Virtual private network (VPN) for servicing home gateway system through external disk management

A local area network comprising:

• at least one Internet-capable appliance connected to the local area network for controlling integration of the local area network to a wide area network;
• a least one additional appliance connected to the local area network, the appliance capable of communication with data sources operating on the wide area network;
• a control device for recording and controlling aspects of connectivity and configuration of appliances connected to the local area network;
• and
• a mass storage device accessible to the control device and to entities operating on the wide area network;
• characterized in that a primary service provider maintains some control over the controlling device for the purpose of enabling secondary providers of services including deliverable commodities to access the mass storage device and selected portions of the control device in order to effect and manage services in a fashion dictated and permitted by the primary service provider.

A server software for managing remote network access for service entities to a control device connected to a mass storage device, the control device and mass storage device connected to a local area network comprising:

• a portion thereof for partitioning the mass storage device into a plurality of virtual data storage areas;
• a portion thereof for communicating to the control device and for communicating to the service entities;
• a portion thereof for establishing separate virtual networks, the networks assigned to individual ones of the virtual data storage areas;
• and
• a portion thereof for managing authentication and security over the virtual networks;
• characterized in that a primary service provider maintaining the server software grants permission for selected service entities to setup and configure services on the control device including establishing the virtual networks between the individual service entities and the control device wherein the individual entities are assigned an individual or shared portion of a data storage area partitioned from the mass storage device and wherein the individual entities are granted limited control over the assigned virtual storage areas.

A network-based system for facilitating secure private networks between service entities operating on a wide area network, the service entities serving a client operating on a local area network comprising:

• a system server connected to the wide area network for serving as a network management facility accessible to the service entities;
• a server software hosted on the system server for establishing the secure private networks;
• a control device connected to the local area network for integrating devices on the network and for establishing an interface to the system server;
• a mass storage device connected to the control device on the local area network for storing data;
• and
• a user authentication key insert able to the control device for authenticating a user to the local area network and for identifying, configuring, and activating services made available by the service entities;
• characterized in that the server software communicating with the control device partitions the mass storage device into a plurality of data storage areas, the data storage areas dedicated individually, in shared fashion, or both to the service entities such that the service entities have limited control over assigned storage areas and secure access to the storage areas through virtual private networks.