT services. For example, a plurality of wall pads in a common house may exist on the same TCP/IP network, and thus a problem in accessing networks of different households may occur.

The technical task of the present invention is to provide a smart hub device with enhanced security and a smart home network system including the same.

A smart hub device according to an embodiment of the present invention is a packet from any one of a home Internet network providing Internet service within one household and a home IoT network providing IoT service for IoT devices located within the one household. an input/output unit for receiving or outputting; and a controller that converts and outputs packets received from the home Internet network and determines whether or not to communicate with respect to packets received from the home IoT network, wherein the controller includes, for packets received from the home IoT network, When the packet permitting signal is received, the corresponding packet is output, and when the packet blocking signal is received, the corresponding packet is blocked.

A smart hub device according to an embodiment of the present invention, It is possible to block communication of unacceptable packets by controlling communication between a home Internet network and a home IoT network within a household and communication with other households. Accordingly, security of the smart home network system according to an embodiment of the present invention can be improved.

1 is a diagram illustrating a smart home network system including a smart hub device according to an embodiment of the present invention.
2 is a block diagram of a smart hub device according to an embodiment of the present invention.
3 is a block diagram of first to fourth input/output units according to an embodiment of the present invention.
4 is a communication flowchart of a smart home network system according to an embodiment of the present invention.

Like reference numbers throughout the specification indicate substantially the same elements. In the following description, detailed descriptions of components and functions not related to the core components of the present invention and known in the art may be omitted. The meaning of terms described in this specification should be understood as follows.

Advantages and features of the present invention, and methods of achieving them, will become clear with reference to the detailed description of the following embodiments taken in conjunction with the accompanying drawings. However, the present invention is not limited to the embodiments disclosed below, but will be implemented in various different forms, only these embodiments make the disclosure of the present invention complete, and common knowledge in the art to which the present invention belongs. It is provided to fully inform the holder of the scope of the invention, and the present invention is only defined by the scope of the claims.

The shapes, sizes, ratios, angles, numbers, etc. disclosed in the drawings for explaining the embodiments of the present invention are illustrative, so the present invention is not limited to the details shown. Like reference numbers designate like elements throughout the specification. In addition, in describing the present invention, if it is determined that a detailed description of related known technologies may unnecessarily obscure the subject matter of the present invention, the detailed description will be omitted.

When 'includes', 'has', 'consists', etc. mentioned in this specification is used, other parts may be added unless 'only' is used. In the case where a component is expressed in the singular, the case including the plural is included unless otherwise explicitly stated.

In interpreting the components, even if there is no separate explicit description, it is interpreted as including the error range.

In the case of a description of a temporal relationship, for example, 'immediately' or 'directly' when a temporal precedence relationship is described in terms of 'after', 'following', 'next to', 'before', etc. It can also include non-continuous cases unless is used.

Although first, second, etc. are used to describe various components, these components are not limited by these terms. These terms are only used to distinguish one component from another. Therefore, the first component mentioned below may also be the second component within the technical spirit of the present invention.

The term “at least one” should be understood to include all possible combinations from one or more related items. For example, "at least one of the first item, the second item, and the third item" means not only the first item, the second item, or the third item, but also two of the first item, the second item, and the third item. It may mean a combination of all items that can be presented from one or more.

Each feature of the various embodiments of the present invention can be partially or entirely combined or combined with each other, technically various interlocking and driving are possible, and each embodiment can be implemented independently of each other or can be implemented together in a related relationship. may be

Hereinafter, referring to FIG. 1, a smart home network system according to an embodiment of the present invention will be described in detail.

1 is a diagram illustrating a smart home network system including a smart hub device according to an embodiment of the present invention.

Referring to FIG. 1 , a smart home network system 10 includes a home Internet network 100, a home IoT network 200, and a smart hub device 300 for one generation. At this time, the smart hub device 300 includes the smart hub device 300 included in both the home Internet network 100 and the home IoT network 200 . However, although FIG. 1 shows the smart home network system 10 for one household, it is not limited thereto, and an embodiment of the present invention may include a smart home network system for a plurality of households. In this case, the home Internet network 100, the home IoT network 200, and the smart hub device 300 included in both the home Internet network 100 and the home IoT network 200 may be included for each generation.

The home internet network 100 may include a smart hub device 300 , a backbone carrier network hub 110 , a wireless access point (AP) 120 , a wired terminal 131 and a wireless terminal 132 .

The backbone operator network hub 110 is connected to an external Internet network of a public IP band and provides Internet service within a household. The backbone carrier network hub 110 is connected to a wired terminal 131 having a wired communication function to provide Internet service within a household. To this end, the carrier network hub 110 may include a plurality of ports. At this time, the wired terminal 131 is connected to an external Internet network through the key carrier network hub 110 and the smart hub device 300 to provide Internet services to users. The wired terminal 131 may include a personal computer (PC) or set-top box having a wired communication function. In addition, the wired terminal 131 provides home entertainment services such as Internet TV (IPTV) and Video on Demand (VoD), data sharing, and home data communication such as Voice over IP (VoIP) and video telephony. It may include devices that provide services.

In addition, since the backbone carrier network hub 110 is located in the terminal box in the household together with the smart hub device 300, the home Internet network 100 or the home IoT network 200 in the household through the backbone carrier network hub 110 Since there is a security advantage that it is difficult for an outsider to access the backbone carrier network hub 110 to access, the backbone carrier network hub 110 can be physically separated based on one generation.

The wireless AP 120 may provide wireless Internet service by being connected to an external Internet network through a smart hub device 300 and a key carrier network hub 110 to be described later. The wireless AP 120 may provide a wireless Internet service to a user through a wireless terminal 132 such as a smart device having a wireless communication function through a wireless interface.

The wireless terminal 132 is connected to an external Internet network through the wireless AP 120 , the carrier network hub 110 and the smart hub device 300 to provide Internet services to users. The wireless terminal 132 may include a personal digital assistant having a wireless communication function, a smart phone, a mobile phone, a tablet computer, and a laptop computer. In addition, the wireless terminal 132 is connected to the Internet. It may include devices that provide home entertainment services such as TV (IPTV) and Video on Demand (VoD), data sharing, home data communication services such as Internet telephony (Voice over IP; VoIP) and video telephony. .

The home IoT network 200 includes a smart hub device 300 , a home IoT network server 210 , a wall pad 220 and an IoT device 230 .

The home IoT network server 210 is connected to an external Internet network of a public IP band, communicates with the IoT devices 230 according to a wired or wireless communication method, registers and stores information of the IoT devices 230, and IoT It can control the state of the devices 230 and collect and manage necessary information from the IoT devices 230 .

The wall pad 220 is a touch screen type display terminal attached to a wall, and displays information about the IoT devices 230 stored in the home IoT network server 210 and allows the user to control the IoT devices 230. interfaces can be provided. To this end, according to an embodiment of the present invention, the wall pad 220 may be connected to the home IoT network server 210 through the smart hub device 300.

The IoT device 230 may include smart appliances, security devices, lighting devices, energy devices, and the like located in households. For example, smart home appliances may be refrigerators, washing machines, robot vacuum cleaners, etc., security devices may be door locks, security cameras, security wires, etc., and energy devices may be power meters, power sockets, electrical outlets, power strips, etc. In addition, the IoT device 230 may further include an Internet Protocol (IP) camera, an Internet phone, a wired/wireless phone, and a mobile phone in the home.

As shown in FIG. 1, the smart hub device 300 is connected to the home Internet network 100 and the home IoT network 200. Specifically, the smart hub device 300 is connected to the backbone carrier network hub 110 and the wireless AP 120 to form the home Internet network 100, and the home IoT network server 210 and the wall pad 220 and Since they are connected to form the home IoT network 200, the smart hub device 300 can manage the home Internet network 100 and the home IoT network 200 in an integrated manner. In addition, the smart hub device 300 can prevent hacking between different generations and provide communication to a plurality of wired and wireless terminals 131 and 132 at the same time. In addition, the smart hub device 300 may provide IP settings and AS of the wireless AP 120 through remote access. Functions of the smart hub device 300 will be described later in detail with reference to FIGS. 2 to 4 .

2 is a block diagram of a smart hub device according to an embodiment of the present invention, and FIG. 3 is a block diagram of first to fourth input/output units according to an embodiment of the present invention. 4 is a communication flowchart of a smart home network system according to an embodiment of the present invention.

Referring to FIG. 2 , the smart hub device 300 is a network switching hub, and may block communication between the home Internet network 100 and the home IoT network 200 and communication with other generations. Accordingly, security of the smart home network system according to an embodiment of the present invention can be improved. To this end, the smart hub device 300 includes a power supply unit 310, an input/output unit 320, a control unit 330, and a storage unit 340.

The power supply unit 310 may supply power to a PoE circuit (PoE) connected to the smart hub device 300 and the first input/output unit 321 to be described later. At this time, the PoE circuit (PoE) may supply power to the connected input/output unit 320 using the IEEE 802.3af standard. To this end, the power circuit 310 may include, for example, an SMPS power supply and a DC/DC converter.

The input/output unit 320 is connected to the backbone operator network hub 110 and the wireless AP 120 of the home Internet network 100, the home IoT network server 210 and the wall pad 220 of the home IoT network 200, respectively. can To this end, the input/output unit 320 may include first to fourth input/output units 321 to 324, and each of the first to fourth input/output units 321 to 324 may include at least one port. there is. Specifically, as shown in FIG. 3, the input/output unit 320 includes first and second input/output units 321 and 322 respectively connected to the main operator network hub 110 and the wireless AP 120 of the home Internet network 100. ), and may include third and fourth input/output units 323 and 324 connected to the home IoT network server 210 and the wall pad 220 of the home IoT network 200, respectively.

The first input/output unit 321 inputs or outputs packets communicated with the wireless AP 120 . For example, the first input/output unit 321 may input or output a packet communicated with the terminal 130 having a wireless communication function through the wireless AP 120 . That is, as shown in FIGS. 2 and 3 , the first input/output unit 321 may be connected to the wireless AP 120 . According to an embodiment of the present invention, the first input/output unit 321 is an input/output unit for supplying Power over Ethernet (PoE), and may supply power to the wireless AP 120 connected to the first input/output unit 321. . To this end, the first input/output unit 321 may include a first port P1 as shown in FIG. 3 .

The second input/output unit 322 inputs or outputs packets communicated with the common carrier network hub 110 . That is, as shown in FIGS. 2 and 3 , the second input/output unit 322 may be connected to the key carrier network hub 110 . To this end, the second input/output unit 322 may include a second port P2 as shown in FIG. 3 .

The third input/output unit 323 inputs or outputs a packet communicated with the wall pad 220 . That is, the third input/output unit 323 may be connected to the wall pad 220 . To this end, the third input/output unit 323 may include third and fourth ports P3 and P4 as shown in FIG. 3 . At this time, any one of the third and fourth ports P3 and P4 is a spare port, and at least one of the third and fourth ports P3 and P4 may be connected to the wall pad 220 within the household.

The fourth input/output unit 324 inputs or outputs a packet communicated with the home IoT network server 210 . That is, as shown in FIGS. 2 and 3 , the fourth output unit 324 may be connected to the home IoT network server 210 . To this end, the fourth input/output unit 324 may include a fifth port P5 as shown in FIG. 3 .

The control unit 330 includes a first communication processing unit 331, a second communication processing unit 332, a control processing unit 333, a comparison unit 334 and a setting unit 335.

The first communication processing unit 331 performs Network Address Translation (NAT) on packets received from the home Internet network 100 and outputs the packets to the home Internet network 100 . Specifically, the first communication processing unit 331 is input to at least one of the first and second input/output units 321 and 322 connected to the backbone operator network hub 110 and the wireless AP 120 of the home Internet network 100, respectively. The network address of the packet is converted and output to one of the first and second input/output units 321 and 332 . For example, a packet transmitted from the wireless terminal 132 to an external Internet network is input to the first input/output unit 321 through the wireless AP 120, and the first communication processing unit 331 is the first input/output unit 321 ), network address translation (NAT) is performed on the packet input, and the public IP address is converted into a public IP address and outputted to the second input/output unit 322 connected to the network hub 110 of the key carrier. On the other hand, packets transmitted from the external Internet network to the wireless terminal 132 are input to the second input/output unit 322 through the backbone carrier network hub 110, and the second communication processing unit 332 receives the second input/output unit 322. ), network address conversion (NAT) is performed on the packet input, and the conversion into a private IP address is output to the first input/output unit 321 connected to the wireless AP 120.

The second communication processing unit 332 controls communication of packets received from the home IoT network 200 . That is, the second communication processing unit 332 performs communication between the third and fourth input/output units 323 and 324 respectively connected to the home IoT network server 210 and the wall pad 220 of the home IoT network 200, which will be described later. It is controlled according to the signal input from the control processing unit 333. Specifically, when the second communication processing unit 332 receives a packet permitting signal from the control processing unit 333, the second communication processing unit 332 receives input from either the third or fourth input/output unit 323 or 324. The packet is output to the other one of the first to fourth input/output units 321 to 334. Meanwhile, when the second communication processing unit 332 receives a packet blocking signal from the control processing unit 333, the second communication processing unit 332 receives a packet input to either the third or fourth input/output unit 323 or 324. block For example, the second communication processing unit 332 receives a packet permission signal from the control processing unit 333 for packets input from the wall pad 220 to the third input/output unit 323 and the home IoT network server 210 is the destination. Alternatively, a packet blocking signal may be received. When the second communication processing unit 332 receives a packet acceptance signal from the control processing unit 333 for the corresponding packet, the second communication processing unit 332 transmits the corresponding packet to the fourth input/output unit connected to the home IoT network server 210 ( 324). Meanwhile, when the second communication processing unit 332 receives a packet blocking signal from the control processing unit 333 for the corresponding packet, the second communication processing unit 332 blocks the corresponding packet.

In addition, since the first communication processing unit 331 and the second communication processing unit 332 are configured in a logically separated structure, the first communication processing unit 331 inputs input to one of the first and second input/output units 321 and 322. The second communication processing unit 332 may transmit a packet input to one of the third and fourth input/output units 323 and 324 to the other one. In addition, the first communication processing unit 331 cannot output packets input to any one of the first and second input/output units 321 and 322 to one of the third and fourth input/output units 323 and 324, and the second communication processing unit ( 332) cannot output a packet input to any one of the third and fourth input/output units 323 and 324 to either one of the first and second input/output units 321 and 322. Therefore, according to an embodiment of the present invention, the first communication processing unit 331 for controlling communication with respect to the home Internet network 100 and the second communication processing unit 332 for controlling communication with respect to the home IoT network 200 Since is logically separated, communication between the home Internet network 100 and the home IoT network 200 within the household can be effectively blocked.

According to an embodiment of the present invention, the control processing unit 333 controls communication between the first to fourth input/output units 321 to 324. Specifically, the control processing unit 333 provides a Dynamic Host Configuration Protocol (DHCP) service. That is, the dynamic host configuration protocol (DHCP) is a protocol that automatically provides the IP address of the host and the basic settings of the TCP/IP protocol to the client. You can automatically assign a name server address, IP address, and gateway address for a certain period of time. In addition, the control processing unit 333 provides a port forwarding/trigger function. The control processing unit 333 provides a port-based VLAN function. The control processing unit 333 provides a broadcast storm protection function. That is, the control processing unit 333 can prevent a broadcast storm caused by accumulation of broadcast and multicast traffic in the smart home network system. The control processing unit 333 provides Port Rate Limiting/Priority Queue functions. That is, the control processing unit 333 may limit the speed of packets transmitted through the smart hub device 300 .

The control processing unit 333 provides an IGMP Snooping function. That is, the control processing unit 333 can analyze the packet (IGMP) between the host and the router and deliver the corresponding packet only to the client that needs the corresponding packet. The control processing unit 333 provides an Application Level Gateway (ALG) function. ALGs manage protocols for specific applications, such as Session Initiation Protocol (SIP) and File Transfer Protocol (FTP). Accordingly, the control processing unit 333 may receive a packet from the server on behalf of the client connected to the smart hub device 300 and determine whether or not to allow communication of the packet.

When a packet is input to the third and fourth input/output units 323 and 324, the control processing unit 333 transmits a signal for determining whether communication is possible to the comparing unit 334, and the comparing unit 334, as described above, determines the Transmits a communication availability signal including information determined on communication availability. In addition, the control processing unit 333 transmits a packet allowing signal and a packet blocking signal for the corresponding packet to the first or second communication processing units 331 and 332 according to the communication availability signal received from the comparison unit 334.

The comparator 334 receives a communication availability determination signal from the control processing unit 333, analyzes a packet input to at least one of the third and fourth input/output units 323 and 324, and analyzes the IP address or MAC included in the corresponding packet. Addresses stored in the first storage unit 341 or the second storage unit 342 are an IP address list allowing communication, a list of IP addresses blocking communication, a list of MAC addresses allowing communication, or a list of MAC addresses blocking communication. In comparison with , a communication availability signal is transmitted to the control processing unit 333 . For example, the comparator 334 receives a communication availability determination signal from the control processing unit 333, analyzes a packet input from the fourth input/output unit 324, and determines the IP address of the sending device included in the corresponding packet. At least one of the IP addresses of the receiving device is compared with the list of IP addresses that allow communication and the list of IP addresses that block communication stored in the first storage unit 341 to obtain a communication enable signal or communication indicating that communication is allowed for the corresponding packet. A communication disable signal indicating blocking is transmitted to the second communication processing unit 332 . In addition, the comparison unit 334 analyzes the packet input from the third input/output unit 323 and stores at least one of the MAC address of the sending device and the MAC address of the receiving device included in the corresponding packet in the second storage unit 342. Compared with the stored MAC address list allowing communication or MAC address list blocking communication, a communication available signal indicating communication is permitted or a communication unavailable signal indicating communication blocking is transmitted to the second communication processing unit 332.

The setting unit 335 stores a list of IP addresses allowing communication in the first storage unit 341 and stores a list of MAC addresses allowing communication in the second storage unit 342 . Alternatively, the setting unit 335 deletes the IP address stored in the first storage unit 341 and the MAC address stored in the second storage unit 342 . Specifically, the setting unit 335 receives an IP address to be stored or deleted in the first storage unit 341 from the control processing unit 333, and stores the input IP address in the first storage unit 341 or stores the first storage unit 341. Among the IP addresses stored in the unit 341, the input IP address is deleted, and the MAC address to be stored or deleted in the second storage unit 342 is input from the control processing unit 333, and the second storage unit 342 receives the input MAC address. A MAC address is stored or an input MAC address among MAC addresses stored in the second storage unit 342 is deleted.

The storage unit 340 stores an IP address or MAC address allowing communication and a program for driving the smart hub device 300 . To this end, the storage unit 340 includes a first storage unit 341 , a second storage unit 342 and a third storage unit 343 .

The first storage unit 341 stores a list of IP addresses allowing communication or a list of IP addresses blocking communication. Accordingly, as described above, the comparison unit 334 compares the IP address list stored in the first storage unit 341 with the IP address of the input packet to determine whether communication is possible.

The second storage unit 342 stores a list of MAC addresses allowing communication or a list of MAC addresses blocking communication. Accordingly, as described above, the comparison unit 334 compares the MAC address list stored in the second storage unit 342 with the MAC address of the input packet to determine whether communication is possible.

The third storage unit 343 stores a program driving the smart hub device 300 . This program includes basic policies and settings of the smart hub device 300.

The communication flow between smart home networks of each generation shown in FIG. 4 can be displayed as shown in Table 1 below.

The smart hub device 300 according to an embodiment of the present invention logically separates the smart home network system by generation, and communication between the wallpads 220-1 and 220-2 of each generation and the home IoT network server 210 and communication between the home Internet network and an external Internet network is allowed, and communication between the wall pads 220-1 and 220-2 of different generations or the home Internet network is not allowed. As shown in FIG. 4 and Table 1, the control processing unit 333 performs communication between the wall pad 220-1 of the first generation H1 and the home IoT network server 210 and the home IoT network server 210 of the first generation H1. Communication between the terminal 130-1 connected to the Internet network and an external Internet network is permitted.

On the other hand, communication between the wall pad 220-1 of the first generation (H1) and the home internet network access terminal 130-1 of the first generation (H1), the wall pad 220-1 of the first generation (H1) 1) and the wall pad 220-2 of the second generation (H2), the wall pad 220-1 of the first generation (H1) and the home Internet network access terminal 130 of the second generation (H2) -2), communication between the home Internet network access terminal 130-1 of the first generation (H1) and the wall pad 220-2 of the second generation (H2), of the first generation (H1) Communication between the home Internet network access terminal 130-1 and the home Internet network access terminal 130-2 of the second generation (H2) and between the home Internet network access terminal 130-1 of the first generation (H1) and Communication between the home IoT network server 210 is not allowed, and access from the external Internet network to the home IoT network server 210 and from the external Internet network to the wall pad 220-1 of the first generation (H1) are restricted. prevent.

For example, the control processing unit 333 is a home Internet network of another generation (H2) in any one of the terminal 130 connected to the home Internet network of one generation (H1) and the wall pad 220 connected to the home IoT network. Prevent access to the terminal 130 connected to (100) or the wall pad 220 connected to the home IoT network 200, and the terminal 130 connected to the home Internet network 100 within one generation (H1) ) to prevent access to the wall pad 220 connected to the home IoT network 200.

According to an embodiment of the present invention, the smart hub device 300 can improve security by physically and logically separating the network of a common house to prevent connection between different households.

Those skilled in the art to which the present invention pertains will be able to understand that the above-described present invention may be embodied in other specific forms without changing its technical spirit or essential features.

Additionally, the methods described herein may be implemented, at least in part, using one or more computer programs or components. This component may be provided as a set of computer instructions via a computer readable medium including volatile and nonvolatile memory or a machine readable medium. The instructions may be provided as software or firmware, and may be implemented in whole or in part in hardware configurations such as ASICs, FPGAs, DSPs, or other similar devices. The instructions may be configured for execution by one or more processors or other hardware components, which upon executing the series of computer instructions perform or perform all or part of the methods and procedures disclosed herein. make it possible

Therefore, it should be understood that the embodiments described above are illustrative in all respects and not limiting. The scope of the present invention is indicated by the following claims rather than the detailed description above, and all changes or modifications derived from the meaning and scope of the claims and equivalent concepts should be construed as being included in the scope of the present invention. do.

100: home internet network 110: backbone carrier network hub
120: wireless AP 200: home IoT network
210: home IoT network server 220: wall pad
300: smart hub device

Claims (10)

An input/output unit for receiving or outputting packets from any one of a home Internet network providing Internet services within one household and a home IoT network providing IoT services for IoT devices located within the one household; and
A control unit that converts and outputs packets received from the home Internet network and determines whether or not to communicate with respect to packets received from the home IoT network;
The control unit outputs a packet received from the home Internet network through Network Address Translation (NAT) and outputs the packet received from the home IoT network, when receiving a packet acceptance signal, outputs the corresponding packet , A smart hub device characterized in that when receiving a packet blocking signal to block the corresponding packet. According to claim 1,
The control unit,
a first communication processing unit that performs Network Address Translation (NAT) on packets received from the home Internet network and outputs the result; and
With regard to the packet received from the home IoT network, a second communication processing unit outputs the corresponding packet when receiving the packet permitting signal and blocks the corresponding packet when receiving the packet blocking signal;
The first communication processing unit transmits packets received from the home Internet network to the home Internet network;
The second communication processing unit transmits packets received from the home IoT network to the home IoT network. According to claim 1,
The control unit,
a comparator for determining whether communication of the corresponding packet is possible using the packet received from the home IoT network;
A second communication processing unit for outputting a corresponding packet when receiving a packet permit signal and blocking the corresponding packet when receiving a packet blocking signal with respect to a packet received from the home IoT network; and
A storage unit including at least one of an IP address list allowing communication, a list of IP addresses blocking communication, a list of MAC addresses allowing communication, and a list of MAC addresses blocking communication;
The comparison unit,
At least one of an IP address list allowing communication and an IP address list blocking communication stored in the storage unit of at least one of the IP address of the receiving device and the IP address of the sending device included in the packet received by the second communication processing unit. Compare with and determine whether the packet can be communicated,
At least one of a MAC address list allowing communication and a MAC address list blocking communication stored in the storage unit of at least one of the MAC address of the receiving device and the MAC address of the sending device included in the packet received by the second communication processing unit. A smart hub device characterized in that it determines whether communication of the corresponding packet is possible by comparing with and outputs a communication availability signal. According to claim 1,
The home Internet network includes a wireless AP and a carrier network hub;
The home IoT network includes a wall pad and a home IoT network server,
The input/output unit,
a first input/output unit connected to the wireless AP;
a second input/output unit connected to the key carrier network hub;
a third input/output unit connected to the wall pad; and
A smart hub device comprising a; fourth input/output unit connected to the home IoT network server. According to claim 4,
The control unit,
A control processing unit that outputs one of a packet permitting signal and a packet blocking signal depending on whether communication is possible for the corresponding packet;
The control processing unit,
Among the packets input to any one of the third and fourth input/output units,
An IP address of a receiving device, including an IP address of any one of the wireless AP and the backbone carrier network hub;
The smart hub device, characterized in that for outputting a packet blocking signal for a packet including the MAC address of any one of the wireless AP and the backbone carrier network hub as the MAC address of the receiving device. According to claim 4,
The control unit,
A control processing unit that outputs one of a packet permitting signal and a packet blocking signal depending on whether communication is possible for the corresponding packet;
The control processing unit,
Among the packets input to any one of the third and fourth input/output units,
As the IP address of the receiving device, either the IP address of the wall pad or the home IoT network server is included, or
As the MAC address of the receiving device, the smart hub device characterized in that for outputting a packet acceptance signal for a packet including the MAC address of any one of the wall pad and the home IoT network server. a first home Internet network providing Internet services within a first household;
a first home IoT network providing an IoT service for IoT devices located in the first generation;
a first smart hub device connected to the first home Internet network and the first home IoT network and included in the first home Internet network and the first home IoT network;
a second home Internet network providing Internet services within a second generation;
a second home IoT network providing IoT services for IoT devices located in the second generation; and
A second smart hub device connected to the second home Internet network and the second home IoT network and included in the second home Internet network and the second home IoT network;
The first smart hub device blocks packets received from the second home Internet network or the second home IoT network;
The smart home network system, characterized in that the second smart hub device blocks packets received from the first home Internet network or the first home IoT network. According to claim 7,
The first smart hub device,
A first control unit for determining whether to communicate with the corresponding packet by using at least one of the IP address of the sending device, the IP address of the receiving device, the MAC address of the sending device, and the MAC address of the receiving device included in the received packet;
The second smart hub device,
and a second control unit for determining whether to communicate the corresponding packet using at least one of the IP address of the sending device, the IP address of the receiving device, the MAC address of the sending device, and the MAC address of the receiving device included in the received packet. A smart home network system characterized by According to claim 8,
The first control unit blocks packets transmitted from one of the first home Internet network and the first home IoT network to the other,
The second control unit blocks packets transmitted from one of the second home Internet network and the second home IoT network to the other smart home network system. According to claim 8,
The first controller blocks packets input from any one of the second home Internet network and the second home IoT network and having a destination of either the first home Internet network or the first home IoT network;
The second control unit blocks packets input from any one of the first home Internet network and the first home IoT network and having a destination of any one of the second home Internet network and the second home IoT network. smart home network system.

Images