JP2013098761A - Secure access system and secure access method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide safe and secure remote access from an outdoor terminal to a home apparatus.SOLUTION: A secure access system 60 includes an IP network 100 having a SIP server 30, to which an HGW (Home GateWay) 11 of a home network 10 accommodating home apparatuses 13 and an outdoor terminal 20 are connected. When detecting a call origination from the outdoor terminal 20 permitted to communicate with the home network 10 to a home apparatus 13-1 in the home network 10, the HGW 11 receives provision of a temporary IP address and notifies the outdoor terminal 20 of the IP address. When receiving an IP packet containing the temporary IP address and an identifier of the corresponding home apparatus 13 from the outdoor terminal 20, the HGW 11 converts the received IP packet to an IP packet addressed to a local IP address of the home apparatus 13-1.

Description

  The present invention relates to a technology for safely and surely remotely accessing a home device connected to a home network from a terminal connected to an external network.

  With the spread of the Internet, home devices such as computer devices, AV (Audio Visual) devices, white goods, etc. installed in the end user's home are connected to the home network, and each home device in the home network Increasing communication. Furthermore, with the advancement of home networks that communicate with the Internet, it is important to remotely and securely access each home device in the home network from a terminal outside the home connected to the external network via the home gateway. The nature is increasing. Hereinafter, in the specification and drawings, the home gateway may be abbreviated as HGW (Home GateWay).

  As a conventional technique for remotely accessing a device in a home network from an external terminal connected to an external network, there is a technique for specifying and accessing a specific port number of the home gateway from the external terminal. In this technique, the home gateway sets a firewall for the port number in advance so that it can be connected to a home device having a private IP address corresponding to the port number.

  This technology enables remote access very easily. However, there is a problem that unauthorized access is easily made when a third party knows the IP address of the home gateway.

  As another conventional technique, an authentication system in the network stores in advance a model-specific password pre-installed in a plurality of home devices connected to a home network and a provisional password assigned to each of the plurality of home devices. There is a technique for performing communication when a model-specific password and a temporary password transmitted from a device match a model-specific password and a temporary password stored in advance by the authentication system.

  Patent Document 1 describes an invention that makes it possible to easily provide unique authentication information for each information device to the information device. The invention described in Patent Document 1 stores a model-specific password previously incorporated in each of a plurality of home appliances in units of models and a plurality of provisional passwords in association with IDs of corresponding devices. Then, it is verified whether the model-specific password and provisional password transmitted from a certain household electrical appliance match the stored plurality of model-specific passwords and the plurality of provisional passwords, respectively, and the received model-specific password and provisional password are received. If both match, device authentication information that can uniquely authenticate the home appliance of the transmission source for each device is generated, and the generated device authentication information is transmitted to the home appliance of the transmission source.

  This technology can provide a unique authentication means for each home device for each home device by combining a model-specific password and a provisional password, and can improve the safety of access to the home device. .

JP 2004-355396 A

The invention described in Patent Document 1 is considered to be less susceptible to unauthorized access than single password authentication. However, if both the model-specific password and the provisional password are leaked, there is still a problem that the computer is illegally accessed.
Therefore, an object of the present invention is to perform safe and reliable remote access between an out-of-home terminal and a home device.

  In order to solve the above-described problem, in the invention according to claim 1, a home network in which a home device is accommodated in an IP network including a call control server that performs call control and an address management server that issues a temporary IP address. A secure access system to which a home gateway and an out-of-home terminal are connected, and the out-of-home terminal includes a telephone number of one of the devices accommodated in each home network and a telephone of the out-of-home terminal permitted to communicate. Based on the access permission list indicating the correspondence with the number, permission / non-permission of communication is determined, and the home gateway sends at least the temporary IP address issued by the address management server to the out-of-home terminal permitted to communicate The secure access system is characterized in that

  In this way, according to the present invention, only an out-of-home terminal permitted to communicate with the home network can obtain permission to communicate with the home device.

  In the invention according to claim 2, the temporary IP address is issued from the address management server to the home gateway, and the home gateway sends the temporary IP address and access information related to the home device to the outside of the home. The secure access system according to claim 1, wherein the terminal is notified.

  In this way, according to the present invention, safer communication can be performed by combining the temporary IP address with the access information related to the home device.

  In the invention according to claim 3, the access information is an identifier related to the home device, and the home gateway has received a communication packet from the temporary terminal and the identifier related to the home device from the outside terminal. The secure access system according to claim 2, wherein the local access address is converted into a communication packet destined to the local IP address of the home device.

  In this way, according to the present invention, safer communication can be performed by combining the temporary IP address with the identifier associated with the home device.

  In the invention according to claim 4, the access information is a port number related to the home device, and the home gateway sends a communication packet by the temporary IP address and the port number related to the home device from the outside terminal. 3. The secure access system according to claim 2, wherein when receiving, the secure access system converts the local IP address and the reception port number of the home device into a communication packet destined for the destination.

  By doing in this way, according to this invention, a safer communication can be performed by combining the temporary IP address with the port number concerning a home apparatus. In addition, the network address translation operation of the home gateway can be used.

  5. The secure access according to claim 3, wherein the home gateway deletes the temporary IP address when the remote access by the out-of-home terminal is completed. The system.

  In this way, according to the present invention, the temporary IP address is deleted at the same time as the remote access ends, so that it is possible to improve security and prevent unauthorized access.

  In the invention of claim 6, the temporary IP address is issued from a server to the home device, and the home gateway uses the temporary IP address when notifying the temporary IP address to the outside terminal. 2. The secure access system according to claim 1, wherein the firewall is transparently set.

  In this way, according to the present invention, only an out-of-home terminal that is permitted to communicate with the home network can remotely access with the global IP address, and thus can communicate with the home device at high speed.

  According to a seventh aspect of the invention, the secure gateway according to the sixth aspect, wherein the home gateway sets a firewall to be blocked for the temporary IP address when remote access by the out-of-home terminal is completed. Access system.

  In this way, according to the present invention, since the firewall is set to be shut off at the same time as the remote access ends, it is possible to improve security and prevent unauthorized access.

  According to the eighth aspect of the present invention, a home network home gateway and an out-of-home terminal accommodating a home device are provided in an IP network including a call control server that performs call control and an address management server that issues a temporary IP address. A secure access method for a connected secure access system, wherein the out-of-home terminal corresponds to a telephone number of any device accommodated in each home network and a telephone number of an out-of-home terminal permitted to communicate The home gateway notifies at least the temporary IP address issued by the address management server to the out-of-home terminal that is permitted to communicate. The secure access method is characterized by this.

  In this way, according to the present invention, only an out-of-home terminal permitted to communicate with the home network can obtain permission to communicate with the home device.

  According to the present invention, safe and reliable remote access can be performed between an out-of-home terminal and a home device.

1 is a schematic configuration diagram showing a secure access system in a first embodiment. It is a figure which shows the access permission list | wrist in 1st Embodiment. It is a sequence diagram which shows operation | movement of the secure access system in 1st Embodiment. It is a sequence diagram which shows operation | movement of the secure access system in 2nd Embodiment. It is a sequence diagram which shows operation | movement of the secure access system in 3rd Embodiment.

  Hereinafter, embodiments for carrying out the present invention will be described in detail with reference to the drawings.

(Configuration of the first embodiment)
FIG. 1 is a schematic configuration diagram showing a secure access system according to the first embodiment.
The secure access system 60 includes an IP (Internet Protocol) network 100, an out-of-home terminal 20, and a home network 10.

  The IP network 100 relays IP packets between the out-of-home terminal 20 and the home network 10, and includes edge routers 50-1 and 50-2 and a SIP (Session Initiation Protocol) server 30 (call control server). And an address management server 40. The SIP server 30 is connected to the edge routers 50-1 and 50-2 and is connected to the address management server 40. The edge router 50-1 is connected to the edge router 50-2. The edge routers 50-1 and 50-2, the SIP server 30, and the address management server 40 can transmit IP packets from an arbitrary transmission source to an arbitrary destination.

  The edge routers 50-1 and 50-2 transfer IP packets. The edge routers 50-1 and 50-2 are not limited to two, and may be one or more. Hereinafter, when the edge routers 50-1 and 50-2 are not individually identified, they are simply referred to as the edge router 50.

  The SIP server 30 controls the service by performing call control, and stores an access permission list 31. The access permission list 31 will be described in detail with reference to FIG.

  The address management server 40 has a temporary IP address management unit 41. The temporary IP address management unit 41 manages a temporary IP address to be paid out to each device such as the HGW 11.

  The home network 10 includes an HGW 11 and home devices 13-1 to 13-3. Hereinafter, when the home devices 13-1 to 13-3 are not individually identified, they are simply referred to as home devices 13. The HGW 11 is connected to the IP network 100 and home devices 13-1 to 13-3. The home devices 13-1 to 13-3 are connected to the HGW 11.

  The HGW 11 is, for example, a broadband router, and a global IP address is assigned to the IP network 100 side, and a local IP address is assigned to the home network 10 side. The HGW 11 has a processing unit (not shown) that performs NAT (Network Address Translation) or NAPT (Network Address Port Translation), which is a network address translation operation.

  The home device 13 is, for example, a computer device, AV system device, white goods, security device (surveillance camera), or the like, and has a function of connecting to a network. The home network 10 of the present embodiment includes three home devices 13. However, the number of home devices 13 is not limited to three.

  The out-of-home terminal 20 is, for example, a fixed phone, a mobile phone, or a computer device. The out-of-home terminal 20 is connected to the IP network 100 via the edge router 50-2. The home network 10 is connected to the IP network 100 via the edge router 50-1. The edge routers 50-1 and 50-2 are connected to the SIP server 30 included in the IP network 100. The number of out-of-home terminals 20 and home networks 10 is not limited to one and may be plural.

  FIG. 2 is a diagram showing an access permission list in the first embodiment.

  The access permission list 31 associates the remote terminal 20 (FIG. 1) that permits access to the HGW 11 (FIG. 1). The access permission list 31 has a calling phone number column that is an identifier of the remote terminal 20 (FIG. 1) and a called phone number column that is an identifier of the HGW 11 (FIG. 1). Numbers are associated with each other.

  In the access permission list 31, by means not shown, the outgoing telephone number (AAA-AAA-AAAAA) of the out-of-home terminal 20 (FIG. 1) and the incoming telephone number (XXX-XXX-XXXX) of the HGW 11 (FIG. 1) in advance. ) And are registered. The permission / denial of communication between the remote terminal 20 and the home network 10 is determined based on the access permission list 31. Access to the individual home devices 13-1 to 13-3 (FIG. 1) is performed based on the identifier of each home device 13 stored in the HGW 11 (FIG. 1).

(Operation of the first embodiment)
FIG. 3 is a sequence diagram showing the secure access system in the first embodiment. The sequence among the remote terminal 20, the edge router 50-2, the SIP server 30, the address management server 40, the edge router 50-1, the HGW 11, and the home device 13-n (n = 1 to 3) is shown.

<< Remote access start processing >>
When the process is started, in sequence Q10, the out-of-home terminal 20 requests the SIP server 30 to access the HGW 11 in the home network 10 using a special number (for example, 1XY) for remote access request.
In sequence Q11, the SIP server 30 performs line authentication of the out-of-home terminal 20.

In sequence Q <b> 12, the SIP server 30 refers to the access permission list 31 to determine whether or not the calling telephone number of the outside terminal 20 corresponds to the called telephone number of the HGW 11.
If the determination condition is satisfied, the SIP server 30 permits access to the home device 13-n. If the determination condition is not satisfied, the SIP server 30 disallows access to the home device 13-n and indicates that there is an unauthorized access to the home device 13-n. The user is notified by notifying the home device 13-n. The subsequent sequence shows a case where the determination condition is satisfied.
In sequence Q13, the SIP server 30 requests the HGW 11 for remote access to the home network 10.

In sequence Q14, the HGW 11 requests the address management server 40 to issue a temporary IP address to be used for the requested remote access.
In sequence Q15, the address management server 40 issues an unused temporary IP address from the temporary IP address management unit 41 and notifies the HGW 11 of the unused temporary IP address.
In sequence Q <b> 16, the HGW 11 notifies the SIP server 30 of the temporary IP address notified from the address management server 40.
In sequence Q17, the SIP server 30 notifies the outside IP terminal 20 of the notified temporary IP address, and permits access to the HGW 11.

<Remote access processing>
In sequence Q30, the out-of-home terminal 20 transmits an IP packet by designating the identifier of the home device 13-n for the notified temporary IP address of the HGW 11. The HGW 11 converts the IP packet destination to the private IP address of the home device 13-n and relays it using a conversion table (not shown), and causes the outside terminal 20 to perform remote access to the home device 13-n.

<< Remote access termination process >>
Sequences Q40 to Q47 are processes for terminating remote access to the home device 13-n.

In the sequence Q40, the remote terminal 20 accesses the HGW 11 in the home network 10 using the special number for remote access release request (for example, 1AB) after the remote access to the home device 13-n is completed. Request the release to the SIP server 30.
In sequence Q41, the SIP server 30 performs line authentication of the out-of-home terminal 20.

In sequence Q42, the SIP server 30 refers to the access permission list 31 to determine whether or not the calling telephone number of the out-of-home terminal 20 corresponds to the called telephone number of the HGW 11.
In sequence Q43, the SIP server 30 requests the HGW 11 to cancel access to the home network 10.
In sequence Q44, the HGW 11 requests the address management server 40 to delete the issued temporary IP address.

In sequence Q45, the address management server 40 sets the lease time of the paid-out temporary IP address to 0, thereby deleting the temporary IP address and notifying the HGW 11 of the temporary IP address. Here, the lease time is the length of time that the client can use the assigned IP address.
In sequence Q46, the HGW 11 notifies the SIP server 30 of the deletion of the temporary IP address notified from the address management server 40. Further, the HGW 11 deletes the entry having the temporary IP address and the identifier of the home device 13-n from the conversion table (not shown).
In sequence Q47, the SIP server 30 notifies the out-of-home terminal 20 of the completion of the release of access to the HGW 11.

  Even when the HGW 11 requests the address management server 40 to update the issued temporary IP address in sequence Q44, the temporary IP address is deleted in sequences Q45 to Q47.

(Effects of the first embodiment)
The first embodiment described above has the following effects (A) to (C).

(A) A correspondence list between the telephone number of the remote terminal 20 permitted to communicate with the home network 10 and the telephone number of the HGW 11 is registered in the network in advance. Thereby, since only the pre-registered out-of-home terminal 20 can communicate with the home network 10, safe and reliable remote access can be performed.

(B) The IP address used by the remote terminal 20 for remote access is a temporary one. As a result, even if the IP address used for remote access leaks, unauthorized access cannot be repeated repeatedly, so that safe and reliable remote access can be performed.

(C) When the remote access of the remote terminal 20 is completed, the temporary IP address is deleted. As a result, even if the IP address used for remote access leaks, access with the temporary IP address becomes impossible when the remote access ends, so that safe and reliable remote access is possible.

(Configuration of Second Embodiment)
The secure access system 60 of the second embodiment is configured similarly to the secure access system 60 (FIG. 1) of the first embodiment.
The HGW 11 of the second embodiment performs NAT (Network Address Translation) or NAPT (Network Address Port Translation), which is a network address translation operation, in addition to the HGW 11 (FIG. 1) of the first embodiment (not shown). It has a processing unit and a static IP masquerade table (not shown).

  In the secure access system 60 of the second embodiment, the remote terminal 20 in the secure access system 60 (FIG. 1) of the first embodiment uses the temporary IP address and the identifier of the home device 13-n. In contrast to the access, the temporary IP address and the port number related to the home device 13-n are used for access. Thereby, an IP packet whose destination is specified by a temporary IP address and a port number can be converted into an IP packet destined for the home device 13-n by NAT or NAPT.

(Operation of Second Embodiment)
FIG. 4 is a sequence diagram showing the operation of the secure access system in the second embodiment. The same elements as those in the sequence diagram showing the operation (FIG. 3) of the secure access system of the first embodiment are given the same reference numerals.

<< Remote access start processing >>
After starting the processing, the processing of sequences Q10 to Q15 is the same as the processing of sequences Q10 to Q15 of the first embodiment.

  In sequence Q16A, the HGW 11 broadcasts to all the home devices 13-1 to 13-3, and sets the address of the home device 13-n based on the notified telephone number of the home device 13-n. Solve.

  In sequence Q17A, the HGW 11 obtains the reception port number corresponding to the notified private IP address of the home device 13-n, and the global IP address and the reception port number on the IP network 100 (FIG. 1) side of the HGW 11 And the firewall for the reception port number is set to be transparent.

  In the sequence Q18A, the HGW 11 sends the temporary IP address and the reception port number, which are global IP addresses on the IP network 100 side, and the reception port number of the home device 13-n acquired in the sequence Q15 to the SIP server 30. Notice.

In sequence Q19A, the SIP server 30 receives the global IP address (temporary IP address) on the IP network 100 side of the HGW 11 and the reception port number notified from the HGW 11, and the reception port of the communicated home device 13-n. The number is notified to the out-of-home terminal 20, and access to the home device 13-n is permitted.
<Remote access processing>

  In sequence Q30A, the out-of-home terminal 20 transmits an IP packet by designating a global IP address (temporary IP address) on the IP network 100 side of the HGW 11 and a reception port number. The HGW 11 converts the destination of the IP packet into a combination of the private IP address and the reception port number of the home device 13-n and relays it to the outside terminal 20 by NAT or NAPT which is a network address translation operation. Remote access to the home device 13-n is performed.

<< Remote access termination process >>
The processing of sequences Q40 to Q45 is the same as the processing of sequences Q40 to Q45 (FIG. 3) of the first embodiment.

In sequence Q46A, the HGW 11 notifies the SIP server 30 of the deletion of the temporary IP address notified from the address management server 40. Furthermore, the HGW 11 suppresses subsequent unauthorized access by deleting the combination of the temporary IP address and the port number from the static IP masquerade table.
The process of sequence Q47 is the same as the process of sequence Q47 (FIG. 3) of the first embodiment.

(Effect of 2nd Embodiment)
The second embodiment described above has the following effect (D).

(D) The HGW 11 relays the IP packet transmitted by the out-of-home terminal 20 to the home device 13-n by NAT or NAPT which is a network address translation operation. It is configured not to perform. As a result, even if the combination of the IP address and port number used for remote access leaks, the access cannot be made with the end of the remote access, so that safe and reliable remote access is possible.

(Configuration of Third Embodiment)
The secure access system 60 of the third embodiment is configured similarly to the secure access system 60 (FIG. 1) of the first embodiment.
In the secure access system 60 of the third embodiment, the remote terminal 20 in the secure access system 60 (FIG. 1) of the first embodiment uses the temporary IP address and the identifier of the home device 13-n. In contrast to access, access is made using a temporary IP address (global IP address) associated with the home device 13-n.

(Operation of Third Embodiment)
FIG. 5 is a sequence diagram showing the operation of the secure access system according to the third embodiment. The same elements as those in the sequence diagram showing the operation (FIG. 3) of the secure access system of the first embodiment are given the same reference numerals.
<< Remote access start processing >>
After starting the processing, the processing of sequences Q10 to Q13 is the same as the processing of sequences Q10 to Q13 (FIG. 3) of the first embodiment.
In sequence Q14B, the HGW 11 requests the home device 13-n to remotely access the home network 10.

  In sequence Q15B, the home device 13-n requests the address management server 40 to issue a temporary IP address (global IP address) used for the requested remote access.

In sequence Q16B, the address management server 40 issues an unused temporary IP address from the temporary IP address management unit 41 and notifies the home device 13-n.
In sequence Q17B, the home device 13-n notifies the HGW 11 of the temporary IP address notified from the address management server 40.
In sequence Q <b> 18 </ b> B, the HGW 11 transparently sets a firewall for the temporary IP address notified from the address management server 40.
In sequence Q19B, the HGW 11 notifies the SIP server 30 of the temporary IP address notified from the address management server 40.

  In sequence Q20B, the SIP server 30 notifies the outside IP terminal 20 of the notified temporary IP address, and permits access to the home device 13-n.

<Remote access processing>
In sequence Q30B, the out-of-home terminal 20 transmits an IP packet to the notified temporary IP address of the home device 13-n. The HGW 11 relays the IP packet to the home device 13-n to perform remote access.

<< Remote access termination process >>
Sequences Q40 to Q50B are remote access end processing for the home device 13-n.
After starting the processing, the processing of sequences Q40 to Q43 is the same as the processing of sequences Q40 to Q43 of the first embodiment (FIG. 3).
In sequence Q44B, the HGW 11 requests the home device 13-n to release access to the home network 10.
In sequence Q45B, the home device 13-n requests the address management server 40 to delete the issued temporary IP address.

In sequence Q46B, the address management server 40 sets the lease time of the paid-out temporary IP address to 0, thereby deleting the temporary IP address and notifying the home device 13-n.
In sequence Q47B, the home device 13-n notifies the HGW 11 of the deletion of the temporary IP address notified from the address management server 40.
In sequence Q48B, the HGW 11 sets a firewall for the temporary IP address notified from the address management server 40 to be shut off.
In sequence Q49B, the HGW 11 notifies the SIP server 30 of the deletion of the temporary IP address notified from the address management server 40.
In sequence Q50B, the SIP server 30 notifies the remote terminal 20 of the completion of the release of access to the HGW 11.

(Effect of the third embodiment)
The third embodiment described above has the following effects (E) and (F).

(E) The home device 13-n notifies the remote terminal 20 of remote access by notifying the remote terminal 20 of a temporary IP address (global IP address). Thereby, since the conversion operation of the HGW 11 at the time of remote access becomes unnecessary, it is possible to transmit and receive IP packets between the out-of-home terminal 20 and the home device 13 at high speed.

(F) During remote access, the HGW 11 does not use a conversion table such as a static IP masquerade table. That is, since the conversion table of the HGW 11 is not exhausted, stable remote access can be performed between the out-of-home terminal 20 and the home device 13.

(Modification)
The present invention is not limited to the above embodiment, and can be modified without departing from the spirit of the present invention. For example, the following forms (a) to (d) are used as the usage form and the modified examples.

(A) The HGW 11 of the first and second embodiments deletes the temporary IP address when remote access ends. However, the present invention is not limited to this, and if the remote access is not performed over a predetermined period (timeout), the temporary IP address may be deleted. Thereby, unauthorized access can be prevented.

(B) The home device 13 of the third embodiment deletes the temporary IP address when the remote access ends. However, the present invention is not limited to this, and if the remote access is not performed over a predetermined period (timeout), the temporary IP address may be deleted. Thereby, unauthorized access can be prevented.

(C) The access permission list 31 of the first to third embodiments includes a calling phone number column that is an identifier of the out-of-home terminal 20 (FIG. 1), a called phone number column that is an identifier of the HGW 11 (FIG. 1), ,have. However, the present invention is not limited to this, and the correspondence between the calling telephone number column that is the identifier of the out-of-home terminal 20 (FIG. 1) and the called telephone number of the home device 13 (FIG. 1) may be recorded.

(D) The access permission list 31 of the first to third embodiments is stored in the SIP server 30. Based on the access permission list 31, the SIP server 30 determines permission / non-permission of communication with the out-of-home terminal 20 (FIG. 1). However, the present invention is not limited to this, and the access permission list 31 may be stored in the HGW 11, and the HGW 11 permits / denies communication with the remote terminal 20 (FIG. 1) based on the access permission list 31. You may judge.

10 Home network 11 HGW
13 Home device 20 Outside terminal 30 SIP server (call control server)
31 Access Permission List 40 Address Management Server 41 Temporary IP Address Management Unit 50 Edge Router 60 Secure Access System 100 IP Network

Claims (8)

A secure access system in which a home gateway of a home network accommodating a home device and an out-of-home terminal are connected to an IP network having a call control server for performing call control and an address management server for paying out a temporary IP address. ,
The out-of-home terminal accepts / denies communication based on the access permission list indicating the correspondence between the telephone number of any device accommodated in each home network and the telephone number of the out-of-home terminal permitted to communicate. Permission is judged,
The home gateway notifies at least the temporary IP address issued by the address management server to the out-of-home terminal permitted to communicate;
A secure access system characterized by that. The temporary IP address is issued from the address management server to the home gateway,
The home gateway notifies the external terminal of the temporary IP address and access information related to the home device;
The secure access system according to claim 1. The access information is an identifier related to the home device,
When the home gateway receives a communication packet with the temporary IP address and the identifier related to the home device from the outside terminal, the home gateway converts the local IP address of the home device into a communication packet.
The secure access system according to claim 2. The access information is a port number related to the home device,
When the home gateway receives a communication packet with the temporary IP address and the port number associated with the home device from the outside terminal, the home gateway converts the communication packet to the local IP address and reception port number of the home device as a destination. To
The secure access system according to claim 2. The home gateway deletes the temporary IP address when remote access by the out-of-home terminal is terminated,
The secure access system according to claim 3 or 4, characterized by the above. The temporary IP address is issued from the server to the home device,
The home gateway, when notifying the temporary IP address to the outside terminal, transparently set a firewall for the temporary IP address,
The secure access system according to claim 1. When the remote access by the out-of-home terminal ends, the home gateway sets a firewall to be blocked for the temporary IP address.
The secure access system according to claim 6. Secure access of a secure access system in which a home gateway of a home network that accommodates home devices and an out-of-home terminal are connected to an IP network that includes a call control server that performs call control and an address management server that issues a temporary IP address A method,
The out-of-home terminal accepts / denies communication based on the access permission list indicating the correspondence between the telephone number of any device accommodated in each home network and the telephone number of the out-of-home terminal permitted to communicate. Permission is judged,
The home gateway notifies at least the temporary IP address issued by the address management server to the out-of-home terminal permitted to communicate;
The secure access method characterized by the above-mentioned.

Images