DE102008023465A1 - System for establishing remote connection to company-Intranet for e.g. factory building, has third party computer provided as access terminal for company-Intranet after execution of connection software - Google Patents

Abstract

The system (S) has a third party computer (C) e.g. personal computer, including a processor and connected to a mobile external device (EG1) e.g. mobile phone, via a connection (V2) e.g. Universal serial businterface. The device has a storage (M) with a connection software (VS) e.g. corina cert software, to establish a connection to a company-Intranet over the Internet. A card reader (AL1) is integrated in the device and authenticates and/or authorizes a user of the device. The computer is provided as an access terminal for the company-Intranet after execution of the software. The mobile external device is a personal digital assistant, a palmtop, a personal information manager, MPEG-1 audio layer 3player and a notepad.

Description

The The invention relates to a system and apparatus for manufacturing a connection to a corporate intranet.

It is common nowadays with a notebook or a laptop over an internet connection (LAN or wireless) access to a proprietary Intranet (eg company intranet). This is the notebook or the laptop equipped with appropriate connection software. For example, VPN access allows access to intranet applications via any internet provider. VPN (Virtual Private Network) is one Technology that allows authorized computers from across the Internet allowed on the private, local network of a company, one Institution etc. access.

The patent WO 2007/142567 A1 discloses an access interface for a virtual network wherein external devices (laptop, PDA, etc.) communicate with an external network over the virtual network.

The US patent application US 2008/0064388 A1 discloses a method and a system which is a user of a mobile device enable easy handling when accessing a network.

The Object of the present invention is a system and a mobile Device to provide that to a user allows a connection, in particular a remote connection, to create a corporate intranet without the user having a own computer or laptop used.

• – einen Computer mit Prozessor und Verbindung zum Internet;
• – ein mobiles externes Gerät, umfassend einen Speicher, wobei der Speicher eine Verbindungssoftware zum Aufbau einer Verbindung über das Internet zu einem Firmen-Intranet enthält, wobei die Verbindungssoftware auf dem Prozessor des Computers ausführbar ist;
• – Mittel zur Authentifizierung und/oder Autorisierung eines Benutzers des externen Gerätes, wobei der Computer nach Ausführung der Verbindungs-software als Zugangsterminal zum Firmen-Intranet verfügbar ist. Damit ist es möglich, dass sich ein Benutzer von unterwegs oder von zuhause in ein proprietäres Netz, insbesondere ein Firmen-Intranet, einklingt, ohnen einen eigenen Computer (z. B. PC) oder Notebook dabeizuhaben. Der Zugriff auf firmeninterne oder andere nicht öffentliche Daten ist dabei von jedem beliebigen Computer aus möglich, d. h. die Verwendung eines speziellen firmeneigenen PCs ist nicht erforderlich. Bisher war es für einen Fernzugriff (remote access, remote control) erforderlich, ein Notebook mitzuführen, auf dem eine entsprechende Zugangssoftware installiert ist. Das Mitführen des Notebooks ist aber umständlich (Gewicht, Platzbedarf, z. B. im Flugzeug), es besteht die Gefahr des Diebstahls, sowie ein erhöhtes Risiko der Beschädigung (Stöße, Herabfallen, usw.) und eines damit einhergehenden möglichen Datenverlusts. Weiterhin werden auf einem Notebook im Rahmen der täglichen Arbeit oft unabsichtlich Daten auf der lokalen Festplatte abgelegt (temporäre Verzeichnisse, Papierkorb), die möglicherweise sensibel sind, die bei Beschädigung oder Diebstahl des Notebooks verloren gehen können, oder nur mit Aufwand wiederbeschaffbar sind. Die Erfindung erlaubt es, dass anstelle des Notebooks (Laptops) ein externes Gerät, z. B. ein mobiles Gerät (z. B. PDA, Handy) verwendbar ist, um eine Verbindung (insb. eine Fernverbindung) zu einem proprietären Rechner, bzw. Rechnernetz (z. B. Firmen-Intranet, Host, Server) herzustellen. Das mobile Gerät wird dabei mit einem belibigen, mit dem Internet verbundenem (Fremd)-Computer (z. B. PC) verbunden, z. B. über die USB-Schnittstelle. Auf dem (Fremd)-Computer wird die Verbindungssoftware (z. B. CORINA CERT) zum Ablauf gebracht, welche sich im Speicher des mobilen Gerätes be findet. Beispielsweise kann kann hierzu das mobile Gerät als (virtuelles) Laufwerk des (Fremd)-Computers angesehen werden und die dort befindliche Verbindungssoftware kann z. B. durch Doppelklick gestartet werden. Die Identifizierung (d. h. die Authentififierung und Autorisierung) des Benutzers kann über Passwörter, Mitarbeiterausweis (durch angeschlossenen Kartenleser) oder durch Biometriedaten (z. B. durch angeschlossenen Fingerabdruck-Scanner) erfolgen. Somit ist für einen Benutzer ein sicherer Zugriff auf auf proprietäre Daten (z. B. Firmen-Intranet) über einen öffentlich zugänglichen Computer möglich, ohne einen eigenen Computer (z. B. Laptop, Notebook) zu verwenden.

This object is achieved by a system for establishing a connection, in particular a remote connection, to a company intranet comprising the system:

• - a computer with processor and connection to the Internet;
• - A mobile external device comprising a memory, the memory containing a connection software for establishing a connection via the Internet to a corporate intranet, wherein the connection software is executable on the processor of the computer;
• - means for authenticating and / or authorizing a user of the external device, wherein the computer is available after execution of the connection software as an access terminal to the company intranet. This makes it possible for a user to tune into a proprietary network, in particular a company intranet, while on the move or from home, without having a separate computer (eg PC) or notebook. Access to in-house or other non-public data is possible from any computer, which means you do not need to use a special proprietary PC. Previously, it was necessary for a remote access (remote access) to carry a notebook, on which an appropriate access software is installed. The carrying of the notebook is cumbersome (weight, space, eg in the aircraft), there is a risk of theft, as well as an increased risk of damage (shocks, falling, etc.) and a possible loss of data. Furthermore, on a notebook as part of the daily work often unintentionally stored data on the local hard drive (temporary directories, trash), which may be sensitive, which may be lost in case of damage or theft of the notebook, or are recoverable only with great effort. The invention allows that instead of the notebook (laptops) an external device, eg. B. a mobile device (eg., PDA, mobile phone) is used to establish a connection (especially a remote connection) to a proprietary computer, or computer network (eg, company intranet, host, server). The mobile device is thereby connected to a personal (foreign) computer (eg PC) connected to the Internet, for example a PC. B. via the USB interface. On the (foreign) computer, the connection software (eg CORINA CERT) is brought to expiration, which is found in the memory of the mobile device be. For example, for this purpose, the mobile device can be regarded as a (virtual) drive of the (foreign) computer and the connection software located there can, for. B. be started by double-clicking. The identification (ie the authentication and authorization) of the user can take place via passwords, employee ID card (by connected card reader) or by biometric data (eg by connected fingerprint scanner). Thus, secure access to proprietary data (eg, corporate intranet) via a publicly accessible computer is possible for a user without using their own computer (eg, laptop, notebook).

A first advantageous embodiment of the invention for a system is that the means for authentication and / or authorization of a user are integrated in the external device. As a result, a user does not have to carry additional hardware (eg badge reader, fingerprint scanner) with them. In addition, if badge readers or fingerprint scanners are integrated with the external mobile device, handling and cabling are easier. Furthermore, it is ensured that the means for authentication and / or authorization do not ver can be eaten.

A further advantageous embodiment of the invention for a System lies in that authentication and / or authorization of a user based on biometric data of the user. This increases the security of the system and the data access, because it is ensured that only authorized persons access the company network can.

A further advantageous embodiment of the invention for a System is that the mobile external device is a cell phone, a PDA (Personal Digital Assistant), a Palmtop, a PIM (Personal Information Manager), an MP3 player, or a Notepad. Such Mobile devices are lighter and smaller than notebooks. This facilitates taking along when traveling, z. B. in the airplane. Farther are such devices today more or less commodities (commodities) and are carried by a user anyway.

A further advantageous embodiment of the invention for a System is that the computer is a personal computer, a Notebook, a laptop, a workstation, a server, a mainframe, or a mainframe is. The invention System is with any publicly accessible computer feasible, as far as it has internet access. The invention System is not limited to specific types of computers, but flexible use.

The Task is still solved by a mobile device to connect to a corporate intranet via a computer that has an internet connection, wherein the mobile external device has a memory with a Connection software for establishing a connection via the Internet to the company intranet contains, using the connection software being executable on the computer, means being for authentication and / or authorization of a user, and wherein the Computer after running the connection software as access terminal to the company intranet is available. The invention allows it that instead of the notebook (laptops) an external device, z. B. a mobile device (eg., PDA, mobile phone) is usable, to make a connection (especially a remote connection) to a proprietary one Computer or computer network (eg company intranet, host, server) manufacture. The mobile device is connected to any, Connected to the Internet (foreign) computer (eg PC), z. B. via the USB interface or a wireless connection. On the (foreign) computer the connection software (eg CORINA CERT), which is stored in the memory of the mobile device located. For example, this may be the mobile device as a (virtual) drive of the (foreign) computer and the connection software located there can be z. Eg by double-clicking to be started. Identification (i.e., Authentication and authorization) of the user via passwords, Employee card (by connected card reader) or by Biometric data (eg by connected fingerprint scanner) respectively. Thus, secure access for a user on on proprietary data (eg company intranet) over a publicly accessible computer possible, without using your own computer (eg laptop, notebook). Instead of a notebook now only needs of a user a small lightweight (low weight, small footprint) external Device (mobile device, PDA, cell phone, etc.) are taken, that you usually have with you anyway. The removal of possibly sensitive data on the mobile device can (in contrast to the notebook) hardly unintentionally. Furthermore, it is advantageous that any existing (accessible to the user) computer can be used to establish a connection. On the Purchase of notebooks could possibly be waived (Cost savings).

A first advantageous embodiment of the invention for a mobile device is that the mobile device a cell phone, a PDA (Personal Digital Assistant), a palmtop, a PIM (Personal Information Manager), an MP3 player, or a Notepad is. Such mobile devices are lighter and smaller than notebooks. This facilitates taking along when traveling, z. B. in the airplane. Farther are such devices today more or less commodities (commodities) and are carried by a user anyway.

A further advantageous embodiment of the invention for a mobile device is that the computer is a staff Computer, a notebook, a laptop, a workstation, a server, is a mainframe, or a mainframe. The inventive mobile Device is with any publicly accessible computer connectable and usable, as far as it has an Internet access. The mobile device according to the invention is thus not limited to specific computer types, but flexible use.

A further advantageous embodiment of the invention for a Mobile device is the means of authentication and / or authorization of a user in the external device are integrated. A user does not have to be extra Hardware (eg badge reader, fingerprint scanner) with you. If badge reader or fingerprint scanner in the external mobile Device are integrated, are also the handling, the wiring and the transport easier. Furthermore, it is ensured that the means of authentication and / or authorization is not can be forgotten.

One Embodiment of the invention is in the drawing and is explained below.

there demonstrate:

1 a schematic overview image with a first exemplary embodiment of the system according to the invention, and

2 a further schematic overview image with another exemplary embodiment of the system according to the invention.

1 shows a schematic overview image with a first exemplary embodiment of the inventive system S for establishing a connection to a corporate intranet. The system S comprises a computer C, z. B. PC with processor and connection V1 to the Internet. Via a connection V4, the Internet is connected to an intranet (eg company intranet). The computer C is accessible to a user, ie the computer C is z. B. publicly available or it is available to a user. A mobile external device EG1 containing a memory M with a connection software VS for establishing a connection via the Internet to a company intranet can be connected to the computer C via the connection V2. The connection V2 from mobi len device EG1 to the computer C can z. B. be implemented as a USB interface, but it is also possible that the connection V2 is designed as a wireless interface (eg Bluetooth, wireless, or infrared). The authentication and / or authorization of a user of the external device EG1 via an ID card reader AL1, which is connected via a connecting line V3 to the computer C. For identification, authentication and authorization, it is also possible to use a fingerprint scanner.

The mobile device EG1 is connected to the public (any) computer (eg PC) connected and on this computer the connection software VS (eg CORINA CERT) is brought to expiration, which is located in the memory M of the mobile device EG1. For example, for this purpose, the mobile device EG1 as a virtual Drive of the computer C are viewed and the connection software located there VS can be started by double-clicking. The connection software VS can also be through a program call on the desktop or even over Voice input to be started.

Instead of A notebook now only needs a small lightweight external device EG1 (eg PDA, cell phone, etc.) are taken to connect to Internet and thereby to create a company intranet.

2 shows a schematic overview image with another exemplary embodiment of the inventive system S. The computer C (mainframe, host, server, laptop, etc.) is connected via a connection V1 to the Internet via a further connection V4 is a connection from the Internet an intranet (eg company intranet or corporate computer network). In the illustration after 2 the means AL2 for authentication and / or authorization of a user are integrated in the mobile external device EG2. The means AL2 for authentication and authorization can be z. B. to act a fingerprint scanner, which is mounted directly on the mobile device EG2. The external mobile device EG2 (eg mobile phone, PDA, palmtop, personal information manager (PIM), MP3 player) can be connected to the computer C via a connection V2. The connection V2 can z. B. via a USB interface but also via a Bluetooth connection can be realized.

Farther it is obvious that the connections V1, V2, V3, V4 over Cable connections but also wireless (eg Bluetooth, IR, radio) can be realized. After making a connection V2, the mobile external device EG2 appears as virtual Drive on the computer C and can from there by a user be addressed. By double-clicking or by function call can activates the connection software VS on the external device EG2 and be run on the computer C, whereby the connection to the Internet and to the company intranet. In the connection software VS it can be z. B. CORINA CERT act.

in principle It is conceivable that the means AL1, AL2 for authentication and / or Authorization of the user of the external device EG1, EG2 are also connected directly to this external device EG1, EG2, z. Eg via cable or via wireless connection (Bluetooth, Radio or infrared).

Farther It is conceivable that the external device EG1, EG2 only as normal data medium (eg USB stick) is formed, which contains the connection software VS. The connection software VS can be located in the memory of the data carrier, possibly. with additional identification means for authentication and / or authorization of the user. The connection software VS and the identification means (e.g., biometric data for Users) can also be used as firmware on the external Device EG1, EG2 be permanently present.

By direct insertion of the data stick in the USB interface of the computer C, it is thus possible to access the connection software VS, which is located in the data stick and to bring them to run on the computer C to Verbin via the Internet to the company intranet. This embodiment of the invention allows even easier handling, since the USB sticks are very easy to use and to carry with him.

The Invention is of particular interest to users who need to access internal data from remote locations, since no "big" notebooks carried more Need to become. The carried luggage This makes it lighter and smaller in volume. Furthermore is the invention is advantageous for service or maintenance personnel, because they are already in a plant (eg factory building, power plant) Computer can access to connect to corporate intranets or external computers.

system and mobile device (eg mobile phone, PDA) for the production of a Connection, in particular a remote connection, to a company intranet under Use of a publicly accessible (3rd party) Computers that have a connection to the Internet, where the Connection to the company intranet or another proprietary one Computer or computer network without the use of a separate laptop or notebooks.

QUOTES INCLUDE IN THE DESCRIPTION

This list The documents listed by the applicant have been automated generated and is solely for better information recorded by the reader. The list is not part of the German Patent or utility model application. The DPMA takes over no liability for any errors or omissions.

Cited patent literature

• WO 2007/142567 A1 [0003]

Claims (9)

System (S) for making a connection, in particular a remote connection to a corporate intranet, the system comprising: one Computer (C) with processor and connection (V1) to the Internet; one mobile external device (EG1, EG2) comprising a memory (M), wherein the memory (M) a connection software (VS) to build a connection over the Internet to a corporate intranet contains, with the connection software (VS) on the processor the computer (C) is executable; Means (AL1, AL2) for authentication and / or authorization of a user of external device (EG1, EG2); the computer (C) after execution of the connection software (VS) as access terminal to the company intranet is available. System according to claim 1, characterized in that the means (AL1, AL2) for authentication and / or authorization a user in the external device (EG1, EG2) integrated are. System according to claim 1 or 2, characterized that authentication and / or authorization of a user based on biometric data of the user. System according to one of the preceding claims, characterized characterized in that the mobile external device (EG1, EG2) a cell phone, a PDA (Personal Digital Assistant), a palmtop, a PIM (Personal Information Manager), an MP3 player, or a Notepad. System according to one of the preceding claims, characterized characterized in that the computer (C) is a personal computer Notebook, a laptop, a workstation, a server, a mainframe, or a mainframe is. Mobile device (EG1, EG2) for manufacturing a connection (V1, V4) to a company intranet a computer (C) connected via an Internet connection (V1) has, characterized in that the mobile external Device (EG1, EG2) a memory (M) with a connection software (VS) to establish a connection (V1, V4) via the Internet to the company intranet, with the connection software (VS) on the computer (C), wherein means (AL1, AL2) for authentication and / or authorization of a user are present, and wherein the computer (C) after execution the connection software (VS) as an access terminal to the company intranet is available. Mobile device (EG1, EG2) according to claim 6, characterized characterized in that the mobile device (EG1, EG2) is a mobile phone, a PDA (Personal Digital Assistant), a Palmtop, a PIM (Personal Information Manager), an MP3 player, or a Notepad. Mobile device (EG1, EG2) according to claim 6 or 7, characterized in that the computer (C) is a personal computer, a notebook, a laptop, a workstation, a server, a mainframe, or is a mainframe. Mobile device (EG1, EG2) according to one of Claims 6 to 8, characterized in that the means (AL1, AL2) for authentication and / or authorization of a user in the external device (EG1, EG2) are integrated.