WO2006038391A1

WO2006038391A1 - Network apparatus and network system

Info

Publication number: WO2006038391A1
Application number: PCT/JP2005/015426
Authority: WO
Inventors: Kensuke Sumitomo
Original assignee: Megachips System Solutions Inc.
Priority date: 2004-09-30
Filing date: 2005-08-25
Publication date: 2006-04-13
Also published as: CN1765107A; JP2006101330A

Abstract

A network system wherein upon a connection of a network apparatus (1), a process from an establishment of a port-forward function of a router (3) to a request of assigning a sub-domain name at a DDNS server (7) is automatically performed, so that the network apparatus (1) can be accessed by a mobile telephone (8) with a domain name. A password required to acquire the sub-domain name and required to connect with the network apparatus is generated, by use of an encryption, from identification information inherent in the network apparatus, so that a third party can hardly estimate the password and hence the security for the network apparatus can be enhanced.

Description

Specification

Network device and network system

Technical field

[0001] The present invention relates to a technique that enables connection to a network device via the Internet.

Background art

[0002] In recent years, when broadband Internet has become common, network devices such as network cameras have been actively used.

[0003] If a network camera is connected to the Internet and used, an image captured by the network camera installed at home or the like can be viewed from a remote location. The network camera has a function to distribute the captured video and audio via the Internet, and designates the IP (Internal Protocol) address of the network camera connected to the Internet on a Web browser such as another computer device. This allows you to view the video being captured. For example, when using a surveillance camera to check whether an abnormal situation has occurred at home by looking at the image of the home captured with a network camera during a long trip, such as There are various uses.

[0004] In communication over the Internet, a method called DNS (Domain Name System) is generally used. The most basic purpose of this DNS is to provide the ability to convert between domain names and IP addresses. DNS allows the IP address, which is a list of 32bits numbers, to be converted into a domain name that is easy for humans to divide and memorize, so that users can easily set the IP address without being aware of the IP address. Can be accessed.

[0005] By using such a DNS, it becomes possible to view images captured by a network camera from a remote location.

Disclosure of the invention

[0006] In the present invention, simply connecting a network device to the Internet enables connection to the network device by a domain name, while providing high security for the connection. It aims at providing the technology which realizes.

[0007] When receiving a video captured by a home network camera while in a remote place, it is necessary to send a video transmission request to the home network camera from the receiver.

[0008] In general, when a network camera is connected to the Internet, generally, the network IP address of the network camera is not fixed. At a predetermined timing such as when connecting to the Internet, ISP (Internet Service Provider) will use the dynamic IP address allocated by the server. Therefore, if the global IP address to be used is changed frequently, it becomes difficult to match the global IP address with the domain name when using a network camera.

[0009] At this time, if a domain name with a fixed IP address is acquired, it is always possible to access the network camera with the same domain name. This requires costs for registration, maintenance, etc. Therefore, it is rarely used personally.

[0010] Therefore, in order to access the network camera, there is a problem that it is necessary to input a global IP address that is frequently changed and to make a connection request.

[0011] In order to solve such problems, recently, as a name resolution service, there is a method of using a simple DDNS (Dynamic Domain Name System) service provided by a corporate server connected to the network. . DDNS solves this problem by associating dynamically changing global IP addresses with subdomain names on the Internet.

[0012] For example, if there is a DDNS server with the domain name “00.

Consider the case where the subdomain name “.00” is assigned to a personal network camera. In this case, when accessing a network camera such as an external camera, enter the FQDN (Fully Qualified Domain Name (hereinafter referred to as “address”)) “xxx.xxx.co.jp” in the address input field. For example, the DDNS server with the domain name “00.000.co.jp” is a global IP that is registered in association with the subdomain name “xxx.00.co.jp”. By converting to an address, it is possible to connect to the network camera of the global IP address.

[0013] The network camera changes each time the global IP address assigned to it is changed. In addition, the domain name can be used instead of the global IP address by dynamically re-registering the global IP address with the DDNS server.

[0014] In addition, at home, a single global IP address is often used by a plurality of network devices such as network cameras and computer devices by using a router. In such a case, to use a network camera assigned a private IP address at home with a global IP address via the Internet, use the port port function of the router.

[0015] The port forward function is a function that assigns and transfers an access to a specific port number from the Internet side to a network device having a specific private IP address in the home. By using this function, the network camera can be used as a Web server on the Internet.

[0016] However, in order to use the port forward function, there is a problem that it takes time and effort to set a router.

[0017] Even when the network camera automatically sends its global IP address to the DDNS server and requests the DDNS server to assign a domain name, it is obtained in advance by user connection to the DNS server. The subdomain name is stored in the network camera, and the network camera requests the DDNS server to change the global IP address corresponding to the stored subdomain name to the sent global IP address. There are many things.

[0018] However, with this method, there is a problem that the user needs to connect to the DDNS server in advance to obtain the subdomain name and store it in the network camera, which is troublesome. It was.

[0019] To solve this, for example, unique identification information such as the serial number of the network camera power itself is transmitted to the DDNS server, and the DDNS server assigns a subdomain name based on the received serial number. A method is conceivable.

However, since the serial number is assigned to the same product with related contents such as a serial number, the subdomain name generated in accordance with the serial number can be easily guessed by a third party. Therefore, a third party can specify the address including the subdomain name guessed to There was a security problem in that video and audio were viewed by the third party when connected to the camera.

[0021] The first aspect of the network system according to the present invention that solves the above problem is that when connected to the network, the identification information of itself is encrypted and generated by the first cryptographic key operation. A network device that transmits the subdomain name and the global IP address, and a DDNS server that assigns the subdomain name to the global IP address to which the network device power is also transmitted. .

[0022] According to the first aspect of the network system of the present invention, it is possible to connect to a network camera using a domain name instead of a global IP address only by connecting a network device to the network. In addition, since the network device is connected using a subdomain generated by encrypting identification information such as a serial number, security related to access to the network device can be improved.

[0023] In addition, according to the second aspect of the network system of the present invention, when connected to the network, the subdomain name generated by encrypting its own identification information by the first encryption operation is transmitted. And a DDNS server that assigns the subdomain name to the global IP address of the extracted network device, including a network device that performs transmission data including the identification information transmitted from the network device. .

[0024] According to the second aspect of the network system of the present invention, a domain name, not a global IP address, can be obtained by simply connecting a network device to the network and not explicitly sending a global IP address. In addition to being able to connect to a network device using the network, the network device is connected using a subdomain name generated by encrypting identification information such as a serial number. The security related to can be improved.

[0025] Further, according to a third aspect of the network system of the present invention, when connected to a network, the network device that transmits its own identification information and a global IP address, and the global IP that has also transmitted the network device capability are provided. And a DDNS server that assigns a subdomain name generated by encrypting the identification information by a first encryption operation to the address. [0026] According to the third aspect of the network system of the present invention, it is possible to connect to a network device using a domain name instead of a global IP address only by connecting the network device to the network. In addition, since the connection is made using the subdomain name generated by encrypting the identification information such as the serial number by the DDNS server, security related to access to the network device can be improved.

[0027] Further, according to a fourth aspect of the network system of the present invention, when connected to a network, a network device that transmits its own identification information and a transmission including the identification information transmitted from the network device are provided. A DDNS server that assigns a subdomain name generated by encrypting the identification information by a first encryption operation to a global IP address of the network device extracted from data.

[0028] According to the fourth aspect of the network system of the present invention, the domain name, not the global IP address, can be obtained by simply connecting the network device to the network and not explicitly sending the global IP address. In addition to being able to connect to a network device using a network, it is connected using a subdomain name generated by encrypting identification information such as a serial number by a DDNS server. It is possible to improve security.

[0029] Further, according to a fifth aspect of the network system of the present invention, when connected to the network, a subdomain name generated by encrypting an input keyword by a fourth encryption operation, A network device that transmits a global IP address, and a DDNS server that assigns the subdomain name to the global IP address that has also transmitted the network device power.

[0030] According to the fifth aspect of the network system of the present invention, it is possible to connect to a network device using a domain name instead of a global IP address only by connecting the network device to the network. In addition, since the connection is made using the subdomain name generated by encrypting the keyword by the network device, the security related to the access to the network device can be improved.

[0031] Further, according to a sixth aspect of the network system of the present invention, when connected to the network, the sub-domain generated by encrypting the input keyword by the fourth encryption operation is used. And a DDNS server that assigns the subdomain name to the extracted global IP address of the network device. It is characterized by that.

[0032] According to the sixth aspect of the network system of the present invention, the domain name is used instead of the global IP address even if the global IP address is not transmitted simply by connecting the network device to the network. In addition to being able to connect to the network device, it is connected using the subdomain name generated by encrypting the keyword by the network device, so the security of access to the network device can be improved. it can.

[0033] Further, according to a seventh aspect of the network system of the present invention, when connected to the network, the network device that transmits the input keyword and the global IP address and the network device power are also transmitted. A D DNS server that assigns a sub-domain name generated by encrypting the keyword by a fourth cryptographic operation to the global IP address.

[0034] According to the seventh aspect of the network system of the present invention, it is possible to connect to a network device using a domain name instead of a global IP address only by connecting the network device to the network. Furthermore, since the connection is made using the subdomain name generated by encrypting the keyword by the DDNS server, the security related to the access to the network device can be improved.

[0035] Further, according to an eighth aspect of the network system of the present invention, when connected to a network, the network device transmits an input keyword, and transmission data including the keyword transmitted from the network device. A DDNS server that assigns a subdomain name generated by encrypting the keyword by a fourth cryptographic operation to the global IP address of the extracted network device. .

[0036] According to the eighth aspect of the network system of the present invention, the domain name is used instead of the global IP address even if the global IP address is not explicitly transmitted by simply connecting the network device to the network. In addition to being able to connect to a network camera using the network, it is connected using a subdomain name generated by encrypting the keyword by the DDNS server, improving security related to access to network devices. To do Can do.

[0037] Further, a ninth aspect of the network system according to the present invention is the network system according to any of the fifth, eighth and eighth aspects, wherein the DDNS server is the fourth encryption. When the subdomain name generated by encryption by operation is already assigned to a global IP address other than the global IP address of the network device, the network device notifies this, and the network device Upon receipt of the notification, it requests the input of a new keyword, and the subdomain name generated by encrypting the input new keyword or the new keyword by the fourth encryption operation. Is retransmitted to the DDNS server.

[0038] According to the ninth aspect of the network system of the present invention, it is determined whether or not the generated subdomain name is already assigned to another global IP address, and has already been assigned. The subdomain name generated by changing the keyword can be changed.

[0039] Further, a tenth aspect of the network system according to the present invention is the network system according to any one of the first to ninth aspects, wherein the network device is a random random number of domain names. The communication is performed with the DDNS server having the one domain name selected in the above.

[0040] According to the tenth aspect of the network system of the present invention, since the domain name constituting the address of the network device is selected and determined from a plurality of domain name models, the network Security for third parties attempting to connect to the device can be improved.

[0041] An eleventh aspect of the network system according to the present invention is the network system according to any one of the first to ninth aspects, in which the DDNS server is the network node of the network device. One domain name randomly selected from a plurality of domain names is assigned to the IP address together with the subdomain name.

[0042] According to the eleventh aspect of the network system of the present invention, since one domain name selected from a plurality of domain names is assigned to the network device, the network system It is possible to improve security for a third party who tries to connect to the work device.

[0043] Further, a twelfth aspect of the network system according to the present invention is the network system according to any one of the first to eleventh aspects, wherein the network device is connected to a router. The port forward function of the router is set.

[0044] According to the twelfth aspect of the network system of the present invention, even when a network device is connected to a router and used, the setting of the port forward function of the router is automatically performed, so that bothersome settings are made. There is no need to do.

[0045] Further, a thirteenth aspect of the network system according to the present invention is the network system according to any one of the first to twelfth aspects, wherein the network device transmits the identification information to the second A device password encrypted by cryptographic key operation is generated, and a connection to the network device is authenticated using the device password.

[0046] According to the thirteenth aspect of the network system of the present invention, access to the network device is performed by performing connection authentication to the network device using a device password generated from identification information such as a serial number. The security concerning can be improved.

[0047] Further, the fourteenth aspect of the network system according to the present invention is the network system according to any one of the first to thirteenth aspects, wherein the network device uses the input keyword as the first. And a connection to the network device is authenticated using the first user password.

[0048] According to the fourteenth aspect of the network system of the present invention, security related to access to the network device is obtained by performing connection authentication to the network device using a user password generated from the keyword. Will improve.

[0049] Further, a fifteenth aspect of the network system according to the present invention is the network system according to any one of the first to fourteenth aspects, wherein the network device assigns the input keyword to the third A second user password encrypted by the encryption key calculation is generated, and the connection to the network device is authenticated using the second user password.

[0050] According to the fifteenth aspect of the network system of the present invention, By using the user password to authenticate connection to the network device, security related to access to the network device is improved.

[0051] Further, a sixteenth aspect of the network system according to the present invention is the network system according to any one of the thirteenth to fifteenth aspects, in which the network device is a new sub-system after the authentication. When a domain name is input and a request to change the subdomain name is made, the new subdomain name is transmitted, and the DDNS server sends a request to the network IP address of the network device. The new subdomain name transmitted from the network device is assigned.

[0052] According to the sixteenth aspect of the network system of the present invention, it is possible to easily change the subdomain name without requiring access to the DDNS server or setting operation only by requesting the network device to change the subdomain name. can do.

[0053] Also, a seventeenth aspect of the network system according to the present invention is the network system according to any one of the first to sixteenth aspects, wherein the DDNS server is configured to handle the global IP address. When the assignment of the subdomain name is completed, an e-mail notifying the completion of the assignment is transmitted to a predetermined e-mail address.

[0054] According to the seventeenth aspect of the network system of the present invention, the user can connect to the network device according to the domain name by receiving an e-mail sent from the DDNS server. Recognize that it has become possible.

[0055] Also, an eighteenth aspect of the network system according to the present invention is the network system according to any one of the first to sixteenth aspects, wherein the DDNS server corresponds to the global IP address. When the assignment of the subdomain name is completed, this is notified to the network device, and the network device notifies the completion of the assignment of the subdomain name in response to the notification.

[0056] According to the eighteenth aspect of the network system of the present invention, the user is notified of the LED display etc. by the network device, and can connect to the network device by the domain name. Can be recognized.

[0057] Further, the nineteenth aspect of the network system according to the present invention is the network according to the eighteenth aspect. In the network system, the notification performed by the network device is performed by transmitting an e-mail to a predetermined e-mail address.

According to the nineteenth aspect of the network system of the present invention, the user can connect to the network device by the domain name by receiving the electronic mail transmitted from the network device. Can be recognized.

[0059] Further, according to a first aspect of the network device according to the present invention, when connected to the network, a subdomain name generated by encrypting its own identification information by a first encryption operation, And sending a global IP address to the DDNS server to request assignment of the subdomain name to the global IP address.

[0060] According to the first aspect of the network device according to the present invention, it is possible to connect to the network device using the domain name instead of the global IP address only by connecting the network device to the network. Since the connection is made using the subdomain name generated by encrypting the identification information such as the serial number by the network device, the security related to the access to the network device can be improved.

[0061] Further, according to the second aspect of the network device of the present invention, when connected to the network, the subdomain name generated by encrypting its own identification information by the first cryptographic operation is D It transmits to a DNS server, and requests the assignment of the subdomain name to its own global IP address.

[0062] According to the second aspect of the network device according to the present invention, the domain name is used instead of the global IP address even if the global IP address is not explicitly transmitted by simply connecting the network device to the network. In addition to being able to connect to the network device used, it is connected using the subdomain name generated by encrypting the identification information such as the serial number by the network device. Such security can be improved.

[0063] Further, according to a third aspect of the network device according to the present invention, when connected to the network, a subdomain name generated by encrypting an input keyword by a fourth encryption operation, And sending a global IP address to the DDNS server to request assignment of the subdomain name to the global IP address. [0064] According to the third aspect of the network device of the present invention, it is possible to connect to the network device using the domain name instead of the global IP address only by connecting the network device to the network. Since the connection is made by using the subdomain name generated by encrypting the keyword by the network device, security related to access to the network device can be improved.

[0065] Further, according to a fourth aspect of the network device of the present invention, when connected to the network, the DDNS generates a subdomain name generated by encrypting the input keyword by a fourth encryption operation. It is transmitted to a server, and the assignment of the subdomain name to its own global IP address is requested.

[0066] According to the fourth aspect of the network device according to the present invention, the domain name is used instead of the global IP address even if the global IP address is not explicitly transmitted by simply connecting the network device to the network. In addition to being able to connect to the network device used, it is connected using the subdomain name generated by encrypting the keyword by the network device, so security related to access to the network device is improved. be able to.

[0067] Further, a fifth aspect of the network device according to the present invention is the network device according to the third or fourth aspect, wherein the subdomain name is generated by being encrypted by the fourth encryption operation. When it recognizes that it has already been assigned to a global IP address other than its own global IP address, it requests input of a new keyword, and inputs the new keyword or the new keyword that has been input to the fourth IP address. The new subdomain name generated by encrypting by the cryptographic key operation is retransmitted to the DDNS server, and the new subdomain name is assigned to the global IP address of its own. It is characterized by requesting.

[0068] According to the fifth aspect of the network device of the present invention, when the generated subdomain name is already assigned to another global IP address, the subdomain generated by changing the keyword is used. You can change the domain name.

[0069] Further, a sixth aspect of the network device according to the present invention is the network device according to any one of the first to fifth aspects, wherein the plurality of domain names are randomly selected. And communicating with the DDNS server having the one domain name.

[0070] According to the sixth aspect of the network device of the present invention, since the domain name constituting the address of the network device is selected and determined from a plurality of domain name models, the network device Security against third parties attempting to connect to the network.

[0071] Further, a seventh aspect of the network device according to the present invention is the network device according to any one of the first to fifth aspects, in which the global IP address, together with the subdomain name, One domain name selected at random from among a plurality of domain names is assigned.

[0072] According to the seventh aspect of the network device of the present invention, since a single domain name having a plurality of domain name powers selected is assigned to the network device, an attempt is made to connect to the network device. Security for third parties can be improved.

[0073] Further, an eighth aspect of the network device according to the present invention is the network device according to any one of the first to seventh aspects, wherein when connected to a router, the port forwarding function of the router is It is characterized by setting.

[0074] According to the eighth aspect of the network device of the present invention, even when the network device is connected to a router and used, the router's port forwarding function is automatically set, so that troublesome settings are made. There is no need.

[0075] Further, a ninth aspect of the network device according to the present invention is the network device according to any one of the first to eighth aspects, wherein the identification information is obtained by a second encryption operation. An encrypted device password is generated, and the connection to the network device is authenticated using the device password.

[0076] According to the ninth aspect of the network device of the present invention, access to the network device is performed by performing connection authentication to the network device using the generated device password using identification information such as a serial number. The security concerning can be improved.

[0077] Further, a tenth aspect of the network device according to the present invention is the network device according to any one of the first to ninth aspects, wherein the input keyword is set as the first user pass password. , Connect the network device to the first user pass It is characterized by authenticating using a password.

[0078] According to the tenth aspect of the network device of the present invention, by performing connection authentication to the network device using the user password that also generates the keyword power, security related to access to the network device. Will improve.

[0079] Further, an eleventh aspect of the network device according to the present invention is the network device according to any one of the first to tenth aspects, wherein the input keyword is encrypted by a third cryptographic key operation. A second user password is generated, and the connection to the network device is authenticated using the second user password.

[0080] According to the eleventh aspect of the network device of the present invention, security related to access to the network device is obtained by performing connection authentication to the network device using the user password generated by the keyword power. Will improve.

[0081] Further, a twelfth aspect of the network device according to the present invention is the network device according to any one of the first to eleventh aspects, wherein a new subdomain name is input after the authentication. When the sub-domain name change request is made, the new sub-domain name is transmitted to the DDNS server, and the new sub-domain name is changed to its own global IP address. It is characterized by requesting allocation.

[0082] According to the twelfth aspect of the network device according to the present invention, it is possible to easily change the subdomain name without requiring access to the DDNS server or setting operation by simply requesting the network device to change the subdomain name. Can be changed.

[0083] Further, a thirteenth aspect of the network device according to the present invention is the network device according to any one of the first to eleventh aspects, wherein the subdomain name corresponding to the global IP address by the DDNS server is When it is recognized that the assignment is complete, the assignment completion is notified.

[0084] According to the thirteenth aspect of the network device according to the present invention, the user is notified of the LED display etc. by the network device, and can connect to the network device by the domain name. Can be recognized.

[0085] Further, the fourteenth aspect of the network device according to the present invention is the network device according to the thirteenth aspect, in which the notification sends an e-mail to a predetermined e-mail address. It is characterized by being performed by communication.

[0086] According to the fourteenth aspect of the network device according to the present invention, the user can connect to the network device according to the domain name by receiving the e-mail to which the network device power is also transmitted. Can be recognized.

[0087] Objects, features, aspects and advantages of the present invention will become more apparent from the following detailed description and the accompanying drawings.

Brief Description of Drawings

FIG. 1 is a diagram showing a configuration of a network system according to an embodiment of the present invention.

BEST MODE FOR CARRYING OUT THE INVENTION

[0089] (Embodiment 1)

(First embodiment)

FIG. 1 is a diagram showing a configuration of a network system according to the first embodiment of the present invention. The basic configuration of the network system is the network such as the Internet 6 [Network connected via modem 4 for communication using ADSL (Asymmetnc Digital bubscnoer Line) ^ FTTH (Fiber To The Home) etc. It has a device 1 and a DDNS server 7 connected to the Internet 6 as well.

In the home, in addition to the network camera 1, other network devices such as the computer device 2 for performing communication using the network are often used. In this case, the router 3 is connected to the modem 4 and all the network devices 1 and 2 are connected to the Internet 6 via the router 3 to perform communication. That is, a LAN (Local Area Network) 5 is configured by the network camera 1, the computer device 2, the router 3, and the modem 4.

Here, the computer apparatus 2 is shown as an example of a general network apparatus connected to the router 3, and the network camera 1 corresponds to the network apparatus of the present invention.

In addition, the mobile phone 8 in the figure is shown as an example of a terminal for browsing video captured by the network camera 1 using this network system.

[0093] The network camera 1 has a function of distributing captured video and audio as a Web server. As a result, the user can connect to the network camera 1 using the mobile phone 8 and use the web browser or the like for video and audio captured and distributed by the network camera 1. Can be viewed.

[0094] In addition to this, the network camera 1 also has a function of generating a subdomain name and password, a function of requesting the DDNS server 7 to assign the subdomain name, and connection authentication using the generated password. It has a function to perform various operations for realizing security, such as a function to perform.

[0095] Further, the network camera 1 has a UPnP (Universal Plug & Play) function, and can simply execute each of the above functions at a predetermined timing by simply connecting to the network.

[0096] Details of these functions and operations will be described later.

The computer apparatus 2 is an example of a general network apparatus that is connected to the Internet 6 like the network camera 1. Network camera 1 can be connected to the LAN using a private IP address via router 3, so you can view the video and audio captured by network camera 1 and make various settings for network camera 1. Can also be used.

The router 3 has a function of performing routing for using one global IP address assigned on the Internet 6 by a plurality of network devices 1 and 2 in the home. Specifically, the Dynamic Host Configuration Protocol (DHCP) function that assigns private IP addresses to multiple network devices 1 and 2 connected to LAN5, and these network devices 1 and 2 use the Internet 6. When communicating, it has a function to mutually convert the IP address related to the data to be sent and received into a private IP address in home 5 and a global IP address on the Internet 6.

[0099] In addition, when the router 3 receives a connection request from the network device on the Internet 6 for the purpose of viewing the captured video and audio to the network camera 1 operating as a Web server, It has a port forward function that realizes data transmission and reception between the network device and network camera 1. Specifically, a specific port is released from the router 3 to the Internet 6 side, and data is transmitted / received through the port.

[0100] For example, by assigning port number 80 to the private IP address of network camera 1, it is possible to respond to connection requests from the Internet 6 side that specify a global IP address. Network power that is connected to LAN5 at home and assigned a private IP address.

[0101] With this function, a terminal such as a mobile phone 8 connected to the network camera 1 from the outside via the Internet 6 can view video and audio captured by the network camera 1 using a Web browser or the like. It becomes possible.

[0102] Similarly, if port numbers 20 and 21 are to be assigned to the private IP address of network camera 1, FTP (File Transfer) can be used between network camera 1 and a terminal to which external power is also connected via the Internet 6. It is also possible to implement operations such as (Protocol) transfer.

[0103] Here, the global IP address used by the network camera 1 is assigned when the modem 4 connects to the Internet 6, but when the connection is terminated and reconnected, a new global IP address is assigned. It is done. Alternatively, the global IP address assigned every predetermined time may change. That is, the assigned global IP address is not fixed but changes dynamically.

[0104] The modem 4 is a device necessary for data communication via the Internet 6 using a global IP address assigned to the network device power of the network camera 1, the computer device 2, etc. It has a function to perform data communication by various methods such as FTTH.

[0105] The DDNS server 7 has a function of assigning a domain name and a subdomain name to a global IP address used by the network camera 1. As a result, when external power is connected to the network camera 1, it is possible to use an address including a domain name and a subdomain name that is not an IP address that is a list of numerical values.

The mobile phone 8 is connected to the network camera 1 via the Internet 6 and is used for viewing video and audio captured by the network camera 1. However, a mobile phone is an example, and a terminal used for viewing video and audio may be a computer device or a PDA (Personal Digigal Assistant).

Next, the operation of the network system shown in FIG. 1 will be described.

[0108] Router 3 and modem 4 are connected to the Internet 6, and The IP address is assigned.

First, when the network camera 1 is connected to the router 3, a private IP address is assigned to the network camera 1 by the DHCP function of the router 3.

[0110] Next, the network camera 1 automatically starts setting the port forward function of the router 3 at a predetermined timing using the UPnP function. Specifically, the router 3 that uses the global IP address is set to forward the connection to port 80, for example, to the private IP address assigned to the network camera 1. As a result, the network camera 1 can operate on the Internet 6 as a Web server << using the global IP address assigned to the router 3.

[0111] Regarding the setting relating to the port forward function of the router 3, other port numbers such as 20 and 21, etc. may be set in the same manner.

[0112] In this state, it is necessary to specify a global IP address, which is an enumeration of numbers, in order to connect to the network camera 1 using the mobile phone 8 or the like and view the captured video and audio. Therefore, the network camera 1 starts a connection to the DDNS server 7 via the Internet 6 so that a domain name can be assigned to this global IP address.

[0113] In the network camera 1, information for connecting to the DDNS server 7 is set in advance at the manufacturing stage. Specifically, the information includes the DNS server 7 address, information necessary for connection authentication, etc., and the network camera 1 uses the information to connect to the DDNS server 7 with authentication. Data transmission / reception and subdomain name assignment requests can be made.

[0114] In addition, the network camera 1 has a subdomain name that requests assignment to the DDNS server 7 and a user who requests connection to itself at a predetermined timing until connection to the DDNS server 7 is started. The camera password (device password) for authenticating the password is set.

[0115] The subdomain name is obtained by encrypting a serial number, which is unique identification information assigned to each network camera 1, by a predetermined encryption operation (first encryption operation). Similarly, for the camera password, the serial number is assigned to a predetermined encryption operation (second It is encrypted by encryption operation). These are automatically generated in the network camera 1 and stored and managed in the network camera 1 together with the serial number and information related to the DDNS server 7.

[0116] Since the first encryption operation is used for the subdomain name, the results generated by the encryption key need not be duplicated. If the serial number can be used as a sub-domain name and the operation result can be obtained with numerical power, the content of the encryption operation is not required, but a third party can obtain the operation result from information such as the serial number. It is desirable that it cannot be easily estimated.

[0117] The second encryption operation is used for connection authentication to the network camera 1 distinguished by each subdomain name, so a third party can easily guess the information power calculation result such as the serial number. If it can't be done, it doesn't matter if the calculation results overlap! /. However, in order to avoid having the same subdomain name and password, it is desirable to obtain an operation result different from the operation result of the first encryption operation.

[0118] The encryption operation for generating the subdomain name and the camera password and the setting to the network camera 1 may be performed at the manufacturing stage of the network camera 1, or may be performed by the user on the network camera 1. It may be a mode that is automatically performed at a predetermined timing after the power is turned on.

[0119] The information related to the FQDN (hereinafter referred to as the address) including the subdomain name and the domain name of the DDNS server 7, and the notification of the camera password for connecting to the network camera 1, It may be a mode in which the printed matter describing these is bundled with the network camera 1 at the manufacturing stage, or the display device (not shown) such as a liquid crystal provided in the network camera 1 or the network camera 1 at a predetermined timing. It may be a mode in which it is displayed on a display device or the like provided in the computer device 2 connected via LAN.

[0120] If the identification information used for generating the subdomain name and camera password is unique to each network camera 1, information other than the serial number, such as a MAC (Media Access Control) address, is used. It doesn't matter.

[0121] When the network camera 1 completes the setting of the port forward function of the router 3 and recognizes that the global IP address can be used, the network camera 1 next executes the preset information. The information is used to connect to the DDNS server 7, notify the subdomain name generated by the cryptographic operation as described above, the global IP address and serial number, and request assignment of the subdomain name.

[0122] The DDNS server 7 assigns the received subdomain name to the global IP address received from the network camera 1, and manages the subdomain name in association with the serial number and the global IP address of the network camera 7. . When the setting of the subdomain name is completed, the DDNS server 7 notifies the network camera 1 of this.

[0123] When the network camera 1 receives a notification from the DDNS server 7 that the setting of the subdomain name has been completed, the network camera 1 displays the notification on its own display device or a lamp such as an LED (not shown). The user is notified by lighting or the like. The user can recognize that the setting has been completed and the connection to the network camera 1 using the subdomain name has become possible through these notifications.

[0124] The subdomain name assignment request method to the DDNS server 7 is limited to a mode in which the encrypted subdomain name is transmitted from the network camera 1 to the DDNS server 7 as described above. is not. Specifically, the DDNS server 7 can execute the first encryption operation described above, and only the serial number is transmitted from the network camera 1, and the DDNS server 7 transmits the received serial number to the first It is also possible to generate and use a subdomain name by encrypting by the encryption key operation.

[0125] Further, the method of notifying the user of the completion of the setting of the subdomain name is not limited to the above-described mode. For example, when a user inputs and sets an e-mail address in advance in the network camera 1, and the network camera 1 makes a subdomain name assignment request to the DDNS server 7, the e-mail address is simultaneously set in the DDNS server In this case, the DD NS server 7 may notify that the setting of the subdomain name is completed by sending an e-mail to the e-mail address. Alternatively, the network camera 1 that is notified of the completion of setting from the DDNS server 7 may be in a mode of transmitting an e-mail.

[0126] The DDNS server 7 recognizes the global IP address of the network camera 1. The method is not limited to the mode in which the global IP address is transmitted from the network camera 1 as described above. Specifically, the global IP address is not explicitly transmitted from the network camera 1, and the DDNS server 7 analyzes and includes the data including the serial number transmitted from the network camera 1. It may be a mode of extracting and using the global IP address.

[0127] Furthermore, the timing for transmitting information such as the serial number from the network camera 1 to the server 7 is not limited to immediately after the network camera 1 global IP address is available. For example, a predetermined time has elapsed. It may be a mode performed at an arbitrary timing set in advance, such as later.

[0128] After that, the user uses the mobile phone 8 to designate the network camera 1 by specifying an address including the subdomain name assigned to the network camera 1 that is not an IP address that is an enumeration of numbers. Can be connected to one. If the camera password is input as the password required at this time, it is possible to view the video and audio captured by the network camera 1 using the Web server function of the network camera 1.

[0129] The global IP address assigned to the router 3 via the modem 4 may be dynamically changed as described above.

[0130] When network camera 1 recognizes that the global IP address assigned to router 3 has been changed, it sends information such as the global IP address to DDNS server 7 at predetermined intervals. In addition to changing the contents of the global IP address managed by, the serial number and the changed global IP address are sent to the DDNS server 7.

As a result, the global IP address corresponding to the managed serial number is also changed in the DDNS server 7. At this time, the network camera 1 also sets the port forward function of the router 3 as described above if necessary.

[0132] At this time, the network camera 1 transmits the subdomain name instead of the serial number to the DDNS server 7 together with the changed global IP address, and the global IP address corresponding to the subdomain name. It may be an aspect of requesting the change. is there Alternatively, the DDNS server 7 that received only the serial number or subdomain name recognized the change of the global IP address of the network camera 1 from the global IP address obtained by analyzing the received data. , You may change the setting ヽ

[0133] As a result, even if the global IP address is changed, the change is automatically reflected in the settings of DDNS Server 7 without any user operation. Therefore, even in an environment where the global IP address is dynamically changed, the user can easily connect to the network camera 1 using an address made up of the domain name.

[0134] When the private IP address assigned to itself is changed by the router 3 or the like, the network camera 1 that has recognized this changes the setting of the port forward function of the router 3, and the Internet 6 Ensure that the connection request is correctly processed as for network camera 1.

[0135] Thus, even when the private IP address is changed, the change that the user does not perform any operation is automatically reflected in the setting of the router 3. For this reason, the user can easily connect to the network camera 1 by using an address having a domain name.

In network camera 1, information such as a serial number, a global IP address, a subdomain name, and a camera password is stored and managed.

[0137] The user can change the subdomain name, camera password, and the like managed by the network camera 1 by using the computer device 2 connected to the network camera 1 by LAN.

[0138] Specifically, after specifying the private IP address from computer device 2 and connecting to network camera 1, entering the password for the camera and receiving authentication, the information stored and managed by network camera 1 is changed. It becomes possible. If the subdomain name is changed to a new subdomain name at this time, the network camera 1 automatically connects to the DDNS server 7 and changes the subdomain name managed by the DDNS server 7 to the new subdomain name. Require this. Subdomain names are assigned by the same operation as described above. Thereafter, the network camera using the address including the changed subdomain name is used. Connection to 1 is possible. After changing the camera password, after connecting to the network camera 1, you can enter the new password to receive connection authentication and view the video and audio captured by the network camera 1. It becomes.

[0139] Note that changing the subdomain name is not limited to changing the subdomain name that is stored and managed by the network camera 1, and notifying the DDNS server 7 of the change and changing the subdomain name assignment. Absent. Specifically, the user uses the computer device 2 or the mobile phone 8, and the network camera 1 stores and manages the information, such as the address of the DDNS server 7 and the user ID and password necessary for authentication. It is possible to connect to the DDNS server 7 based on the above and change the subdomain name of the network camera 1 stored and managed in the DDNS server 7. At this time, the method of notifying the user of the information necessary for connecting to the DDNS server 7 may be a mode of notifying the information described in the printed matter in which the camera password described above is described, Notification may be made via the display device provided in the network camera 1 or the computer device 2 connected to the network camera 1 via LAN. When the subdomain name is changed, the DDNS server 7 notifies the network camera 1 of the change, and the changed content is reflected in the information stored and managed in the network camera 1. That is, the subdomain name can be changed by operating either the network camera 1 or the DDNS server 7.

[0140] In this way, just by connecting the network camera 1 to the router 3, all the operation power from the setting related to the port forwarding function of the router 3 to the acquisition of the subdomain name in the DDNS server 7 is performed. 1 and done automatically by DDNS server 7. The user simply waits for the DDNS server 7 to finish setting the subdomain name of the network camera 1, specifies the address that includes the subdomain name, connects to the network camera 1, and enters the camera password. It is possible to connect to the network camera 1 via the Internet 6.

[0141] Also, when a private IP address or global IP address is changed, the change is automatically reflected in the settings of network camera 1 and DDNS server 7, so the user can change the IP address. It is possible to use an address that also has domain power without changing the setting each time it is executed. [0142] The subdomain name and camera password for connecting to network camera 1 are encrypted and difficult for a third party to guess. And audio can be avoided from being viewed by a third party, and security related to the connection to the network camera 1 can be enhanced.

[0143] (Second embodiment)

In the first embodiment, a mode has been described in which the subdomain name generated by the cryptographic operation and the camera password are used based on the serial number that is the identification information of the network camera 1. This embodiment is different from the first embodiment in that a user password is issued and authentication is performed based on a keyword input for each user.

[0144] The configuration of the network system is the same as that of the first embodiment, and only the functions and operations of the network camera 1 and the DDNS server 7 are different. Therefore, the details of the present embodiment will be described below with a focus on differences from the first embodiment with reference to FIG.

[0145] When the network camera 1 is connected to the router 3, the UPnP function automatically sets the port forward function of the router 3 at a predetermined timing in the same manner as in the first embodiment.

[0146] Also, in the manufacturing stage, information for connecting to the DDNS server 7 is set in the network camera 1 in advance in order to request assignment of a subdomain name, as in the first embodiment. It is.

[0147] The network camera 1 has a predetermined timing until connection to the DDNS server 7 is started, a subdomain name that requests assignment to the DDNS server 7, and the above-described description in the first embodiment. Instead of the camera password, a user password used to authenticate the user accessing the user is set.

[0148] The subdomain name is the same as described above in the first embodiment. The serial number, which is unique identification information assigned to each network camera 1, is encrypted by the first cryptographic operation and used as the subdomain name.

[0149] The user password is set for the network camera 1 by the user entering a keyword. The specific setting is performed as follows. [0150] First, the network camera 1 connected to the router 3 notifies the user that the user password has not been set at a predetermined timing using a display device, an LED lamp, or the like. , Prompt for keywords.

[0151] A user who has received the request uses a display device and an operator (not shown) provided in the network camera 1 or a computer device 2 connected to the network camera 1 via a LAN, etc. Enter a keyword for 1.

[0152] When a keyword is input, the network camera 1 stores and manages it as a user password (first user password) together with a serial number, a global IP address, and the like stored therein.

Note that the user password is not limited to a mode in which the keyword input by the user is used as it is. Specifically, it may be an aspect in which an input keyword encrypted by a third encryption operation is used as a user password (second user password). As a result, for example, even when the user inputs a value that can be used to guess the information power of the user, such as name and birthday, as a keyword, the generated user password is encrypted. Therefore, it is difficult for a third party to guess, and the security for connection to the network camera 1 is improved.

[0154] The third encryption operation, like the second encryption operation, is used for connection authentication to the network camera 1 distinguished by each subdomain name. Information power such as information related to users and serial numbers The calculation results may be duplicated as long as the calculation results cannot be easily estimated. However, in order to avoid having the same subdomain name and password, it is desirable to obtain an operation result different from the operation result of the first cryptographic key operation. In addition, when used together with a camera password as described later, it is desirable that an operation result different from the operation result of the second cryptographic key operation is obtained.

[0155] When the network camera 1 completes the setting of the port forward function of the router 3 and the setting of the user password, the network camera 1 starts a connection request to the DDNS server 7 and a subdomain name assignment request.

[0156] Then, as described above in the first embodiment, DDNS Sano 7 assigns a subdomain name to the global IP address of network camera 1 and Notification of completion of subdomain name assignment for Mela 1 is performed.

[0157] Thereafter, the user can connect to the network camera 1 by using the mobile phone 8 and specifying an address including a subdomain name that is not an IP address that is a list of numbers. If the user password is entered as the password required at this time, it becomes possible to view the video and audio captured by the network camera 1 using the web server function of the network camera 1. .

[0158] The user password can also be changed by an operation on the network camera 1 in the same manner as the change of the subdomain name described in the first embodiment. After changing the user password, after connecting to the network camera 1, you can receive connection authentication by entering the changed user password and view the video and audio captured by the network camera 1. It becomes.

[0159] The authentication using the password is not limited to a mode in which any one of the camera password described in the first embodiment or the user password described in the present embodiment is used. You may be the aspect which utilizes.

[0160] Specifically, when connecting to network camera 1, you are first prompted to enter a password for the camera, and after entering this and authenticating, you are prompted to enter a user password, and two passwords are entered. Only when the input is correct, the user may be authenticated and the video and audio from the network camera 1 may be distributed.

[0161] In addition, the user password is not limited to the mode of using either the keyword itself entered by the user or the one encrypted by the third cryptographic key operation as described above. The keyword itself may be used as the first user password, and the keyword encrypted with the third encryption key operation may be used as the second user password.

[0162] If authentication is performed multiple times using a password selected from the camera password, the first user password, and the second user password, compared to using only one password. This can improve the security for a third party who tries to connect to the network camera 1.

[0163] Thus, instead of the camera password described in the first embodiment, a user pass is used. By using a word, the same security effect as that of the first embodiment can be obtained. At this time, by encrypting the keyword entered by the user, the security for the network capability 1 can be further improved. Furthermore, if the user password is used together with the camera password and authentication is performed twice or three times, the security can be further improved.

[0164] (Third embodiment)

In the first embodiment, a mode has been described in which a subdomain name and a camera password generated by cryptographic key operation are used based on identification information such as a serial number of the network camera 1. This embodiment is different from the first embodiment in that a subdomain name generated based on a keyword input by a user is used.

The configuration of the network system is the same as that of the first embodiment, and only the functions and operations of the network camera 1 and the DDNS server 7 are different. Therefore, the details of the present embodiment will be described below with a focus on differences from the first embodiment with reference to FIG.

[0166] When the network camera 1 is connected to the router 3, the UPnP function automatically sets the port forward function of the router 3 at a predetermined timing, similar to the first embodiment.

[0167] Also, the network camera 1 is pre-set with information for connecting to the DDNS server 7 in order to request subdomain name assignment in the manufacturing stage, as in the first embodiment. It is.

[0168] The network camera 1 is set with a subdomain name that requests assignment to the DDNS server 7 and a password for the camera at a predetermined timing until the connection to the DDNS server 7 is started. .

[0169] The camera word is the same as that described above in the first embodiment. The camera password is obtained by encrypting the serial number, which is unique identification information assigned to each network camera 1, by the second encryption key operation.

[0170] The subdomain name is set for the network camera 1 by the user entering a keyword. The specific setting is performed as follows. First, the network camera 1 connected to the router 3 informs the user that the subdomain name has not been set using a display device, an LED lamp, or the like at a predetermined timing. To ask for keyword input.

[0172] A user who has received the request uses a display device and an operator (not shown) provided in the network camera 1 or a computer device 2 connected to the network camera 1 via a LAN, etc. Enter a keyword for 1.

[0173] When a keyword is input, the network camera 1 generates and uses a subdomain name obtained by encrypting the keyword by the fourth encryption operation. Thus, for example, even when the user inputs a value that can be used to estimate the information power of the user, such as name and birthday, as a keyword, the generated subdomain name is encrypted. It becomes difficult for a third party to guess and security for the connection to the network camera 1 is improved.

[0174] For the fourth cryptographic operation, the content of the cryptographic operation is not limited as long as it can obtain an operation result that can be used as a sub-domain name from the keyword entered by the user or a numerical value. It is desirable that the third party cannot easily estimate the calculation result from information related to the user or information such as a serial number. In addition, in order to avoid having the same password as that for the camera, it is desirable to obtain an operation result different from the operation result of the second encryption operation. As will be described later, when used together with the user password described above in the second embodiment, it is desirable to obtain an operation result that is different from the operation result of the third encryption operation.

The generated subdomain name is stored and managed in the network camera 1 together with the serial number, global IP address, etc. stored in the inside.

[0176] When the network camera 1 completes the setting of the port forward function of the router 3 and the generation of the subdomain name, the network camera 1 starts the connection to the DDNS server 7 and the subdomain name assignment request.

[0177] Then, as described above in the first embodiment, the DDNS server 7 assigns a subdomain name and notifies the network camera 1 of the completion of subdomain name assignment.

[0178] At this time, the subdomain name sent from network camera 1 already has another global IP. When used in association with an address, the DDNS server 7 notifies the network capability 1 of this.

[0179] Upon receiving notification from the DDNS server 7 that the subdomain name is not available, the network camera 1 displays this on its own display device or lights a lamp such as an LED. To inform the user.

[0180] Upon receiving this, the user inputs the keyword again. Then, a new subdomain name is generated by the fourth encryption operation, and the subdomain name assignment request to the D DNS server 7 is started again using the subdomain name.

[0181] As described above, the operations from the input of the user keyword to the assignment of the subdomain name in the DDNS server 7 are repeated until the generated subdomain name becomes usable in the DDNS server 7. It is. If the generated subdomain name does not overlap with that already used for other global IP addresses, the subdomain name is assigned to the network IP address of network camera 1.

[0182] Then, as described above in the first embodiment, notification of completion of sub-domain name assignment is made, and thereafter, the user uses the mobile phone 8 to enter an IP that is a list of numbers. You can connect to network camera 1 by specifying an address that includes a subdomain name rather than an address. If the camera password is entered in the password required at this time, it is possible to view the video and audio captured by the network camera 1 using the Web server function of the network camera 1. It becomes.

The setting of the subdomain name generated by the fourth cryptographic operation can also be changed by operating the network camera 1 as described above in the first embodiment. If the subdomain name is changed, the change is automatically reflected in the DDNS server 7 settings. After that, the network camera 1 can be connected by specifying the address including the changed subdomain name. The same can be said about the point where it becomes possible.

[0184] As in the first embodiment, the method of requesting the subdomain name assignment to the DDNS server 7 is the same as that described above from the network camera 1 to the DDNS server 7. It is not limited to the mode in which the subdomain name is transmitted. Specifically, the DDN S server 7 can execute the fourth cryptographic operation and is used from the network camera 1. It is also possible to transmit only the keyword entered by the user, and the DDNS server 7 encrypts the received keyword by the fourth cryptographic key operation to generate a subdomain name and use it.

[0185] Further, the method of the DDNS server 7 recognizing the global IP address of the network camera 1 is not limited to the mode of transmitting the global IP address from the network camera 1 as in the first embodiment. . Specifically, the global IP address is not explicitly transmitted from the network camera 1, and the DDNS server 7 analyzes the data including the subdomain name transmitted from the network camera 1, There may be a mode in which the global IP address included therein is extracted and used.

[0186] Further, the authentication using the password is not limited to the mode using the camera node described in the first embodiment, but the mode using the user password described in the second embodiment. It does not matter. At this time, the user password is not limited to the camera password, and a plurality of passwords may be used.

[0187] Specifically, when connecting to network camera 1, you will be prompted to enter a password for the camera. If you enter this and receive authentication, you will be prompted to enter a user password, and two passwords will be entered correctly. In this case, the user may be authenticated only and the video and audio from the network camera 1 may be distributed.

[0188] Further, as described above in the second embodiment, the user password used at this time is either the keyword itself entered by the user or the one encrypted by the third encryption operation. The keyword entered by the user is used as the first user password, and the keyword encrypted by the third encryption operation is used as the second user password. It may be an aspect.

In this way, instead of the subdomain name encrypted with the serial number described above in the first embodiment, the subdomain name encrypted with the keyword entered by the user is used. Thus, the same effect as in the first embodiment can be obtained.

[0190] Further, if the user password described above in the second embodiment is used together with the camera password, authentication is performed twice or three times to further improve security. Can do.

[0191] (Fourth embodiment)

In the first embodiment, the subdomain name encrypted with the serial number, which is identification information, is used, and the connection to the network camera 1 is authenticated using the camera password with the serial number encrypted. By doing so, security for network camera 1 is maintained.

In the second embodiment, a user password generated based on a keyword input by the user is used instead of the camera password of the first embodiment or together with the camera password. The security of network camera 1 is improved through authentication.

[0193] Further, in the third embodiment, a mode of using a subdomain name obtained by encrypting a keyword input by a user is shown.

This embodiment is a technique for further improving the security for network camera 1 in the first to third embodiments.

[0195] Connect network camera 1 to router 3 to generate a subdomain name and password, then connect to DDNS server 7 to receive subdomain name assignment and specify an address that includes the subdomain name Connected to the network camera 1, authenticated using the generated camera password or user password, and the operations from viewing the video and audio captured by the network camera 1 are all first through first. This is the same as the third embodiment.

[0196] The only difference is the information related to the DDNS server 7 that is stored and set in the network camera 1 at the manufacturing stage.

[0197] Specifically, multiple types of domain names for the DDNS server 7 are prepared, and the domain names stored and set in each network camera 1 at the manufacturing stage are medium random among these multiple domain names. To choose.

In the first to third embodiments, an address including the domain name of the DDNS server 7 is stored and set in the network camera 1 at the manufacturing stage. As the subdomain name, the serial number unique to each network camera 1 or the one encrypted by the first or fourth cryptographic operation from the keyword input by the user is used. [0199] Specifically, for example, when the DDNS server 7 has a domain name “00.jp”, the subdomain name generated by the encryption key is “smtm”. To connect to the network camera 1, specify an address such as “smtm.xxx.jp”.

That is, in the first to third embodiments, only the subdomain name portion of the above-mentioned address, that is, only the “smtm” portion is used. The serial number of each network camera 1 or the user's Based on the keyword you enter, it is encrypted to a value that cannot be predicted by a third party.

[0201] On the other hand, in the present embodiment, the domain name of “DDNS server 7” “00.jp” is also selected from a plurality of medium strengths. For example, in addition to “00.jp” as domain names, a plurality of domain names such as “mouth □ .ne.jp” and “△△△ .netj” are prepared. The domain name randomly selected from is stored in each network camera 1.

[0202] From this, for example, in the above example, the network camera 1 with the subdomain name "smtm" does not necessarily have the address "smtm.00.jp", but "smtm. DD D. There is a possibility of an address such as “ne.jp” or “smtm. ΔΔΔ .netj”.

[0203] The determination of the domain name to be assigned to each network camera 1 from among a plurality of domain names is not limited to the mode performed at the manufacturing stage of each network camera 1. Specifically, at the manufacturing stage of each network camera 1, as in the first to third embodiments, a single domain name is set, and the DDNS server 7 having the domain name uses the subdomain name. When allocating, the domain name randomly selected from a plurality of domain names may be simultaneously allocated and notified to the network camera 1 and the user.

[0204] As in the first to third embodiments, when the addresses of each network camera 1 are different only in the subdomain name, for example, one network camera 1 is obtained and the domain name is recognized. If a third party changes the subdomain name appropriately, it may be connected to the network camera 1 of a user other than itself.

However, according to the present embodiment, there are a plurality of types in the domain name portion, and a third party who tries to connect to the network camera 1 other than the domain name is assigned to each network camera 1. I can't know the domain name of the DDNS server 7 assigned to, just how many domain names exist, and I can't even know the power of it! /.

Therefore, it becomes more difficult for a third party to predict the address of the network camera 1, and it is possible to improve security for a third party who tries to connect to the network camera 1.

[0207] Although the present invention has been described in detail, the above description is illustrative in all aspects, and the present invention is not limited thereto. Innumerable variations not illustrated The power of the scope of the present invention It is understood that the power can be assumed without departing.

Claims

The scope of the claims

[1] When connected to the network (6), the network device (1) that transmits the subdomain name generated by encrypting its identification information by the first encryption operation and the global IP address ,

A DDNS server (7) for assigning the sub-domain name to the transmitted network IP address of the network device power;

A network system comprising:

[2] When connected to the network (6), a network device (1) for transmitting a subdomain name generated by encrypting its own identification information by a first encryption operation;

DDNS sano (7) for assigning the subdomain name to the global IP address of the network device extracted from the transmission data including the identification information transmitted from the network device;

A network system comprising:

[3] When connected to the network (6), the network device (1) that transmits its identification information and global IP address,

A DDNS server (7) that assigns a sub-domain name generated by encrypting the identification information by a first encryption operation to the Glorenole IP address to which the network device power is also transmitted;

A network system comprising:

[4] A network device (1) that transmits its identification information when connected to the network (6), and a global IP address of the network device extracted from transmission data including the identification information transmitted from the network device A DDNS server (7) to which a subdomain name generated by encrypting the identification information by a first encryption operation is assigned.

[5] When connected to the network (6), the network that transmits the subdomain name generated by encrypting the input keyword by the fourth cryptographic key operation and the global IP address is sent. Device (1),

A network system comprising:

[6] When connected to the network (6), the network device (1) for transmitting the subdomain name generated by encrypting the input keyword by the fourth encryption operation,

A DDNS server (7) for assigning the subdomain name to a global IP address of the network device extracted from transmission data including the keyword transmitted from the network device;

A network system comprising:

[7] When connected to the network (6), the network device (1) that transmits the entered keyword and global IP address,

A D DNS server (7) that assigns a sub-domain name generated by encrypting the keyword by a fourth encryption operation to the global IP address transmitted from the network device;

A network system comprising:

[8] When connected to the network (6), the network device (

1) and

The subdomain name generated by encrypting the keyword by a fourth encryption key operation with respect to the global IP address of the network device extracted from the transmission data including the keyword transmitted from the network device DDNS server (7) to assign

A network system comprising:

[9] The network system according to any one of claims 5 and 8, wherein

The DDNS server (7) has been assigned to a global IP address other than the global IP address of the network device (1), which is generated by encrypting the fourth cryptographic key operation. If this is the case, this is notified to the network device, Upon receipt of the notification, the network device requests input of a new keyword.

The network system, wherein the input new keyword or the subdomain name generated by encrypting the new keyword by the fourth encryption operation is retransmitted to the DDNS server.

[10] The network system according to any one of claims 1 to 8 and claim 8,

The network device (1) communicates with the DDNS server (7) having one domain name randomly selected from a plurality of domain names.

[11] A network system according to any one of claims 1 to 8,

The DDNS server (7) assigns one domain name selected at random from a plurality of domain names to the global IP address of the network device (1) together with the subdomain name. A network system characterized by this.

[12] The network system according to any one of claims 1 and 8 and claim 8,

When the network device (1) is connected to a router (3), it sets a port forwarding function of the router.

[13] The network system according to claim 1,

The network device (1) generates a device password obtained by encrypting the identification information by a second encryption operation, and authenticates a connection to the network device using the device password. Network system.

[14] The network system according to claim 13,

The network device transmits a new subdomain name when a new subdomain name is input after the authentication and a change request for the subdomain name is made, and the DDNS server transmits the network A network system characterized by assigning the new subdomain name to which the network device capability is also transmitted to the global IP address of the device.

[15] The network system according to any one of claims 2 and 8, wherein

The network device (1) generates a device password obtained by encrypting the identification information by a second encryption operation, and connects the network device with the device password. A network system characterized by authentication using a password.

[16] The network system according to any one of claims 1 to 8 and claim 8,

The network system, wherein the network device (1) sets an input keyword as a first user password, and authenticates a connection to the network device using the first user password.

[17] A network system according to any one of claims 1 to 8,

The network device (1) generates a second user password obtained by encrypting the input keyword by a third cryptographic key operation, and connects the network device to the second user password. A network system characterized by using and authenticating.

[18] The network system according to any one of claims 1! And 8, wherein

The DDNS server (7) transmits an e-mail notifying completion of assignment to a predetermined e-mail address when the assignment of the subdomain name to the glossary IP address is completed. Network system.

[19] The network system according to claim 1,

The DDNS server (7) notifies the network device (1) of the completion of the assignment of the subdomain name to the global IP address,

The network system is characterized by notifying the completion of assignment of the subdomain name in response to the notification.

[20] The network system according to claim 19,

The network system characterized in that the notification performed by the network device (1) is performed by transmitting an electronic mail to a predetermined electronic mail address.

[21] The network system according to any one of claims 2 and 8, wherein

[22] When connected to the network (6), the subdomain name generated by encrypting its own identification information by the first encryption operation and the global IP address are sent to the DDNS server (7). And requesting assignment of the subdomain name to the global IP address.

[23] When connected to the network (6), it sends the subdomain name generated by encrypting its own identification information using the first encryption operation to the DDNS Sano (7), and sends it to its own global IP address. A network device (1), which requests assignment of the subdomain name.

[24] When connected to the network (6), it sends the subdomain name generated by encrypting the input keyword by the fourth cryptographic operation and the global IP address to the DDNS server (7). And requesting assignment of the subdomain name to the global IP address.

[25] When connected to the network (6), the sub-domain name generated by encrypting the input keyword by the fourth cryptographic key operation is sent to the DDNS server (7), and its global A network device (1) characterized by requesting assignment of the subdomain name to an IP address.

[26] The network device (1) according to claim 24 or claim 25,

When it is recognized that the subdomain name generated by encryption by the fourth encryption operation is assigned to a global IP address other than its own global IP address, a new keyword is input. The new subdomain name generated by requesting and encrypting the input new keyword or the new keyword by the fourth cryptographic key operation is retransmitted to the DDNS server (7). And requesting the allocation of the new subdomain name to the global IP address of the network device.

[27] The network device (1) according to any one of claims 22 and 25, wherein the D DNS has one domain name randomly selected from a plurality of domain names. A network device that communicates with a server (7).

[28] The network device (1) according to any one of claims 22 and 25, wherein the global IP address is randomly selected from a plurality of domain names together with the subdomain name. The selected domain name is assigned to Network device.

[29] The network device (1) according to any one of claims 22 and 25, wherein when connected to the router (3), the port forward function of the router is set. Feature network device.

[30] The network device (1) according to any one of claims 22 and 25, wherein a device password is generated by encrypting the identification information by a second encryption operation, and A network device, wherein a connection to a network device is authenticated using the password for the device.

[31] The network device (1) according to any one of claims 22 and 25, wherein the input keyword is set as the first user password, and the connection to the network device is A network device, wherein authentication is performed using a first user password.

[32] The network device (1) according to any one of claims 22 and 25, wherein the input user keyword is encrypted by a third encryption key operation. A network device that authenticates a connection to the network device by using the second user password.

[33] The network device (1) according to any one of claims 22 and 25, wherein a new subdomain name is input after the authentication, and a request to change the subdomain name is issued. When the new subdomain name is sent, the new subdomain name is sent to the DDNS server (7) to request the assignment of the new subdomain name to the global IP address of itself. Feature network device.

[34] A network device (1) according to claim 22,

A network device characterized in that when the DDNS server (7) recognizes that the assignment of the subdomain name to the global IP address has been completed, it notifies the completion of the assignment.

[35] A network device (1) according to claim 34,

The network device is characterized in that the notification is performed by transmitting an e-mail to a predetermined e-mail address. The network device (1) according to any one of claims 23 and 25, wherein the DDNS server (7) recognizes that the assignment of the subdomain name to the global IP address has been completed. A network device characterized by notifying completion of allocation.