KR101260737B1 - System for remote access - Google Patents

Abstract

The present invention relates to a remote access system using a Universal Plug and Play Internet Gateway Device (UPnP IGD).
For example, an agent module for remote access of the control target device; And a client module for remote access of a control device, wherein the agent module searches for a UPnP IGD, acquires an external IP of the searched UPnP IGD, and performs port mapping. Device Control Point) module; And a remote access module for providing remote access information set through the IGD CP module, wherein the client module searches for the remote access module and obtains remote access information from the found remote access module. And a remote access system for transmitting, to the UPnP IGD, remote access information obtained through the remote access CP module so that the UPnP IGD performs packet rewrite when attempting remote access from an external network. do.

Description

Remote access system {SYSTEM FOR REMOTE ACCESS}

The present invention relates to a remote access system.

Recently, as computing technology is applied to small and various devices, inexpensive and universal networking media technologies are emerging or commercialized. For example, various devices such as a refrigerator, a TV, a washing machine, a PC, and an audio device used in a home are connected to a single network, and the user can easily know how to use and set up to maximize user convenience. For this purpose, UPnPTM (hereinafter, abbreviated as UPnP) function has been proposed.

Since Plug and Play (PnP) has been added to the current operating system, installing and configuring PC peripherals has become much easier, but Universal Plug and Play (UPnP) has brought these convenient features to the Internet, such as TCP / IP, HTTP, and XML. It is a technology that allows network devices such as home appliances, network printers, and Internet gates to be networking, especially home networking, by extending to the entire network based on standard technology.

As a general method for remotely accessing an external control device (for example, an IP camera or a NAS (Network Attached Storage)) from an external controller device (for example, a smartphone), DDNS (Dynamic DNS) This is done by using a service or manually port forwarding the router.

However, in order to use the DDNS service, the user subscribes to the DDNS service, receives a specific DNS (Domain Name Service), and relies on the DDNS server. In addition, manual port forwarding on the router is not familiar to general users and can be a cumbersome procedure.

The present invention provides a remote access system capable of automatically accessing remotely without a manual setting procedure without using a specific service or server by using a UPnP IGD (Universal Plug and Play Internet Gateway Device) service.

Remote control system according to an embodiment of the present invention, the agent module for remote access of the control target device; And a client module for remote access of the control device, wherein the agent module searches for a UPnP Universal Plug and Play Internet Gateway Device (IGD), obtains an external IP of the searched UPnP IGD, and port mappings. An IGD Internet Gateway Device Control Point (CP) module for performing configuration; And a remote access module for providing remote access information set through the IGD CP module, wherein the client module searches for the remote access module and obtains remote access information from the found remote access module. When the remote access attempt in the external network, the UPnP IGD transmits the remote access information obtained through the remote access CP module to the UPnP IGD so as to perform packet rewrite.

The remote access module may store a device name of the control target device and set a password for authentication when requesting remote access information.

In addition, the remote access information provided by the remote access module may include information about an external IP address of the UPnP IGD, an external port number configured for port mapping, and a URL.

The remote access CP module requests remote access information to the remote access module within an internal network, and the remote access module requests a password input in response to the request for the remote access information, and inputs an input password. If is authenticated may transmit the remote access information to the client module.

The client module may obtain and store remote access information from a remote access module of at least one or more control target devices through the remote access CP module.

The client module may allow at least one of the control target devices corresponding to the stored remote access information to be selected through the control device.

According to the present invention, a UPnP IGD (Universal Plug and Play Internet Gateway Device) service can be used to provide a remote access system capable of automatically accessing remotely without using a specific service or a server without a manual setting procedure.

1 is a block diagram showing a schematic configuration of a remote access system according to an embodiment of the present invention.
FIG. 2 is a diagram illustrating an IGD device discovery and port mapping procedure between the agent module and the UPnP IGD of FIG. 1.
FIG. 3 is a diagram illustrating a procedure for obtaining user authentication and remote access information between an agent module and a client module of FIG. 1.
4 is a diagram illustrating a remote access procedure between the control target device and the control device of FIG. 1.
5 is a view showing the overall remote access procedure of the remote access system according to an embodiment of the present invention.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Preferred embodiments of the present invention will now be described in detail with reference to the accompanying drawings, so that those skilled in the art can easily carry out the present invention.

Hereinafter, a configuration of a remote access system according to an embodiment of the present invention will be described in detail with reference to the accompanying drawings.

1 is a block diagram showing a schematic configuration of a remote access system 1000 according to an embodiment of the present invention.

1, the remote access system 1000 using the UPnP IGD (30, 40) according to an embodiment of the present invention, the agent module 100 and the control device for remote access of the control target device 10 And a client module 200 for remote access of 20.

UPnP IGDs 30 and 40 can set or control the main functions of the Internet gateway through UPnP and support NAT. UPnP IGD service can be provided through the home / wireless router. The main functions provided by UPnP IGDs 30 and 40 include Internet connection control, port mapping configuration control, and wide area network (WAN) interface status monitoring and control. Other devices or applications that can recognize the UPnP IGDs 30 and 40 can automatically find the UPnP IGDs 30 and 40 and make their own settings.

The control target device 10 is a device configuring a local network (home network), and may provide a specific service to an external network. For example, the control target device 10 may be an IP camera, a network attached storage (NAS), a PC, or the like.

The control device 20 may be a device that tries to access the local network device, that is, the control target device 10 from an external network through an internet communication network. For example, it may be a smartphone, a table pad, a PC, or the like that can use 3G or Wi-Fi.

As shown in FIG. 1, the agent module 100 may include an IGD CP module 110 and a remote access module 120, and the server 11 of the control target device 10. It may be implemented in hardware or software with a function.

The IGD CP module 110 may search for the UPnP IGD 30 existing in the local network, that is, the home network, and obtain an external IP from the searched UPnP IGD 30. In addition, the IGD CP module 110 transmits a port mapping for its private IP to the UPnP IGD 30 in order to provide a specific service from the control target device 10 to the external control device 20. Can be set. When the port mapping is set, the client module 200 of the control apparatus 20 to be described later uses the agent module of the control target device 10 by using the port number set to the external IP address and the port mapping when attempting a remote access from the external network. 100), and the remote access method in the external network will be described later. For example, the photo mapping setting may be performed in the same manner as the port forwarding setting method between the router and the PC existing in the home network. It can be done automatically.

The remote access module 120 may store the remote access information set through the IGD CP module 110 and provide the stored remote access information to a system requiring the remote access information. Remote access information provided by the remote access module 120 may include an external IP, an external port, and a URL of the UPnP IGD 30.

On the other hand, the server 11 of the control target device 10 is configured to register and change the password for authentication when requesting the device name and remote access information of the control target device 10, the registered and changed information is remote It is stored as remote connection information of the connection module 120. Therefore, the remote access module 120 stores information on the external IP, external port, URL, and device name of the UPnP IGD 30 as remote access information, and may store a password for authentication when requesting remote access information. The password setting here is optional by the user and is required for device registration. The device name change is also optional and can be registered and changed by the user.

As shown in FIG. 2, the client module 200 may include a remote access CP module 210, and may be implemented in hardware or software by mounting a server 21 function of the control device 20.

The remote access CP module 210 may search for a remote access module 120 existing in a local network, that is, a home network, and obtain remote access information from the found remote access module 120.

When a password is set in the remote access module 120, when the remote access CP module 210 requests the remote access information from the remote access module 120, the remote access module 120 responds to the request for remote access information. In this case, the user inputs a password through the server 21 of the client module 200. At this time, the input password does not match the password set in the remote access module 120, authentication failure may be terminated the remote access information request. In addition, if the input password matches the password set in the remote access module 120, the authentication is successful, the remote access module 120 transmits the remote access information to the client module 200, the client module 200 The remote access information transmitted from the remote access module 120 is stored.

The remote access CP module 210 may obtain remote access information from remote access modules of a plurality of control target devices, respectively, and the client module 200 may store information obtained through the remote access CP module 210, respectively. Can be. Accordingly, the client module 200 registers a plurality of remote control target devices.

When the user wants to remotely access the control target device existing in the local network through the external network, the client module 200 informs the list of the control target devices registered through the server 21 to control the user desired. When the target device can be selected and a control target device to be remotely selected is selected, corresponding remote access information can be obtained from the client module 200. In this case, the remote access information obtained from the client module 200 is information on the UPnP IGD connected to the selected control target device, and may include an external IP address of the corresponding UPnP IGD, an external port number configured for port mapping, and a URL. have.

The client module 200 transmits the remote access information to the corresponding UPnP IGD through its server 21, and the UPnP IGD changes the packet by using the transmitted external IP address and an external port number configured with port mapping. Will be performed. In this case, the corresponding UPnP IGD may change the external IP address and the port mapping set external port number included in the transmitted information into a local IP address and a local port number, respectively. In addition, the server 11 of the agent module 100 receives and processes a packet from the UPnP IGD, so that the control device 200 in the external network can be remotely connected to the control target device 100 existing in the local network. have.

Hereinafter, a remote access procedure of the remote access system 1000 according to an embodiment of the present invention will be described in detail with reference to the accompanying drawings.

First, the UPnP IGD discovery and port mapping procedure in the remote access procedure according to an embodiment of the present invention will be described.

FIG. 2 is a diagram illustrating an IGD device discovery and port mapping procedure between the agent module 100 and the UPnP IGD 30 of FIG. 1.

First, a user may register and change a password for authentication when requesting a device name and remote access information of the control target device 10 through the server 11 of the control target device 10 (1.1). The changed information may be stored as remote access information of the remote access module 120. Here, device name and password registration and change are optional by the user, and in particular, password registration and change may be omitted.

Next, the IGD CP module 110 may search for the UPnP IGD 30 existing in the local network, that is, the home network (1.2), and obtain an external IP from the retrieved UPnP IGD 30 (1.3).

Next, the IGD CP module 110 may perform port mapping of the UPnP IGD 30 for providing a specific service from the control target device 10 to the external control device 20 (1.4). ). Here, the photo mapping setting may be performed in the same way as the port forwarding setting method between the router and the PC existing in the home network. After acquiring the external IP information of the UPnP IGD 30, the photo mapping setting may be performed on the IGD CP module 110. Can be performed automatically.

Next, the remote access information set through the IGD CP module 110 may be stored in the remote access module 120 (1.5).

Next, a procedure of searching for the remote access module 120 and obtaining remote access information of the agent module 100 will be described.

FIG. 3 is a diagram illustrating a procedure for obtaining user authentication and remote access information between an agent module and a client module of FIG. 1.

First, the remote access CP module 210 may search for a remote access module 120 existing in a local network, that is, a home network (2.1).

In this case, when a password is set in the retrieved remote access module 120, the remote access CP module 210 may request remote access information from the remote access module 120 (2.2).

Accordingly, the remote access module 120 may request a password input in response to the remote access information request (2.3), and the user inputs a password through the server 21 of the client module 200 (2.4.1). . The password input by the user is transmitted (2.4.2) to the remote access module 120 of the agent module 100 through the client module 200 to determine whether the password matches.

As a result of the determination, the password transmitted to the remote access module 120 does not match the preset password, and authentication fails and the remote access information request may be terminated. However, if the transmitted password matches the preset password, authentication is successful and the remote access module 120 transmits the remote access information to the client module 200 (2.5), and the client module 200 transmits the remote access module. Remote access information transmitted from 120 is stored in the memory 220 (2.6). The remote access CP module 210 may obtain remote access information from remote access modules of a plurality of control target devices, respectively, and the client module 200 may store information obtained through the remote access CP module 210, respectively. Can be. Accordingly, the client module 200 registers a plurality of remote control target devices.

Next, the remote access and service usage procedures of the control target device 10 and the control device 20 will be described.

4 is a diagram illustrating a remote access procedure between the control target device 10 and the control device 20 of FIG. 1.

When the user wants to remotely access the control target device existing in the local network through the external network, the client module 200 informs the list of the control target devices registered through the server 21 to control the user desired. Allows the selection of the target device (3.1).

Next, when the desired control target device is selected, corresponding remote access information can be obtained from the client module 200 (3.2). In this case, the remote access information obtained from the client module 200 is information on the UPnP IGD connected to the selected control target device, and may include an external IP address of the corresponding UPnP IGD, an external port number configured for port mapping, and a URL. have.

Next, the client module 200 transmits the remote access information to the corresponding UPnP IGD through its server 21 (3.3), and the UPnP IGD uses the transmitted external IP address and port mapping set external port number. Packet rewrite is performed (3.4). In this case, the corresponding UPnP IGD may change the external IP address and the port mapping set external port number included in the transmitted information into a local IP address and a local port number, respectively.

Next, the server 11 of the agent module 100 receives and processes a packet from the corresponding UPnP IGD (3.5), so that the control device 200 in the external network is connected to the control target device 100 existing in the local network. Can be remotely connected.

5 is a view showing the overall remote access procedure of the remote access system 1000 according to an embodiment of the present invention.

The overall remote access procedure of the remote access system 1000 to be described below will be described with reference to FIGS. 2 to 4.

First, an automatic photo mapping procedure between the control target device 10 and the UPnP IGD 30 will be described.

First, a user may register and change a password for authentication when requesting a device name and remote access information of the control target device 10 through the server 11 of the control target device 10 (1.1). The changed information is stored as remote access information of the remote access module 120.

Next, the IGD CP module 110 searches (1.2) the UPnP IGD 30 existing in the local network, that is, the home network, and obtains an external IP from the searched UPnP IGD 30 (1.3).

Next, the IGD CP module 110 performs port mapping setting of the UPnP IGD 30 (1.4).

Next, the remote access information set through the IGD CP module 110 is stored in the remote access module 120 (1.5).

The following is a procedure for registering the remote access information of the control target device 10 by the control device 20 on the same local network.

Next, the remote access CP module 210 searches for a remote access module 120 existing in the local network, that is, the home network (2.1).

Next, when a password is set in the retrieved remote access module 120, the remote access CP module 210 requests the remote access information from the remote access module 120 (2.2).

Next, the remote access module 120 may request a password input in response to the remote access information request (2.3), and the user inputs a password through the server 21 of the client module 200 (2.4.1). .

Next, the password input by the user is transmitted (2.4.2) to the remote access module 120 of the agent module 100 through the client module 200 to determine whether the password matches.

Next, as a result of the determination, the password transmitted to the remote access module 120 does not match the preset password, and authentication fails and the remote access information request is terminated. However, if the transmitted password matches the preset password, authentication is successful and the remote access module 120 transmits the remote access information to the client module 200 (2.5), and the client module 200 transmits the remote access module. The remote access information transmitted from 120 is stored in the memory 220 (2.6).

The following is a remote access procedure when the control device 30 attempts to remotely access the control target device 10 existing in the local network from the external network.

When the user wants to remotely access the control target device existing in the local network through the external network, the client module 200 informs the list of the control target devices registered through the server 21 to control the user desired. Allows the selection of the target device (3.1).

Next, when the desired control target device is selected, corresponding remote access information can be obtained from the client module 200 (3.2). At this time, the remote access information obtained from the client module 200 is information on the UPnP IGD connected to the selected control target device, and includes an external IP address of the corresponding UPnP IGD, an external port number configured for port mapping, and a URL.

Next, the client module 200 transmits the remote access information to the corresponding UPnP IGD through its server 21 (3.3), and the UPnP IGD uses the transmitted external IP address and port mapping set external port number. Perform packet rewrite (3.4).

Next, the server 11 of the agent module 100 receives and processes a packet from the UPnP IGD (3.5).

Accordingly, the control device 200 in the external network can be remotely connected to the control target device 100 existing in the local network.

According to an embodiment of the present invention, since the UPnP IGD service can automatically search for the IGD device and perform port mapping, it is necessary to use a separate service such as DDNS (Dynamic DNS) or manually perform port mapping. There is no.

In addition, there is no need to operate a separate server for remote access.

In addition, since the module for remote access is configured as a UPnP module, when the control device searches for the control target device and acquires the remote access information, the device can be automatically searched for and obtained information without additional setting.

In addition, when requesting remote access information from the control target device, a password is set, thereby improving security.

It will be apparent to those skilled in the art that the present invention may be practiced in various ways without departing from the spirit and scope of the present invention without departing from the spirit and scope of the present invention. It is.

1000: remote access system
100: agent module
110: IGD CP module
120: remote access module
200: client module
210: remote access CP module

Claims (6)

In the remote access system using the UPnP IGD service,
An agent module for remote access of the control target device; And
A client module for remote access of the control device,
The agent module,
An IGD CP module for searching for a UPnP IGD, acquiring an external IP of the found UPnP IGD, and performing port mapping configuration; And
And a remote access module for providing remote access information including information on an external IP address of the UPnP IGD set through the IGD CP module, an external port number set on the port mapping, and a URL.
The client module,
A remote access CP module for searching for the remote access module and obtaining remote access information from the searched remote access module;
When attempting a remote access in an external network, the UPnP IGD transmits the remote access information obtained through the remote access CP module to the UPnP IGD to perform packet change.
The UPnP IGD performs a packet change to change the external port number configured with the external IP address and port mapping to a local IP address and a local port number, and the server of the agent module receives the packet from the UPnP IGD and processes the control. And remotely access the device to the controlled device. The method of claim 1,
The remote access module,
A device name of the control target device is stored,
A remote access system, characterized in that a password is set for authentication when requesting remote access information. delete The method of claim 1,
The remote access CP module,
Requesting remote access information to the remote access module in an internal network,
The remote access module,
A password input is requested in response to the request for the remote access information, and the remote access system transmits the remote access information to the client module when the input password is authenticated. The method of claim 1,
The client module,
And remotely obtaining and storing remote access information from a remote access module of at least one control target device through the remote access CP module. The method of claim 5, wherein
The client module,
And at least one of control target devices corresponding to each of the stored remote access information can be selected through a control device.

Images