# US 2015/0146567 A1 · Device arrangement and method for implementing a data transfer network used in remote control of properties > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2015/0146567 A1 - Document ID: US20150146567A1 - Status: Published application - Kind: A1 - Application number: 14/370,872 - Filed: 2013-01-07 - Published: 2015-05-28 - Earliest claimed: 2012-01-09 - Assignees: Tosibox Oy - Applicants: Tosibox Oy - Inventors: Veikko Ylimartimo - Web page: https://patentgrep.com/patent/US20150146567A1 ## CPC - H04L 12/4641: {Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272)} - H04L 41/0806: for initial configuration or provisioning, e.g. plug-and-play - H04L 61/2567: for reachability, e.g. inquiring the address of a correspondent behind a NAT server - H04L 61/2575: using address mapping retrieval, e.g. simple traversal of user datagram protocol through session traversal utilities for NAT [STUN] - H04L 63/0272: {Virtual private networks} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04L 69/165: Combined use of TCP and UDP protocols; selection criteria therefor - H04L 61/2514: between local and global IP addresses - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract In a remote control method, a virtual private network is established between a home control network key and a home control network device of the remote control system in a property. In order to establish the virtual private network both the home control network key and device determine their network paths to the Internet from the data transfer network to which they are connected. The determined network paths are stored in a home control network server on the Internet. When it is desired to form a virtual private network, the home control network server supplies the stored network paths to the home control network key and the home control network device. By utilizing the received network paths the home control network key and the home control network device start establishing a virtual private network between them with several known by them establishing methods of a data transfer connection. ## Claims ### Claim 1 A method for providing a virtual private network (55, VPN) between a first network terminal (42, 42b) and a second network terminal (61) of the actuators of the remote control system in a property, wherein both the first network terminal (42, 42b) and the second network terminal (61) that form a predetermined network terminal pair, the members of which are allowed to communicate only with each other, send at times a poll to the home control network server (21), in which it is asked whether the other device of the device pair is connected to the data transfer network, and if it is, then both the first network terminal (42, 42b) and the second network terminal (61) make a connection (201) to the home control network server (21) in order to establish a virtual private network and request (204) the routing information from the home control network server (21) in order to establish an end-to-end data transfer connection between said network terminals the home control network server (21) sends (205) both to the first network terminal (42, 42b) and the second network terminal (61) the requested routing information (205) after it has checked that the network terminals (42, 42b, 61) are the predetermined network terminal pair, and that the first network terminal (42, 42b) and the second network terminal (61) start with several known establishing methods of a virtual private network an establishing process of an end-to-end data transfer connection in order to provide at least one virtual private network (55). ### Claim 2 (depends on 1) The remote control method according to claim 1, wherein the virtual private network is established as a direct TCP data transfer connection between the network terminals (2060, 2060a), as a direct UDP data transfer connection between the network terminals (2061, 2061a), by using UDP port scanning between the network terminals (2062, 2062a), by utilising ICMP ECHO messages of the IP control protocol (2063, 2063a) or with a TCP data transfer connection (2064, 2064a) relayed via the home control network server (21). ### Claim 3 (depends on 2) The method according to claim 2, wherein at least the relayed virtual TCP private network is released, if the virtual private network (55) has been established also with another method of establishing a virtual private network. ### Claim 4 A home control network key (42, 42b) for actuators in a property, comprising network interface elements, which comprise input/output means (424, 425, 426, 426b, 427, 428) for network interfaces (3, 4) a processor (422, 422b) and a memory (423, 423b), which contains computer program code wherein the processor, the memory and the computer program code stored therein are configured to send at times a poll to a home control network server (21), in which it is asked whether a home control network device (61) predetermined to be a network terminal pair of the home control network key (42, 42b), with which home control network device the home control network key (42, 42b) is only allowed to communicate, is connected to the data transfer network, and if it is, then make a connection (201) to the home control network server (21) and to request (204) the routing information of the home control network device (61) from the home control network server (21) in order to establish a virtual private network to the home control network device (61) receive the routing information of the home control network device (61) from the home control network server (21) and start with several known establishing methods of a virtual private network an establishing process of an end-to-end data transfer connection in order to provide at least one virtual private network (55) with the home control network device (61). ### Claim 5 (depends on 4) The home control network key according to claim 4, wherein the home control network key is configured to establish a virtual private network as a direct TCP data transfer connection (2060, 2060a) to the home control network device (61), as a direct UDP data transfer connection (2061, 2061a) to the home control network device (61), by using UDP port scanning (2062, 2062a) with the home control network device (61), by utilising ICMP ECHO messages of the IP control protocol (2063, 2063a) with the home control network device (61) or to establish a TCP data transfer connection (2064, 2064a) relayed via the home control network server (21) to the home control network device (61). ### Claim 6 (depends on 5) The home control network key according to claim 5, wherein the home control network key is configured to release at least the relayed virtual TCP private network, if the virtual private network (55) has been established also with another method of establishing a virtual private network. ### Claim 7 A home control network device (61) for actuators in a property, comprising network interface elements, which comprise input/output means (624, 625, 626, 627, 628) for network interface (5) a processor (622) and a memory (623), which contains computer program code wherein the processor, the memory and the computer program code stored therein are configured to send at times a poll to a home control network server (21), in which it is asked whether a home control network key (42, 42b) predetermined to be a network terminal pair of the home control network device (61), with which home control network key the home control network device (61) is only allowed to communicate, is connected to the data transfer network, and if it is, make a connection (201) to the home control network server (21) and to request (204) the routing information of the home control network key (42, 42b) from the home control network server (21) in order to establish a virtual private network to the home control network key (42, 42b) receive the routing information of the home control network key (42, 42b) from the home control network server (21) and start with several known establishing methods of a virtual private network an establishing process of an end-to-end data transfer connection in order to provide at least one virtual private network (55) with the home control network key (42, 42b). ### Claim 8 (depends on 7) The home control network device according to claim 7, wherein the home control network key is configured to establish a virtual private network as a direct TCP data transfer connection (2060, 2060a) to the home control network key (42, 42b), as a direct UDP data transfer connection (2061, 2061a) to the home control network key (42, 42b), by using UDP port scanning (2062, 2062a) with the home control network key (42, 42b), by utilising ICMP ECHO messages of the IP control protocol (2063, 2063a) with the home control network key (42, 42b) or to establish a TCP data transfer connection (2064, 2064a) relayed via the home control network server (21) to the home control network key (42, 42b). ### Claim 9 (depends on 8) The home control network device according to claim 8, wherein the home control network key is configured to release at least the relayed virtual TCP private network, if the virtual private network (55) has been established also with another method of establishing a virtual private network. ### Claim 10 A home control network server (21), comprising network interface elements, which comprise input/output means (614) a processor (612) and a memory (613), which contains computer program code, wherein the processor, the memory and the computer program code stored therein are configured to store in the memory of the home control network server an identification information of a network terminal pair (42, 42b, 61) formed by two network terminals, used for remote-controlling of a property receive from the network terminal pair (42, 42b, 61) the network path information determined by them receive from the first network terminal (42, 42a) the routing information request of its network terminal pair check, which is the other network terminal (61) functioning as the predetermined network terminal pair of the first network terminal that made the routing information request, with which second network terminal the first network terminal (42, 42a) is only allowed to communicate send the routing information of the network terminal pair both to the first network terminal (42, 42a) and the second network terminal (61), if they both are connected to the data transfer network receive cyberspace information in use in connection with the network terminal pair (42, 42b, 61) and to send the allowed cyberspace information to the home control network device (61) and release the data transfer connection to the network terminal pair (42, 42a, 61), when at least one direct virtual private network (55) has been successfully established between the network terminal pair (42, 42a, 61). ### Claim 11 A computer program comprising computer program code means stored on a computer-readable storage means for providing home control network device functions, comprising code means for determining the routing information from a home control network key (42, 42b) to the Internet (2), wherein the computer program further comprises: code means for sending at times a poll to a home control network server (21), in which it is asked whether a home control device (61) with which the home control network key (42, 42a) forms a predetermined terminal pair, the members of which are allowed to communicate only with each other, is connected to the data transfer network, and if it is, then code means for making a connection (201) to the home control network server (21) and for requesting (204) the routing information of the home control network device (61) from the home control network server (21) in order to establish a virtual private network to the home control network device (61) code means for receiving the routing information of the home control network device (61) from the home control network server (21) and code means for starting with several known establishing methods of a virtual private network an establishing process of an end-to-end data transfer connection in order to provide at least one virtual private network (55) with the home control network device (61). ### Claim 12 (depends on 11) The computer program according to claim 11, wherein the home control network key further comprises code means which is configured to establish a virtual private network as a direct TCP data transfer connection (2060, 2060a) to the home control network device (61), as a direct UDP data transfer connection (2061, 2061a) to the home control network device (61), by using UDP port scanning (2062, 2062a) with the home control network device (61), by utilising ICMP ECHO messages of the IP control protocol (2063, 2063a) with the home control network device (61) or to establish a TCP data transfer connection (2064, 2064a) relayed via the home control network server (21) to the home control network device (61). ### Claim 13 (depends on 12) The computer program according to claim 12, further comprising code means which is configured to release at least the relayed virtual TCP private network, if the virtual private network (55) has been established also with another method of establishing a virtual private network. ### Claim 14 A computer program comprising computer program code means stored on a computer-readable storage means for providing home control network device functions, comprising code means for determining the routing information from a home control network device (61) to the Internet (2), wherein the computer program further comprises: code means for sending at times a poll to a home control network server (21), in which it is asked whether a home control key (42, 42b) with which the home control network device (61) forms a predetermined terminal pair, the members of which are allowed to communicate only with each other, is connected to the data transfer network, and if it is, code means for making a connection (201) to the home control network server (21) and to request (204) the routing information of the home control network key (42, 42b) from the home control network server (21) in order to establish a virtual private network to the home control network key (42, 42b) code means for receiving the routing information of the home control network key (42, 42b) from the home control network server (21) and code means for starting with several known establishing methods of a virtual private network an establishing process of an end-to-end data transfer connection in order to provide at least one virtual private network (55) with the home control network key (42, 42b). ### Claim 15 (depends on 14) The computer program according to claim 14, further comprising code means which is configured to establish a virtual private network as a direct TCP data transfer connection (2060, 2060a) to the home control network key (42, 42b), as a direct UDP data transfer connection (2061, 2061a) to the home control network key (42, 42b), by using UDP port scanning (2062, 2062a) with the home control network key (42, 42b), by utilising ICMP ECHO messages of the IP control protocol (2063, 2063a) with the home control network key (42, 42b) or for establishing a TCP data transfer connection (2064, 2064a) relayed via the home control network server (21) to the home control network key (42, 42b). ### Claim 16 (depends on 15) The computer program according to claim 15, further comprising code means which is configured to release at least the relayed virtual TCP private network, if the virtual private network (55) has been established also with another method of establishing a virtual private network.