Methods and arrangements for security support for universal plug and play system
AssigneeTelefonaktiebolaget L M Ericsson (publ)
InventorVincent Huang
Life of this patent
Estimating the term…
Abstract
The present invention relates to a nodes and methods for use in a Universal Plug and Play (UPnP) system to provide support for both UPnP security and mobility of security aware UPnP nodes. A gateway is arranged to provide remote access to a UPnP network to remote UPnP nodes via the gateway. The gateway comprises means for creating a virtual UPnP node for emulating internal presence of a remote UPnP node on the UPnP network. The virtual UPnP node is arranged to obtain and store security information associated with the remote UPnP node. The security information specifies how the remote UPnP node is authorized to interact with other UPnP nodes in the UPnP network. The security information may be used to filter messages from the UPnP network to the remote UPnP node.
Claims28
A gateway for providing a remote Universal Plug and Play (UPnP) node access to a UPnP network via at least one external network, wherein the gateway comprises:
- means for creating a virtual UPnP node for emulating internal presence of the remote UPnP node on the UPnP network, wherein the virtual UPnP node is arranged to:
- obtain and store security information associated with the remote UPnP node, wherein the security information specifies how the remote UPnP node is authorized to interact with other UPnP nodes in the UPnP network;
- and
- filter messages received from the other UPnP nodes in the UPnP network using the security information such that only the received messages which (1) relate to the other UPnP nodes that the remote UPnP node is authorized to interact with and relate to actions that the remote UPnP node is authorized to perform or (2) relate to services that the remote UPnP node has been authorized to perform are forwarded through the at least one external network to the remote UPnP node.
A method in a gateway for providing a remote Universal Plug and Play (UPnP) node access to a UPnP network via at least one external network, the method comprising steps of:
- creating a virtual UPnP node for emulating internal presence of the remote UPnP node on the UPnP network,
- obtaining and storing security information associated with the remote UPnP node at the virtual UPnP node, wherein the security information specifies how the remote UPnP node is authorized to interact with other UPnP nodes in the UPnP network, and
- filtering messages received at the virtual UPnP node from the other UPnP nodes in the UPnP network using the security information such that only the received messages which (1) relate to the other UPnP nodes that the remote UPnP node is authorized to interact with and relate to actions that the remote UPnP node is authorized to perform or (2) relate to services that the remote UPnP node has been authorized to perform are forwarded through the at least one external network to the remote UPnP node.
A security console for use in a Universal Plug and Play (UPnP) network, wherein the security console comprises:
- means for receiving a request for control point authorization information from a virtual UPnP control point emulating an internal presence of a remote UPnP control point in the UPnP network, wherein the control point authorization information is information on which UPnP devices in the UPnP network that the remote UPnP control point is authorized to give commands to and information on which actions the remote UPnP control point is authorized to invoke on each of the UPnP devices;
- means for extracting the control point authorization information from at least one of any access control lists (ACLs) and owner lists stored in the security console;
- and
- means for sending the control point authorization information to the virtual UPnP control point.
A method in a security console in a Universal Plug and Play (UPnP) network, wherein the method comprises steps of:
- receiving a request for control point authorization information from a virtual UPnP control point emulating an internal presence of a remote UPnP control point in the UPnP network, wherein the control point authorization information is information on which UPnP devices in the UPnP network that the remote UPnP control point is authorized to give commands to and information on which actions the remote UPnP control point is authorized to invoke on each of the UPnP devices;
- extracting the control point authorization information from at least one of any access control lists (ACLs) and owner lists stored in the security console;
- and
- sending the control point authorization information to the virtual UPnP control point.
A gateway for providing a remote Universal Plug and Play (UPnP) node access to a UPnP network via at least one external network, wherein the gateway comprises:
- at least one processor;
- and,
- at least one memory that stores processor-executable instructions, wherein the at least one processor interfaces with the at least one memory to execute the processor-executable instructions, whereby said gateway is operable to:
- create a virtual UPnP node for emulating internal presence of the remote UPnP node on the UPnP network, wherein the virtual UPnP node is operable to:
- obtain and store security information associated with the remote UPnP node, wherein the security information specifies how the remote UPnP node is authorized to interact with other UPnP nodes in the UPnP network;
- and
- filter messages received from the other UPnP nodes in the UPnP network using the security information such that only the received messages which (1) relate to the other UPnP nodes that the remote UPnP node is authorized to interact with and relate to actions that the remote UPnP node is authorized to perform or (2) relate to services that the remote UPnP node has been authorized to perform are forwarded through the at least one external network to the remote UPnP node.
A security console for use in a Universal Plug and Play (UPnP) network, wherein the security console comprises:
- at least one processor;
- and,
- at least one memory that stores processor-executable instructions, wherein the at least one processor interfaces with the at least one memory to execute the processor-executable instructions, whereby said security console is operable to:
- receive a request for control point authorization information from a virtual UPnP control point emulating an internal presence of a remote UPnP control point in the UPnP network, wherein the control point authorization information is information on which UPnP devices in the UPnP network that the remote UPnP control point is authorized to give commands to and information on which actions the remote UPnP control point is authorized to invoke on each of the UPnP devices;
- extract the control point authorization information from at least one of any access control lists (ACLs) and owner lists stored in the security console;
- and
- send the control point authorization information to the virtual UPnP control point.
Dependencies are inferred from the claim text.