CN101075994A - Household gateway device - Google Patents

Abstract

In household gateway device for controlling the indoor machine connected with household network using outdoor location, the load to the server is reduced and the safety is increased and the communication is realized to be applicable for more models of outdoor location. The said device comprises storing part for keeping the information related to the preset device; visit control part for controlling the visit between the said outdoor location. The said visit control part sends the information which is related to the preset device and obtained from the storing part to the said exterior gateway device. In the said exterior gateway devic, when the information related to the outdoor location from the outdoor location is judged whether it conforms to the information related to the preset device, the control part performs the control of the communication of the said outdoor location not via exterior gateway device.

Description

Home Gateway Device

technical field

The invention relates to a home gateway device and a network access control system.

Background technique

Home gateway devices connected to home appliances such as TVs, DVD/HDD recorders, air conditioners, and lighting equipment, and/or residential equipment such as electric door locks and various sensors (hereinafter, these are referred to as "indoor equipment") , it is known that an outdoor device such as a mobile phone accesses from the outside to control an indoor unit.

As a prior art for preventing unauthorized access to the above-mentioned home network, for example, the technology described in Patent Document 1 is known. It discloses that an access server device connected to an outdoor device via the Internet performs authentication of the outdoor device, and a home gateway device disposed at an entrance of a home network communicates only with the access server device, thereby preventing unauthorized access from the outdoor device.

In addition, Patent Document 2 discloses an IP telephone device that performs peer-to-peer communication without going through a special server (Gatekeeper) in particular in consideration of the load on the server.

[Patent Document 1] Japanese Patent Laid-Open No. 2002-77274

[Patent Document 2] Japanese Patent Laid-Open No. 2003-158553

Contents of the invention

However, in the technique disclosed in Patent Document 1, when an authorized outdoor device performs data communication with an indoor unit, the data must pass through the access server device. Therefore, when communication data is concentrated and when large-capacity data communication is performed, the load on the access server device increases. Therefore, in this case, the communication speed with the home network decreases, or there is a possibility that the communication is blocked.

On the other hand, in the technology described in Patent Document 2, since a special server (gatekeeper) is not required, the high load on the server and the like is reduced, but unauthorized access is not considered. In order to prevent unauthorized access, it is necessary to perform authentication of the outdoor unit by each indoor unit. In this case, if the number of outdoor devices communicating with the indoor units is increased, it is troublesome that the authentication function of each indoor unit must be updated one by one.

Also, similarly, the technology described in Patent Document 2 does not disclose changing the display screen to be suitable for each model of the outdoor device when accessing from various models of outdoor devices having different display screen specifications. Therefore, depending on the model of the outdoor device, the display screen of the outdoor device during peer-to-peer communication may not be optimal.

The present invention has been made in view of the above-mentioned problems, and an object of the present invention is to provide a home network access technology that reduces the burden on a server, is highly secure, and can be applied to a larger number of outdoor device models.

In order to achieve the above objects, the present invention provides the following techniques. That is, the home gateway device of the present invention is a home gateway device connected to an outdoor device and an external gateway device via a network, and has: a storage unit that holds information related to a predetermined device; and controls access to the outdoor device. an access control unit, the access control unit transmits the information related to the specified device obtained from the storage unit to the external gateway device, and the external gateway device judges that the information related to the outdoor device obtained from the outdoor device conforms to the In the case of the information of the predetermined device, the access control unit controls communication with the outdoor device without passing through the external gateway device.

According to the above configuration, for example, after successful authentication of access from the outdoor device via the server device, the outdoor device can perform peer-to-peer communication with the home gateway device. Thus, the load on the server can be reduced, and high security can be ensured.

In order to achieve the above objects, the present invention also provides the following techniques. That is, the home gateway device according to the present invention is a home gateway device connected to an outdoor device, an external gateway device, and a connection management device via a network, and has: a storage unit that holds information related to a predetermined device; an access control unit for access between devices; and a screen display information generation unit, wherein the access control unit transmits the information related to the predetermined device obtained from the storage unit to the external gateway device, When the information related to the outdoor device obtained by the outdoor device matches the information related to the predetermined device, the access control unit controls communication with the outdoor device without going through the external gateway device. The screen information generation unit generates screen display information corresponding to the outdoor device using the information related to the outdoor device acquired from the outdoor device when the information on the outdoor device matches the information on the predetermined device.

According to the above configuration, for example, it is possible to provide various models of outdoor devices with different screen display performances, and to create a user-friendly usage environment.

According to the present invention, it becomes possible to communicate with a home network while reducing the burden on the server while ensuring high security.

In addition, according to the present invention, it is possible to provide various types of outdoor devices suitable for different screen display performances, and to create a user-friendly usage environment.

Description of drawings

FIG. 1 is a schematic configuration diagram of an indoor-outdoor communication system according to an embodiment of the present invention.

FIG. 2 is a hardware configuration diagram of an information processing device according to an embodiment of the present invention.

FIG. 3 is a data structure diagram of a connected device authentication information database according to an embodiment of the present invention.

FIG. 4 is a data structure diagram of a user authentication information database according to an embodiment of the present invention.

FIG. 5 is a data structure diagram of a connection management information database according to an embodiment of the present invention.

FIG. 6 is a data structure diagram of a home network connected device management information database according to an embodiment of the present invention.

FIG. 7 is a flowchart of device information registration processing according to one embodiment of the present invention.

FIG. 8 is a flowchart of device information registration processing according to one embodiment of the present invention.

FIG. 9 is a flowchart of connection start processing according to one embodiment of the present invention.

Fig. 10 is a flowchart of machine control processing according to one embodiment of the present invention.

FIG. 11 is a screen configuration diagram of a mobile phone according to an embodiment of the present invention.

Fig. 12 is a screen configuration diagram of a mobile phone according to an embodiment of the present invention.

Fig. 13 is a flow chart of connection end processing according to one embodiment of the present invention.

Fig. 14 is a data structure diagram of a corresponding model information database according to an embodiment of the present invention.

Fig. 15a is a flowchart of connection start processing according to one embodiment of the present invention.

Fig. 15b is a flow diagram of connection start processing according to one embodiment of the present invention.

Fig. 16 is a flowchart of machine control processing according to one embodiment of the present invention.

Fig. 17 is a flow diagram of connection end processing according to one embodiment of the present invention.

Fig. 18 is a data structure diagram of a connected device authentication information database according to an embodiment of the present invention.

1...Mobile phone, 2...Career network gateway device for mobile phone, 3...Career network gateway device, 4...Access management server device, 5...Routing device, 6...Home gateway device, 7...Indoor device, 8...Communication Media, 9...communication medium, 10...communication medium, 11...communication control unit, 12...browser unit, 31...communication control unit, 32...access management unit, 33...screen display information generation unit, 34...user authentication unit, 35...Authentication information database, 41...Communication control unit, 42...Connection authentication unit, 43...Connection management unit, 44...Device information database, 61...Communication control unit, 62...Access control unit, 63...Screen display information generation unit, 64...Machine management control section, 65...Authentication information database, 66...Device information database, 67...Corresponding model information database, 71...Communication control section, 72...Control section, 80...Indoor system, 101...CPU, 102...Main Storage unit, 103…communication control unit, 104…auxiliary storage unit, 105…input unit, 106…output unit, 700…screen display, 701…button display, 702…screen display, 703…button display, 704…button display

Detailed ways

Hereinafter, an example of embodiment of the present invention will be described with reference to the drawings.

First, the configuration of the indoor and outdoor communication system of this embodiment will be described. As shown in FIG. 1 , the indoor and outdoor communication system of this embodiment includes a mobile phone private network gateway device 2 , a mobile phone gateway device 3 , an access management server device 4 , and an indoor system 80 connected via a communication medium 9 . The indoor system 80 is installed in each household of a detached house or a condominium. In addition, in this example, the mobile phone private network gateway device 2 is a device in a base station of a mobile phone service company (professional: Career). In addition, the mobile phone gateway device 3 and the access management server device 4 are arranged in a data center located outside the residential buildings and equipment. Furthermore, in this example, the mobile phone gateway device 3 and the access management server device 4 in the data center collectively manage a plurality of residential buildings and devices.

The indoor system 80 includes a routing device 5 connected to a communication medium 9 , a home gateway device 6 , and an indoor device 7 . The respective devices 5 to 7 are connected via an indoor communication medium 8 .

In addition, this indoor and outdoor communication system includes a mobile phone device 1 and is connected to the indoor and outdoor communication system via a mobile phone dedicated network 10 . In this example, a mobile phone is used as an example of an outdoor device that accesses the indoor system 80, but devices other than the mobile phone may also be used. For example, a portable information terminal (PDA) or a mobile PC (Personal Computer: personal computer) can also be used as an outdoor device, and a portable communication device such as a game machine having a communication function can also be used.

Each device (mobile phone device 1, portable phone private network gateway device 2, mobile phone gateway device 3, access management server device 4, routing device 5, home gateway device 6, All the indoor devices 7) are realized by an information processing device having a normal hardware configuration capable of running predetermined software.

Specifically, all of these information processing devices have the configuration shown in FIG. 2 . That is, the information processing device includes a CPU (calculation processing unit) 101 , a main storage unit 102 , a communication control unit 103 , an auxiliary storage unit 104 , an input unit 105 , and an output unit 106 . Furthermore, each part is connected to each other via the bus 107, and it is comprised so that necessary information can be transmitted between each part.

CPU 101 performs predetermined operations by programs stored in advance in main storage unit 102 and auxiliary storage unit 104 . The main storage unit 102 functions as a work area, or is an element for storing necessary programs, for example, the former is realized by a RAM, and the latter is realized by a ROM. The communication control unit 103 is an element for transmitting and receiving information (data) with devices connected to the same communication medium via various communication media, and can be realized by, for example, a modem, a network adapter, a wireless transmitting and receiving device, and the like. The auxiliary storage unit 104 stores programs for controlling the operation of the information processing device, or holds information necessary for the operation of the information processing device, and can be realized by, for example, a semiconductor disk, a hard disk (HDD), or an optical disk. The input unit 105 is an element for a device user (user) to input necessary commands and information to the information processing device. The input section 105 can be realized by, for example, a remote controller used in a TV receiver, and a keyboard, a mouse, or the like used in a PC. The output unit 106 is an element for outputting and displaying information in response to user operations. The output unit 106 can be realized by, for example, a picture tube, a CRT, a liquid crystal display, a PDP, a projector, a speaker, headphones, or the like.

In addition, the hardware configuration of the information processing device shown in FIG. 2 is an example, and the hardware configuration of each device 1 to 7 in FIG. 1 does not necessarily have to be like this. For example, the output unit 106 may be realized by a device (television, etc.) different from the information processing device. In this case, a television signal generating device such as a D/A converter is separately provided on the information processing device, and this device and the output unit 106 are connected by an AV cable, a coaxial cable, or the like. In addition, if there is an element not directly related to the input and output of data and programs among the various elements constituting the information processing device, this element may not be included. For example, the input unit 105 and the output unit 106 may not be included in the configuration when the information processing device does not require data input and output during execution.

In addition, the indoor system 80 included in the indoor-outdoor communication system shown in FIG. 1 is a system installed in a general family house such as a single house in a residential house or a complex.

In addition, the communication medium 9 contained in the indoor and outdoor communication system shown in FIG. 1 is a wired medium composed of optical cable lines, CATV, telephone lines, etc., or a public communication network composed of wireless media, or a private communication network. Furthermore, data is exchanged between devices connected to the communication medium 9 according to a predetermined communication protocol.

Further, the communication medium 8 is a wired medium constituted by, for example, a communication cable, a power line, an extension telephone line, etc., or a LAN (Local Area Network) in the indoor system 80 constituted by a wireless medium. Furthermore, data is exchanged between devices connected to the communication medium 8 according to a predetermined communication protocol. In addition, by relaying the routing device 5 connected to both the communication medium 8 and the communication medium 9, data can be exchanged between the device connected to the communication medium 8 and the device connected to the communication medium 9 according to a predetermined communication protocol. exchange.

Furthermore, in an outdoor communication network such as the communication medium 9, and an indoor LAN such as the communication medium 8, the systems of addresses (IP addresses) generally used as information for specifying a communication device are different. The former is often an address uniquely assigned worldwide (global address), and the latter is an address valid only within a LAN (private address). NAT (Network Address Translation: Network Address Translation) is known as a relay method (address translation method) between networks having different address systems.

In addition, the communication medium 10 is connected to the gateway device 2 of the private network for mobile phones, and includes a wired medium composed of an optical cable line, a communication cable, etc.; a wireless medium connected to the mobile phone device 1; a base station connecting the above-mentioned wired medium and the above-mentioned wireless medium private communication network. Furthermore, data is exchanged between devices connected to the communication medium 10 according to a predetermined communication protocol.

Furthermore, the mobile phone private network gateway device 2 connected to the communication medium 9 has an IP address (global address).

Furthermore, when the outdoor device is a portable information terminal or a mobile PC, each device is connected to the mobile phone gateway device 3 via the communication medium 9 . At this time, the portable information terminal or mobile PC has an IP address (global address).

Next, the functions realized by the operation of software of each of the devices 1 to 7 included in the indoor and outdoor communication system shown in FIG. 1 and the configuration of the database will be described.

The mobile phone device 1 is connected to the home gateway device 6 included in the indoor system 80 , and is an information processing device having a function of executing various services in cooperation with the indoor device 7 . These various services include, for example, remote recording reservation service and video image transmission service when the indoor device 7 is a video recorder; power on and off service and temperature adjustment service when the indoor device 7 is an air conditioner; Viewing service of accumulated images of cameras, etc. As shown in FIG. 1 , the mobile phone device 1 includes, for example, a communication control unit 11 and a browser unit 12 .

The communication control unit 11 has the functions of creating, Interpretation, sending and receiving functions.

The browser unit 12 has a function of acquiring screen display information generated by the mobile phone gateway device 3 and the home gateway device 6 and displaying it on the output unit 106 of the mobile phone device 1 . Furthermore, the browser unit 12 has a function of transmitting information input from the input unit 105 of the mobile phone device 1 to the mobile phone gateway device 3 and the home gateway device 6 . Furthermore, the same applies to the mobile phone device 1 in the case of a portable information terminal or a mobile PC.

Here, the screen display information refers to markup languages such as XML, HTML, Compact HTML, XHTML, and SGML, and description languages such as metalanguages, or information composed of languages defined by them. For example, Web screen information and the like are included.

The mobile phone private network gateway device 2 is an information processing device having a function of mutually converting each predetermined communication protocol in the communication medium 10 and the communication medium 9 . Among them, the mobile phone dedicated network gateway device 2 is a gateway device of a communication carrier that provides communication services for the outdoor device when the outdoor device is not a mobile phone.

The mobile phone gateway device 3 is an information processing device having a function of authenticating the user of the mobile phone device 1 and the mobile phone device 1 . In addition, the mobile phone gateway device 3 also has the function of communicating with the mobile phone device 1 and the home gateway device 6 without going through the mobile phone gateway device 3 and the access management server device 4 based on the connection information obtained from the home gateway device 6, or the mobile phone The device 1 and the home gateway device 6 perform a communication management function for communication via the mobile phone gateway device 3 . Furthermore, the mobile phone gateway device 3 is an external gateway device that performs authentication of the outdoor device and communication management when the outdoor device is not a mobile phone.

Here, in this embodiment, "authentication" refers to judging whether the information contained in the authentication information held in the storage unit or the like is consistent with information such as unique information, identification information, model information, and a password. The so-called successful authentication means that it is confirmed to be consistent with the above. When the authentication information is stored as a database, it becomes possible to specify an outdoor device such as a mobile phone based on information stored in association with matching authentication information. The so-called "consistent" explained above does not only mean that the data are completely consistent, but also includes a specific meaning of establishing an association relationship.

As shown in FIG. 1 , the mobile phone gateway device 3 includes, for example, a communication control unit 31 , an access management unit 32 , a screen display information generation unit 33 , and a user authentication unit 34 .

The communication control unit 31 has a function of generating, interpreting and communicating messages according to a predetermined communication protocol in order to communicate with devices (access management server device 4 and in-house system 80 ) connected to the communication medium 9 by the screen display information generating unit 33 . Furthermore, the mobile phone gateway device 3 holds the authentication information database 35 in the auxiliary storage unit 104 .

The access management unit 32 has a function of transmitting connection instruction information to the home gateway device 6 via the access management server device 4 and obtaining connection information necessary for data communication between the mobile phone device 1 and the home gateway device 6 from the home gateway device 6 . Furthermore, according to the corresponding model information contained in the above-mentioned connection information, whether the mobile phone device 1 is connected to the home gateway device 6 via the mobile phone gateway device 3 or directly (not via the mobile phone gateway device 3) is connected to the home gateway device. 6. Judgment function. When it is determined that the mobile phone device 1 is directly connected to the home gateway device 6, the mobile phone device 1 is connected to the home gateway device 6 based on the connection information.

The screen display information generation part 33 has the function of generating the screen display information to be displayed in the browser part 12 of the mobile phone device 1; the function of processing the information sent from the browser part 12; A function to send connection information to the browser section 12 . The browser unit 12 of the mobile phone device 1 has different resolutions and functions that can be displayed on one screen depending on the model of the mobile phone device 1 . The screen display information generating unit 33 generates appropriate screen display information for each of the aforementioned models.

Here, generating appropriate screen display information refers to rewriting the description language information constituting the screen display information for each model, so that the generated language can be displayed without problems in each model. In this case, in order to adapt to different models, not only the data content is rewritten in the same description language, but also the type of description language is changed.

In particular, when the generation of screen display information is mainly the generation of content in a descriptive language, the screen display information generating unit 33 is also referred to as a descriptive language information generating unit.

The user authentication unit 34 has mobile phone information (for example, the serial number or model information of the mobile phone or the above-mentioned information) for judging the user password (input by the user) sent from the browser unit 12 and the information inherent (unique) to the mobile phone device 1 respectively. The function of whether the information of both the manufacturing number and the above-mentioned model information) is consistent with the information stored in the authentication information database 35 in advance.

In addition, in the case of a portable information terminal or a mobile PC, the above-mentioned mobile phone information may be information inherent in the browser unit 12 instead of the above-mentioned model information.

As shown in FIG. 4 , the authentication information database 35 includes a user password 301 , mobile phone information 302 and connection destination information 303 . In each item, information for each user is set in advance by a certain method. In the user password 301, the user decides information that only he or she knows. In the mobile phone information 302, mobile phone information is set as information unique to each mobile phone device (unique). However, when the above model information is set, the model information is specific to each model of the mobile phone device 1 . In addition, in the case of a mobile information terminal or a mobile PC, the above-mentioned mobile phone information may be information inherent in the browser unit 12 . In this case, the mobile phone information described above is specific to each type and version of the browser unit 12 . The registration information 304 is an example in which mobile phone-specific information is held in the mobile phone information 302 , and the registration information 305 is an example in which mobile phone-specific information and model information are held in the mobile phone information 302 . In the connection destination information 303, the connection destination information of the home gateway device 6 to which the user of the user password 301 is to connect is set.

From the information held in the user password 301 and the information held in the mobile phone information 302, it is possible to uniquely specify a certain mobile phone device of a certain user. The user authentication unit 34 specifies (authenticates) the user and the mobile phone device using the content of the authentication information database 35 .

The access management server device 4 is capable of receiving connection instruction information (including information set in the connection destination information 303 in FIG. An information processing device with a relay function that transmits the connection instruction information to the home gateway device 6 .

As shown in FIG. 1 , the access management server device 4 includes, for example, a communication control unit 41 , a connection authentication unit 42 , and a connection management unit 43 .

The communication control unit 41 has functions of generating, interpreting, and communicating messages according to a predetermined communication protocol in order to communicate with devices connected to the communication medium 9 (the mobile phone gateway device 3 and the home system 80 ). Furthermore, the access management server device 4 holds the device information database 44 in the auxiliary storage unit 104 .

The connection authentication unit 42 has a function of authenticating the authorization of the connection devices (the mobile phone gateway device 3 and the home gateway device 6 ) connected to the access management server device 4 . As an authentication method, an authentication method using a certificate in PKI (Public Key Infrastructure: Public Key Infrastructure) can be used.

The connection management unit 43 is an element that manages the above-mentioned connected device information in the device information database 44 . Furthermore, the connection management unit 43 has a function of searching for a suitable home gateway device 6 based on the connection instruction information from the mobile phone gateway device 3 and notifying the above-mentioned connection instruction information to the home gateway device 6 . Furthermore, the connection management unit 43 also has a function of transmitting the return information from the home gateway device 6 to the mobile phone gateway device 3 .

As shown in FIG. 5 , the device information database 44 includes device identification information 401 , IP address 402 , and port number 403 . In the device identification information 401, information that uniquely specifies the connection device described above is set.

In the IP address 402, the IP address (global address) of the connected device specified by the device identification information 401 is set. Wherein, when a dedicated address is assigned to the connection device, the connection device is connected via the communication medium 8, and the IP address of the device (routing device 5 in FIG. 1 ) connected to the communication medium 9 is set.

In the port number 403, a port number used when the connection instruction information and the return information are transmitted to the connection device specified by the device identification information 401 of the access management server device 4 is set. The port number is a port number used in an IP (Internet Protocol: Internet Protocol) network.

The data of each item of the device information database 44 is set by receiving the registration information from the above-mentioned connection device. Among them, as the above-mentioned connection instruction information and the above-mentioned return information, the communication protocol of the above-mentioned login information, for example, SIP (Session Initiation Protocol: Session Initiation Protocol) used in the IP telephone service is known, and it can also be used in the access management server device 4. . In addition, when using SIP as the communication protocol described above, SIP-URI (Uniform Resource Identifiers: Universal Resource Identifiers) is set in the connection destination information 303 and the device identification information 401 .

The routing device 5 is an information processing device that connects the communication medium 9 and the communication medium 8 . Furthermore, the routing device 5 has a function of relaying or rejecting communication between devices connected to different communication media such as the mobile phone gateway device 3 connected to the communication media 9 and the home gateway device 6 connected to the communication media 8 .

As the routing device 5, a generally available broadband routing device can be used. The routing device 5 includes the following elements. That is to say, an external communication control unit that performs data transfer with an outdoor device (portable phone gateway device 3) connected to the communication medium 9 according to a predetermined communication protocol; The port conversion unit that the indoor device (home gateway device 6) of the communication medium 8 performs relaying (or performs its reverse processing); according to the request from the indoor device connected to the communication medium 8, the port conversion setting referred to by the port conversion unit is controlled Then, the internal communication control unit that performs data transmission with the indoor device connected to the communication medium 8 according to the prescribed communication protocol.

However, the above-mentioned NAT can be used as the relay system in the port conversion unit. In addition, as the port conversion setting control method in the port conversion control unit, the control method specified in UPnP IGD (Universal Plug and Play Internet Gateway Device: Universal Plug and Play Internet Gateway Device) is known and can also be applied to Routing device 5.

The home gateway device 6 is an information processing device having the following functions. That is to say, the function of returning the connection information for accessing the home gateway device 6 to the connection instruction information sent from the mobile phone gateway device 3 via the access management server device 4; 1, and further, based on the above-mentioned connection information, for the connection request information from the mobile phone device 1, by comparing the mobile phone information of the mobile phone device 1 contained in the above-mentioned connection request information with the above-mentioned held mobile phone information, The function of authentication of the above-mentioned mobile phone device 1; the function of generating and transmitting the screen for controlling the indoor device 7 to the above-mentioned mobile phone device 1; In addition, the function of the indoor unit 7 is controlled according to the request from the portable telephone device 1 and the portable telephone gateway device 3 .

As shown in FIG. 1 , the home gateway device 6 includes a communication control unit 61 , an access control unit 62 , a screen display information generation unit, and a device management control unit. Furthermore, the home gateway device 6 holds the authentication information database 65 , the device information database 66 , and the corresponding model information database 67 in the main storage unit 102 or the auxiliary storage unit 104 .

The communication control unit 61 communicates with the access control unit 62, the screen display information generation unit 63, and the device management control unit 64 via devices connected to the communication medium 8 (routing device 5, indoor device 7) and the routing device 5 and connected to the communication medium 9. The device (mobile phone device 1, access management server device 4) communicates with each other, and has the functions of generating, interpreting, and communicating messages according to a predetermined communication protocol.

The access control unit 62 has the following functions. That is to say, the function of generating authentication information (token) for connection instruction information transmitted from the mobile phone gateway device 3 via the access management server device 4; The corresponding model information in 67, the function of accessing the connection information of the home gateway device 6 including the external port number set in the routing device 5; The function of storing the mobile phone information of the device 1 and the above-mentioned external port number in the authentication information database 65; the connection request information from the mobile phone device 1 executed based on the above-mentioned connection information is passed through the mobile phone information contained in the above-mentioned connection request information. The mobile phone information of the device 1 is compared with the mobile phone information held in the authentication information database 65, and the token contained in the connection request information is compared with the token held in the authentication information database 65 to perform the above-mentioned portability. Function of authentication of the telephone device 1; port conversion setting information (external port number, internal port number, IP address of the home gateway device 6) for relaying data communication from the mobile phone device 1 to the home gateway device 6 It is sent to the port conversion control unit of the router 5 to set and cancel the port conversion function.

The so-called compatible model mentioned here is a model in which the home gateway device 6 among the outdoor device models can perform a communication method different from other models, and the home gateway device 6 among the outdoor device models can generate Models of data different from data of other models, etc. The setting of the compatible model is either set at the time of production of the home gateway device 6 , or the setting and updating of the home gateway device 6 is provided with an external input unit, or the setting can be updated via the network. Hereinafter, unless otherwise specified, a model whose information about the model is set in the above-mentioned setting method and held in the corresponding model information database 67 is expressed as a "corresponding model".

The screen display information generation unit 63 has a function of generating screen display information to be displayed on the browser unit 12 of the mobile phone device 1 and a function of processing information transmitted from the browser unit 12 . As described above, the resolution and functions that can be displayed on one screen by the browser unit 12 of the mobile phone device 1 differ depending on the model of the mobile phone device 1 . The screen display information generation unit 63 generates appropriate screen display information for each of the models held in the corresponding model information database 67 .

Here, generating appropriate screen display information means, for example, rewriting the description language information constituting the screen display information for each model, and generating the content of the description language information so that it can be displayed without problems in each model. In this case, in order to correspond to different models, not only the data content is rewritten in the same description language, but also the type of description language is changed.

Like the screen display information generation unit 33 described above, when the generation of the screen display information is mainly the generation of content in a descriptive language, the screen display information generation unit 63 is also referred to as a descriptive language information generation unit.

The device management control unit 64 has a unitary management of one or more indoor devices 7 connected to the communication medium 8 by the device information database 66, based on the information from the screen display information generation unit 33 or the screen display information generation unit 63 of the mobile phone gateway device 3. The device control request of the mobile phone device 1 controls the function of the indoor device 7 .

As shown in FIG. 3 , the authentication information database 65 includes mobile phone information 201 , token 202 , external port number 203 , and internal port number 204 .

In the mobile phone information 201, the mobile phone information included in the connection instruction information transmitted from the mobile phone gateway is set. The mobile phone information is of the same type as the information set in the mobile phone information 302 in FIG. 4 .

Authentication data generated by the home gateway device 6 is set in the token 202 . The connection information transmitted from the home gateway device 6 is transmitted to the mobile phone device 1 including the connection information.

The external port number 203 is set in the router 5 as a port number on the communication medium 9 side for port conversion setting and release in order to relay data communication from the mobile phone device 1 to the home gateway device 6 .

The internal port number 204 sets a port number on the communication medium 8 side for setting and canceling port conversion in the routing device 5 in order to relay data communication from the mobile phone device 1 to the home gateway device 6 .

The limited period 205 sets the limited period (date and time) of the authentication data set in the token 202 .

The browser unit 12 of the mobile phone device 1 and the mobile phone gateway device 3 access the above-mentioned external port number of the IP address of the router device 5 through the screen display information generation unit 33 . The routing device 5 transmits the access of the external port number to the internal port number of the IP address of the home gateway device 6, and the communication data from the mobile phone device 1 or the mobile phone gateway device 3 reaches the home gateway device 6.

As shown in FIG. 6, the device information database 66 includes a device ID 501, a device name 502, an installation location 503, an IP address 504, and a service URL (Uniform Resource Locator: universal resource address) 505.

In the device ID 501, a single identifier for specifying an indoor device is set. In the device name 502, a device name for the user to identify the device is set. In the installation place 503, information indicating the installation place (bedroom, entrance, child's room, kitchen, etc.) of the indoor device specified by the device ID 501 is set. In the IP address 504, the IP address of the indoor device specified by the device ID 501 is set. Usually, the IP address of each indoor device set in the IP address 504 is a private address, and generally, the routing device 5 assigns the above-mentioned private address to each indoor device.

In the service URL 505, connection destination information for controlling the indoor device specified by the device ID 501 from other than the indoor device is set. Among them, the connection destination information of the home gateway device 6 may be set in the connection destination information set in the service URL 505. At this time, the screen display information generating unit 63 of the home gateway device 6 or the screen display information generating unit 33 of the mobile phone gateway device 3 generates a screen for controlling the indoor device 7 . The equipment management control unit 64 generates control information of the indoor unit 7 according to the user's control instruction, and transmits the control information to the control unit 72 of the indoor unit 7 according to a predetermined communication protocol. Then the control unit 72 controls the indoor unit 7 according to the above-mentioned control information.

The data of each item of the device information database 66 is input by the user or automatically collected and set from each indoor device.

As shown in FIG. 14 , the corresponding model information database 67 includes corresponding model information 601 . In the corresponding model information 601 , the setting screen displays the model information of the mobile phone device 1 that can be generated by the information generation unit 63 . FIG. 14 shows model information 602, model information 603, and the like. Although these model information is described as the model information of the mobile phone, depending on the situation, in addition to the mobile phone, it is also possible to hold a portable information terminal (PDA) or a mobile PC (Personal Computer: personal computer), a game machine with a communication function, Model information of different outdoor devices such as portable communication devices. In this case, it is also possible to cope with accesses from outdoor devices other than mobile phones.

For an access from a mobile phone set in the corresponding model information 601, the screen display information generating unit 63 generates screen display information, and for an access from a mobile phone device not set, the screen display of the mobile phone gateway device 3 The information generating unit 33 generates screen display information.

The indoor device 7 is an information processing device having a function of executing various services by instructions from the home gateway device 6 . For example, it corresponds to lighting, air conditioners, HDD recorders, Web cameras, etc.

As shown in FIG. 1 , the indoor unit 7 includes a communication control unit 71 and a control unit 72 . In order for the control unit 72 to communicate with the device (mobile phone device 1) connected to the communication medium 9 via the device (routing device 5, home gateway device 6) connected to the communication medium 8 and the routing device 5, the communication control unit 71 has the following functions: The functions of the specified communication protocol to generate, interpret, and communicate messages.

The control unit 72 has a function of executing an access command indicated by the connection destination information held in the service URL 505 by the home gateway device 6 or the mobile phone device 1 .

The control referred to here is, for example, if the indoor device 7 is a lighting, it refers to switching the power supply of the lighting on (ON), off (OFF), or the like. If the indoor device 7 is an air conditioner, the power supply of the air conditioner is switched on and off, the operation is switched, the temperature is set, and the like. If the indoor device 7 is an HDD recorder, it is a program recording reservation instruction and the like. If the indoor device 7 is a Web camera, acquisition of a Web camera image and the like are performed.

Among them, in the indoor and outdoor communication system shown in FIG. 1 , the indoor device 7 is connected to the communication medium 8 and is configured to communicate with the home gateway device 6 via the communication medium 8 . However, the indoor device 7 may be configured to communicate with the home gateway device 6 via a communication medium different from the communication medium 8 . In this case, another communication control unit different from the communication control unit 61 is provided in the home gateway device 6 , and the appliance management control unit 64 communicates with the control unit 71 of the indoor device 7 via the other communication control unit. At this time, the other communication control unit of the home gateway device 6 and the communication control unit 71 of the indoor unit 7 create, interpret, and communicate messages according to a communication protocol suitable for the other communication medium. In this way, ECHONET (Energy Conservation and Homecare Network: Energy Conservation and Homecare Network) is known as the above-mentioned other communication medium and the above-mentioned communication protocol, and it can also be used in the above-mentioned case. In addition, among the above-mentioned examples of indoor devices, lighting and air conditioners can also be used.

Next, the details of the access and control process performed by the outdoor device (mobile phone device 1) to the indoor device (indoor device 7) executed in the indoor-outdoor communication system shown in FIG. 1 will be described with reference to the drawings.

In this system, the mobile phone gateway device 3 and the home gateway device 6 are registered on the access management server 4 so that the access management server 4 can mediate the communication between the mobile phone gateway device 3 and the home gateway device 6 . The flow chart of the processing at this time is shown in Fig. 7 and Fig. 8 .

As shown in FIG. 7, the home gateway device 6 makes a device login request to the access management server 4 (step S1001). At this time, the home gateway device 6 includes the sending device identification information, the client certificate, and the port number together with the above-mentioned request. If the above-mentioned SIP is used, the communication protocol for sending the above-mentioned device registration request corresponds to the REFISTER message. After receiving it, the access management server 4 performs device authentication processing on the home gateway device 6 (step S1002). In this case, the device authentication processing described above can utilize PKI device authentication as described above. That is, the access management server device 4 stores the CA (Certificate Authority) certificate in the auxiliary storage unit 104 in advance, and the home gateway device 6 stores the above-mentioned client certificate signed by the above-mentioned CA in the auxiliary storage unit 104 in advance. . Then in step S1001, the above-mentioned client certificate is sent, and in step S1002, the above-mentioned client certificate is verified.

If it is determined in step S1002 that the client certificate is authorized, the access management server device 4 logs in the home gateway device 6 (step S1002). At this time, as shown in FIG. 5 , the access management server 4 holds the device information database 44 in the auxiliary storage unit 104 and adds information on the devices determined to be authorized. That is, the above-mentioned device identification information is set in the device identification information 401 of the device information database 44, the IP address (global address) of the routing device 5 is set in the IP address 402, and the port number 403 includes the above-mentioned devices. Port number including login requests. Wherein, the IP address of the routing device 5 is included in the header of the IP bucket sent from the routing device 5 to the access management server device 4 . For example, in FIG. 5 , the login information 404 is the login information of the home gateway device 6 .

Also, the access management server 4 returns the result (step S1004). At this time, when the device authentication fails in step S1002, it is sent, and when it succeeds, it is sent as a result that the login is completed. The home gateway device 6 receives the above result, shifts to the continuous waiting state (step S1005), and ends the process.

However, in FIG. 7 , step S1001 and step S1005 are processes executed by the access control unit 62 of the home gateway device 6 . In addition, steps 1002 to 1004 are processes performed by the connection authentication unit 42 of the access management server device 4 .

In addition, the same applies to the login to the access management server device 4 of the mobile phone gateway device 3 . That is, as shown in FIG. 8, the mobile phone gateway device 3 makes a device registration request to the access management server device 4 (step S2001). At this time, when the mobile phone gateway device 3 transmits the above, it also transmits the device identification information, the client certificate, and the port number. The access management server 4 having received these information performs device authentication processing on the mobile phone gateway device 3 (step S2002). At this time, the above-mentioned device authentication processing is the same as the processing in step 1002 . If it is determined in step S2002 that the client certificate is authorized, the access management server device 4 logs in the mobile phone gateway device 3 (step S2002). At this time, as described above, the access management server 4 holds the device information database 44 in the auxiliary storage unit 104, and adds information on devices determined to be authorized. For example, in FIG. 5 , the login information 405 is the login information of the mobile phone gateway device 3 .

Then, the access management server 4 returns the result (step S2004). At this time, when the device authentication fails in step S2002, it is sent, and when it succeeds, it is sent as a result that the login is completed. The mobile phone gateway device 3 receives the above result, shifts to the continuous waiting state (step S2005), and ends the process.

However, in FIG. 8 , step S2001 and step S2005 are processes performed by the access management unit 32 of the mobile phone gateway device 3 . In addition, steps 2002 to 2004 are processes performed by the connection authentication unit 42 of the access management server device 4 .

Next, details of a process in which the mobile phone device 1 accesses the home gateway device 6 will be described. Fig. 9 is a flow chart of the processing in the first method that does not firstly use the information on the corresponding model of the cellular phone.

As shown in FIG. 9, first, the user operates the mobile phone device 1 to connect to the mobile phone gateway device 3 (step S3001). That is, the processing of the mobile phone device 1 at this time is transmission of connection request information to the home gateway device 6 . The mobile phone gateway device 3 generates user authentication screen data and sends it to the mobile phone device 1 (step S3002). As a result, the above-mentioned screen is displayed on the output unit 106 of the above-mentioned mobile phone device 1, and the input of the user password from the user is urged. Next, send the user password input by the user using the input unit 105 of the mobile phone device 1, and the mobile phone information unique to the mobile phone device 1 as authentication information (step S3003), and the mobile phone gateway device 3 uses the user password and the above-mentioned The mobile phone information authenticates the mobile phone device 1 (step S3004). At this time, the authentication process described above is performed using the authentication information database 35 shown in FIG. 4 that the mobile phone gateway device 3 holds in advance in the auxiliary storage unit 104 . That is, the contents of the user password 301 and the above-mentioned user password, and the contents of the mobile phone information 302 and the above-mentioned mobile phone information are respectively compared, and the authentication succeeds when all match. For example, in FIG. 4, if the login information 304 is the information of the user, the authentication is successful when the user password is "1234" and the mobile phone information is "tnk16198".

In step S3004, when the authentication fails (when at least one of them does not match), the fact is transmitted to the mobile phone device 1 . Then, the mobile phone device 1 displays the fact (authentication failed) on the output device 105 (step S3005), and ends the process.

In step S3004 , when the authentication is successful, the mobile phone gateway device 3 transmits connection instruction information to the home gateway device 6 to the access management server device 4 . The device identification information of the home gateway device 6 to be connected and the mobile phone information acquired in step 3004 are included in the connection instruction information. For example, in the above example, in FIG. 4 , "user01@hogehoge.jp" as the content of the connection destination information 303 of the login information 304 corresponds to the above-mentioned device identification information, and "tnk16198" as the content of the mobile phone information 302 corresponds to In the mobile phone information above. In addition, if the above-mentioned SIP is used, the communication protocol for transmitting the above-mentioned connection instruction information corresponds to the INVITE message.

Next, the access management server device 4 searches whether or not the connection destination information included in the connection instruction information is registered in the device information database 44 (step S3006). In this example, since the login information 404 corresponds to the information of the registered home gateway device 6 in FIG. 7 , in this case, the device identification information (the device identification information in FIG. The content of 401, in this example, the content of the device identification information 401 of the registration information 405) and the connection instruction information including the mobile phone information, and the connection instruction information is sent to the home gateway device 6 (step S3007). In fact, the above-mentioned home gateway device 6 sends the above-mentioned connection instruction information to the port number (the content of the port number 403 in FIG. 5 ) determined by the IP address of the connected routing device 5 (the content of the IP address 402 in FIG. The routing device 5 (using the port conversion control unit) transmits the connection instruction information to the home gateway device 6 . In addition, in step S3006, if the connection destination information is not registered in the device information database 44, a connection failure is returned to the mobile phone gateway device 3.

Next, the home gateway device 6 sends a router external port opening request to the above-mentioned routing device 5 (step S3008). The routing device 5 performs external port opening setting in the port conversion unit (step S3009). Thus, the router device 5 can relay the access from the outdoor device (mobile phone device 1 ) to the home gateway device 6 . Wherein, the router external port opening request used here includes the external port number of the routing device 5 , the internal port number associated with the external port, and the IP address of the home gateway device 6 . In addition, it is necessary to use a port number that does not overlap with an already set port number for the external port number and the internal port number. As a method of specifying the port number, for example, a method of selecting a non-overlapping number from small numbers in the valid range, or a method of selecting a random number within the valid range can be mentioned. In addition, if there is no constraint of the routing device 5 and the home gateway device 6, it is preferable that the external port number and the internal port number be the same number.

Next, in the home gateway device 6, in order for the above-mentioned mobile phone 1 to directly access the above-mentioned home gateway device 6, the access control unit 62 generates authentication information such as token information, and generates an access URL (connection information) including the token information (step S3010). The above access URL becomes, for example, https://11.22.33.44:10000/index.cgi? token=kz7t5ob8dtghh, such text data. In this case, "11.22.33.44" is the IP address of the routing device 5, "10000" is the port number, "index.cgi" is the access page of the home gateway device 6, and "kz7t5ob8dtghh" is token information. The above-mentioned token information is randomly generated, for example, when the connection instruction information is received.

Furthermore, in the home gateway device 6, the access control unit 62 sends the mobile phone information including the connection instruction information from the mobile phone gateway device 3, the token information, the external port number set in the routing device 5, The above-mentioned associated internal port number and the validity period of the above-mentioned token are registered in the authentication information database 65 shown in FIG. 3 (step S3011). In this example, the login information 207 is the information registered in step S3011. The validity period of the token is a date and time of, for example, a predetermined 5 minutes added to the date and time when the token was generated. Although the security strength is increased by shortening the added time (5 minutes in this example), it is best determined taking into account the delay times of the communication medium 8, the communication medium 9, the communication medium 10.

Then, return information including the access URL including the token is generated and sent to the access management server device 4 (step S3012). The access management server device 4 reconstructs the return information and sends it to the mobile phone gateway device 3 (step S3013).

Next, the mobile phone gateway device 3 acquires the connection information (access URL) from the return information, generates screen display data enabling connection to the access URL, and sends it to the mobile phone device 1 (step S3014). As a result, a screen based on the screen display data is displayed on the output unit 106 of the mobile phone device 1 (step S3015), and selection of connection information to the access URL is prompted to the user. When the user selects the connection information, the mobile phone device 1 transmits connection request information to the home gateway device 6 . At this time, the mobile phone device 1 includes the mobile phone information in the connection request information and transmits it. In addition, this connection request information is carried out to the above-mentioned access URL. The IP address contained in the above-mentioned access URL is the IP address (in this example, 11.22.33.44) of the above-mentioned routing device 5, and the port number contained in the above-mentioned IP address is set in the above-mentioned routing device 5 in step 3009. The above external port number (in this example, 10000). Accordingly, the above-mentioned connection request information reaches the above-mentioned home gateway device 6 . Furthermore, in step S3015, the user may automatically transmit connection request information to the home gateway device 6 without selecting the connection information (URL redirection: redirection). In any case, the mobile phone device 1 transmits connection request information in response to the above-mentioned access URL.

Next, the home gateway device 6 authenticates the mobile phone device 1 based on the information included in the connection request information (step S3016). The above-mentioned connection request information includes the mobile phone information of the mobile phone device 1 and token information (included in the above-mentioned access URL), and these information are compared with the login information held in step S3011, and if they all match The next authentication is successful. For example, if the mobile phone information contained in the connection request information is "tnk16198" and the token information is "kz7t5ob8dtghh", and if it is within the time limit of the token information, the authentication is successful.

In step S3016, when authentication fails (when at least one of them does not match), the fact is sent to the mobile phone device 1, and the above-mentioned mobile phone device 1 displays the fact (authentication failed) on the output device 105 (step S3017), and the process ends .

On the other hand, in step S3016, when the authentication is successful, the home gateway device 6 generates a screen display (Top screen) to enable remote operation or control of the indoor device 7, and sends it to the mobile phone device 1 (step S3018). As a result, for example, a screen 700 shown in FIG. 11 is displayed on the output unit 106 of the mobile phone device 1 (step S3019), and the process ends. In addition, in step S3018, the contents and screen display data of the device information database 66 shown in FIG. 6 are generated. In this example, indoor devices 7 such as lighting (registration information 506 ), network (Web) cameras (registration information 507 ), and HDD recorders (registration information 508 ) are connected to the communication medium 8 . Therefore, on the output device 105 of the mobile phone device 1, a screen from which lighting, a network camera, and an HDD recorder can be selected is displayed as a list of control devices.

In addition, in FIG. 9 , step S3001 , step S3003 , step S3005 , step S3015 , step 3017 , and step S3019 are processes executed by the browser unit 12 of the mobile phone device 1 . Step S3002 and step S3014 are processes performed by the screen display information generation unit 33 of the mobile phone gateway device 3 . Step S3004 is a process executed by the user authentication unit 34 of the mobile phone gateway device 3 . Step S3006 , step S3007 , and step S3013 are processes performed by the connection management unit 43 of the access management server 4 . Step S3008 , step S3010 to step S3012 , and step S3016 are processes executed by the access control unit 62 of the home gateway device 6 . Step S3018 is a process executed by the screen display information generator 63 of the home gateway device 6 . Furthermore, step S3009 is a process executed by the port conversion unit of the routing device 5 .

Next, details of a process in which the mobile phone device 1 accesses the home gateway device 6 and controls the indoor device 7 using the above-mentioned connection information will be described. The flow chart of the processing at this time is shown in FIG. 10 .

As shown in FIG. 10, first, the user operates the mobile phone device 1 to select a device to be remotely controlled, and transmits the selection information to the home gateway device 6 (step S4001). At this time, on the output unit 106 of the mobile phone device 1, a screen 700 (a list of control devices) shown in FIG. In 700, if the execution button 701 is selected, lighting is selected).

Next, the home gateway device 6 generates screen display data for controlling the selected device, and transmits it to the mobile phone device 1 (step S4002). As a result, for example, a screen 702 shown in FIG. 12 is displayed on the output unit 106 of the mobile phone device 1 . FIG. 12 shows the state of the above-mentioned lighting, and in this example, it is a state in which the above-mentioned lighting is turned on (illumination is performed). When the return button 704 is selected on the screen 702 , the screen 700 is displayed on the output unit 106 of the mobile phone device 1 .

For example, if the user selects disconnection on the above-mentioned screen 702 and selects the execution button 703, the selection information is sent to the above-mentioned home gateway device 6 (step S4003). Then, the home gateway device 6 generates control communication data for the selected appliance based on the selection information and sends it to the selected appliance (indoor device 7) (step S4004). At this time, the above-mentioned selected device is a lighting. As mentioned above, if the lighting is a device corresponding to ECHONET, the above-mentioned control communication data is generated according to the telegram format according to the ECHONET standard, and is sent to The indoor unit 7 mentioned above.

Next, the indoor device 7 controls itself (in this example, lighting off) according to the received control communication data (step S4005), and transmits the control result to the home gateway device 6 (step S4006). Then, the home gateway device 6 generates screen display data showing the control result, and transmits it to the mobile phone device 1 (step S4007). As a result, a screen showing the result of the control is displayed on the output unit 106 of the mobile phone device 1 (step S4008), and the process ends.

In addition, in FIG. 10 , step S4001 , step S4003 , and step S4008 are processes executed by the browser unit 12 of the mobile phone device 1 . Step S4002 and step S4007 are processes performed by the screen display information generation unit 63 of the home gateway device 6 . Step S4004 is a process executed by the device management control unit 64 of the home gateway device 6 . Furthermore, steps S4005 to S4006 are processes executed by the control unit 72 of the indoor unit 7 .

Next, in step S4001 , a case where the user selects a network camera as a device to be controlled (on the screen 700 , selects the network camera and selects the execution button 701 ) will be described. Usually, since the network camera has a network server function, in step S4004, the home gateway device 6 performs network access to the network camera (indoor device 7). In step S4005, the network camera generates a camera image at that time as still image data, and in step S4006, the network camera transmits the still image data to the home gateway device 6 . In step S4007, the home gateway device 6 generates screen display data including the still image data and sends it to the mobile phone device 1 . As a result, the still image data is displayed on the output device 106 of the mobile phone device 1 (step S4008).

Next, in step 4001, a case where the user selects an HDD recorder as a device to be controlled (on the screen 700, selects the HDD recorder and selects the execution button 701) will be described. In step S4004, the home gateway device 6 transmits an image acquisition request to the HDD recorder (indoor device 7). In step S4005, appropriate image compression format conversion etc. are performed on the accumulated image so that the accumulated image requested by the HDD video recorder can be reproduced and viewed on the mobile phone device 1 . In step S4006, the HDD recorder sends the converted image data to the home gateway device 6 . In step S4007, the home gateway device 6 transmits the image data to the mobile phone device 1 and stores it in the auxiliary storage unit 104 of the mobile phone device 1 . The mobile phone device 1 displays a selection screen of accumulated images on the output device 106, and when the user selects the image data, the image data is reproduced. The reproduced image is then displayed on the output device 106 of the mobile phone device 1 (step S4008).

Next, details of the process of terminating access from the mobile phone device 1 to the home gateway device 6 will be described. The flow chart of processing at this time is shown in FIG. 13 .

As shown in FIG. 13, first, the user operates the mobile phone device 1 to transmit logout information to the home gateway device 6 (step S5001). At this time, on the output unit 106 of the mobile phone device 1, a screen 700 (list of control devices) shown in FIG.

Next, the home gateway device 6 transmits a connection termination request for terminating the connection with the mobile phone gateway device 3 to the access management server device 4 (step S5002). The device identification information of the mobile phone gateway device 3 is included in the connection end request. Then, the access management server device 4 searches the device information database 44 based on the device identification information (step S5003), and if the registration information of the device identification information can be found, the connection termination request is sent to the mobile phone gateway indicated by the device identification information. Device 3 (step S5004). At this time, the access management server device 4 reconfigures the connection termination request so as to include the device identification information of the home gateway device 6 and transmits the connection termination request to the mobile phone gateway device 3 .

Next, the mobile phone gateway device 3 having received the connection termination request performs a connection termination process (deletion of held information) with the home gateway device 6 (step S5005). Then, return information including the result of whether the end process is completed normally is generated, and the return information is sent to the above-mentioned access management server device 4 (step S5006). The device identification information of the above-mentioned home gateway device 6 is included in the returned information. Then, the access management server device 4 transmits the return information to the home gateway device 6 indicated by the device identification information contained in the return information (step S5007).

Next, the home gateway device 6 searches for the port number for data transmission (step S5008), and sends a router external port blocking request to the router device 5 (step S5009). At this time, the search for the port number for data transfer is performed on the authentication information database 65 shown in FIG. 3 . That is, in the present connection start process described in FIG. 9 , the open external port number set in the routing device 5 is searched, and in this example, the external port number 203 of the login information 207 is acquired. Then, the router external port blocking request for the above-mentioned external port number is sent to the above-mentioned routing device 5 . Then, the routing device 5 performs external port blocking setting (step S5010). Thus, in the routing device 5, unauthorized access from the outdoor device can be blocked.

Next, the home gateway device 6 performs connection termination processing with the mobile phone gateway device 3 (step S5011). Specifically, the corresponding login information is deleted from the authentication information database 65 shown in FIG. 3 . In this example, since the login information 207 matches, the login information 207 is deleted. Then, the home gateway device 6 generates screen display data indicating the completion of the connection, and transmits it to the mobile phone device 1 (step S5012). As a result, a screen indicating that the connection has been completed is displayed on the output unit 106 of the mobile phone device 1 (step S5013), and the process ends.

However, in FIG. 13 , step S5001 and step S5013 are processes executed by the browser unit 12 of the mobile phone device 1 . Step S5002 , step S5008 to step S5009 , and step S5011 are processes executed by the access control unit 62 of the home gateway device 6 . Step S5012 is a process executed by the screen display information generation unit 63 of the home gateway device 6 , and steps S5003 to S5004 and step S5007 are processes performed by the connection management unit 43 of the access management server device 4 . Steps S5005 to S5006 are processes executed by the access management unit 32 of the mobile phone gateway device 3 . Furthermore, step S5010 is a process executed by the port conversion unit of the routing device 5 .

Using the first method described above reduces the load on the mobile phone gateway device 3 and the access management server 4 in communication between the mobile phone device 1 and the home gateway device 6 .

Next, a description will be given below of how the screen displayed on the browser unit 12 of the mobile phone device 1 based on the screen display information is improved in accordance with the displayable resolution and functions of the model of the mobile phone device 1 of the user. Second method.

In general, the resolution and functions that can be displayed on one screen by the browser unit 12 of the mobile phone device 1 differ depending on the model of the mobile phone device 1 . Therefore, the screen display information generator 63 of the home gateway device 6 has to support all models of mobile phones that may access the home gateway device 6 . In the first method, the screen display information generation part 63 of the home gateway device always generates the screen display information displayed on the browser part 12 of the mobile phone device 1 . However, generally speaking, due to constraints such as cost, the capacity of the auxiliary storage unit 104 mounted on the home gateway device 6 is limited, and it cannot be ensured that the generation of screen display information corresponding to all mobile phone models can be performed. capacity. Therefore, in the home gateway device 6, it is difficult to generate screen display information corresponding to all mobile phone models. Also, in the first method, when a new model of the mobile phone comes out in the auxiliary storage unit 104 mounted on the home gateway device 6, there is a problem that screen display information corresponding to the new model cannot be generated.

Hereinafter, the details of the access and control processing of the indoor device (indoor device 7 ) by the outdoor device (mobile phone device 1 ) for the second method for solving the above-mentioned problems will be described with reference to the drawings.

In order to solve the above-mentioned problems, first, in the first method, the processing flowchart shown in FIG. 9 may be changed to the processing flowchart shown in FIG. 15 .

In addition, although FIG. 15 depicts the process block diagrams on the two drawings of FIG. 15a and FIG. 15b respectively, these two flow diagrams are connected by the symbol (A) described in the drawings. Therefore, in the following description, these two program block diagrams are treated as one program block diagram, which is only expressed as FIG. 15 .

In FIG. 15 , the details of the process in which the mobile phone device 1 accesses the home gateway device 6 in the second method will be described. In addition, in the description, the schematic diagram used in the description of the first method is also used to supplement the description of the differences in the second method.

As shown in FIG. 15, first, the user operates the mobile phone device 1 to connect to the mobile phone gateway device 3 (step S6001). That is, the processing of the mobile phone device 1 at this time is transmission of connection request information to the home gateway device 6 . The mobile phone gateway device 3 generates user authentication screen data and sends it to the mobile phone device 1 (step S6002). As a result, the above-mentioned screen is displayed on the output unit 106 of the above-mentioned mobile phone device 1, and the input of the user password from the user is urged. Next, the user password input by the user using the input unit 105 of the mobile phone device 1, and the mobile phone information (including model information) specific to the mobile phone device 1 as authentication information are sent (step S6003), and the mobile phone gateway device 3 The mobile phone device 1 is authenticated using the user password and the mobile phone information (step S6004). At this time, the authentication process described above is performed by the authentication information database 35 previously held by the mobile phone gateway device 3 in the auxiliary storage unit 104 shown in FIG. 4 . That is, the contents of the user password 301 and the above-mentioned user password are compared, and the contents of the mobile phone information 302 and the above-mentioned mobile phone information are compared, and when all match, the authentication is successful. For example, in FIG. 4, if the login information 305 is the user's information, the authentication is successful when the user's password is "4567" and the mobile phone information is "bb model made by hmn61618aa company".

In step S6004, when the authentication fails (when at least one of them does not match), the fact is sent to the mobile phone device 1 . Then, the above-mentioned mobile phone device 1 displays the fact (authentication failed) on the output device 105 (step S6005), and ends the process.

In step S6004, when the authentication is successful, the mobile phone gateway device 3 transmits connection instruction information to the home gateway device 6 to the access management server device 4 . The above-mentioned connection instruction information includes device identification information of the home gateway device 6 to be connected and the above-mentioned mobile phone information acquired in step S6004. For example, in the above-mentioned example, in FIG. 4 , the content "user02@hogehoge.jp" of the connection destination information 303 as the login information 305 corresponds to the above-mentioned device identification information, and the content of the mobile phone information 302 "hmn61618aa made by the company bb "Model" corresponds to the above-mentioned mobile phone information.

Next, the access management server device 4 searches whether or not the connection destination information included in the connection instruction information is registered in the device information database 44 (step S6006). In this example, since the login information 404 corresponds to the information of the registered home gateway device 6 in FIG. 7 , in this case, the device identification information (device identification information in FIG. The content of 401, in this example, the content of the device identification information 401 of the registration information 405) and the connection instruction information including the mobile phone information, and the connection instruction information is sent to the home gateway device 6 (step S6007). Actually, the above-mentioned connection instruction information is sent to the port number (the content of the port number 403 in FIG. 5 ) determined by the IP address (the content of the IP address 402 in FIG. 5 ) of the routing device 5 connected to the above-mentioned home gateway device 6, and the above-mentioned The routing device 5 (using the port conversion control unit) transmits the connection instruction information to the home gateway device 6 . In addition, in step S6006, if the connection destination information is not registered in the device information database 44, a connection failure is returned to the mobile phone gateway device 3.

Next, the home gateway device 6 sends a router external port opening request to the above-mentioned routing device 5 (step S6008). The routing device 5 performs external port opening setting in the port conversion unit (step S6009). Thus, the routing device 5 can relay the access from the outdoor device (mobile phone device 1 ) to the home gateway device 6 .

Next, in the home gateway device 6, the access control unit 62 generates token information as the authentication information for the mobile phone 1 to directly access the home gateway device 6, generates access URL (connection information) including the token information, and A key for encrypted communication between the home gateway device 6 and the mobile phone gateway device 3 (step S6010).

Furthermore, the home gateway device 6 transmits the above-mentioned mobile phone information including the connection instruction information from the above-mentioned mobile phone gateway device 3, the above-mentioned token information, the above-mentioned external port number set in the above-mentioned routing device 5, and the above-mentioned associated internal port number , the validity period of the token, and the key are registered in the authentication information database 65 shown in FIG. 18 (step S6011).

Here, the authentication information database 65 shown in FIG. 18 will be described. The authentication information database 65 shown in FIG. 18 is an entry in which the key 206 is added to the authentication information database 65 shown in FIG. 3 . The encryption key 206 sets encryption information (encryption algorithm, etc.) and a encryption key for encrypted communication between the home gateway device 6 and the mobile phone gateway device 3 .

In this example, the login information 208 is the information registered in step S6011. The key generated above is held in the key 206 .

Returning to Fig. 15, generate the above-mentioned access URL containing token information, the above-mentioned key, and the corresponding model information (saved in the corresponding model information 601) stored in the corresponding model information database 67 shown in Fig. 14 . All the information) and send the return information to the above-mentioned access management server device 4 (step S6012). The access management server device 4 reconstructs the return information and sends it to the mobile phone gateway device 3 (S6013).

Next, the mobile phone gateway device 3 obtains the above-mentioned key from the above-mentioned return information and stores it in the main storage unit 102 or the auxiliary storage unit 104, and obtains the above-mentioned corresponding model information from the above-mentioned return information, and the authentication information shown in FIG. 4 The contents of the mobile phone information 302 stored in the database 35 are compared (step S6014). In this example, the information in the mobile phone information 302 held in the registration information 305 is "hmn61618 bb model manufactured by aa company", and since the above-mentioned corresponding model information includes "bb model manufactured by aa company", it can be determined for non-compliance. That is, it can be determined that the screen display information generator 63 of the home gateway device 6 cannot generate screen display information suitable for the mobile phone device 1 .

If it is determined in step S6014 that it does not match, the home gateway device 6 sends the information acquisition request of the indoor device to the above-mentioned home gateway device 3 ( Step S6015). The home gateway device 6 searches for indoor devices based on the contents of the device information database 66 (step S6016), and returns the result (indoor device information) to the mobile phone gateway device 3 (step S6017). In this example, indoor devices 7 such as lighting (registration information 506 ), network cameras (registration information 507 ), and HDD recorders (registration information 508 ) are connected to the communication medium 8 . Therefore, the indoor device information includes information on lighting, network cameras, and HDD recorders.

In addition, the communication between the mobile phone gateway device 3 and the home gateway device 6 in steps S6015 and S6017 is encrypted using the encryption key generated in step S6010. The key generated in step S6010 is held in the mobile phone gateway device 3 in step S6014 via steps S6012 and S6013, and the key is shared between the mobile phone gateway device 3 and the home gateway device 6 . Thereby, secure communication can be performed between the mobile phone gateway device 3 and the home gateway device 6 .

Next, the mobile phone gateway device 3 generates screen display (Top screen) data for enabling remote operation and control of the indoor device 7 together with the indoor device information, and sends it to the mobile phone device 1 (step S6018). As a result, for example, the screen shown in FIG. 11 is displayed on the output unit 106 of the mobile phone device 1 (step S6019), and the process ends. In this example, the indoor device information includes, for example, lighting (registration information 506 ), network camera (registration information 507 ), and HDD video recorder (registration information 508 ). Therefore, in this example, on the output device 105 of the mobile phone device 1, a screen from which lighting, a network camera, and an HDD recorder can be selected is displayed as a list of control devices.

In addition, when it is determined to be consistent in step S6014, that is, when it is determined that the home gateway device 3 can generate the screen display information suitable for the above-mentioned mobile phone device 1, the processing from step S3014 to step S3019 shown in FIG. 9 is performed. Same deal.

That is, the mobile phone gateway device 3 acquires the above-mentioned connection information (access URL) from the return information obtained in step S6013, generates screen display data enabling connection to the above-mentioned access URL, and sends it to the above-mentioned mobile phone device 1. (step S6020). As a result, a screen based on the screen display data is displayed on the output unit 106 of the mobile phone device 1 (step S6021), and the user is prompted to select connection information of the access URL. When the user selects the connection information, the mobile phone device 1 transmits connection request information to the home gateway device 6 . At this time, the mobile phone device 1 includes the mobile phone information in the connection request information and transmits it. In addition, this connection request information is carried out to the above-mentioned access URL. The IP address contained in the above-mentioned access URL is the IP address (in this example, 11.22.33.44) of the above-mentioned routing device 5, and the port number contained in the above-mentioned access URL is set in the above-mentioned routing device 5 in step 6009. The above external port number (in this example, 10001). Accordingly, the above-mentioned connection request information reaches the above-mentioned home gateway device 6 .

Next, the home gateway device 6 performs authentication of the mobile phone device 1 based on the information included in the connection request information (step S6022). The above-mentioned connection request information includes the mobile phone information of the mobile phone device 1 and the token information (included in the above-mentioned access URL), and these information are compared with each other, and it is found that all of them match the registration information held in step S6011. If the authentication is successful. For example, if the mobile phone information contained in the connection request information is "bb model made by hmn61618aa company", and the token information is "D89bae95hze8", and the time limit of the token information is within the time limit, the authentication is successful.

In step S6022, when the authentication fails (at least one of the parties does not agree), the fact is sent to the mobile phone device 1, and the mobile phone device 1 displays the fact on the output device 105 (step S6023), and the process ends.

On the other hand, in step S6022, when the authentication is successful, the home gateway device 6 generates screen display (Top screen) data to enable remote operation and control of the indoor device 7, and sends it to the mobile phone device 1 (step S6024).

As a result, for example, a screen 700 shown in FIG. 11 is displayed on the output unit 106 of the mobile phone device 1 (step S6025), and the process ends. In addition, in step S6024, screen display data is generated based on the contents of the device information database 66 shown in FIG. 6 . In this example, indoor devices 7 such as lighting (registration information 506 ), network cameras (registration information 507 ), and HDD recorders (registration information 508 ) are connected to the communication medium 8 . Therefore, on the output device 105 of the mobile phone device 1, a screen from which lighting, a network camera, and an HDD recorder can be selected is displayed as a list of control devices.

In addition, the screen display data generated at this time is generated based on the mobile phone model information included in the mobile phone information of the mobile phone device 1 acquired in step S6022 and corresponding to the content of the description in the markup language as described above. That is, the model of the mobile phone is specified based on the mobile phone model information included in the acquired mobile phone information of the mobile phone device 1, and screen display data is generated according to the specification of the display screen of the model. Specifically, for example, even if the number of displayed characters, or the size of the display screen, the number of display lines, and the number of display digits differ depending on the model of the mobile phone, in order to prevent display objects such as characters or buttons from being displayed at places that are inconvenient for the user, the Characteristic descriptions of display positions such as characters and display objects can be changed in the markup language. In addition, for example, in the markup language, the characteristic description of the display size of characters and display objects may be changed so that the size of characters and display objects does not become inconvenient for the user depending on the model of the mobile phone.

In addition, in FIG. 15 , step S6001 , step S6003 , step S6005 , step S6019 , step S6021 , step S6023 , and step S6025 are processes executed by the browser unit of the mobile phone device 1 . Step S6002 , step S6018 , and step S6020 are processes executed by the screen display information generation unit 33 of the mobile phone gateway device 3 . Step S6004 , step S6014 and step S6015 are processes performed by the user authentication unit 34 of the mobile phone gateway device 3 . Step S6006 , step S6007 , and step S6013 are processes performed by the connection management unit 43 of the access management server 4 . Step S6008 , step S6010 to step S6012 , and step S6022 are processes executed by the access control unit 62 of the home gateway device 6 . Step S6024 is a process executed by the screen display information generator 63 of the home gateway device 6 . Furthermore, step S6009 is a process executed by the port conversion unit of the routing device 5 .

Next, in the second method, when it is judged to be consistent in step S6014 of FIG. 15 , the control of the indoor device is performed in the same way as described in the flowchart of FIG. Gateway device 3 and access management server 4 to access.

Furthermore, next, when it is determined that it does not match in step S6014 of FIG. 15 , the mobile phone device 1 , the home gateway device 6 , the mobile phone gateway device 3 , and the access management server 4 perform processing as follows.

That is to say, when it is determined that the screen display information generator 63 of the home gateway device 6 cannot generate screen display information suitable for the mobile phone device 1, the mobile phone device 1 accesses the home gateway device 6 using the connection information, and controls the home gateway device 6. The details of the processing of the indoor unit 7 will be described. The flow chart of processing at this time is shown in FIG. 16 .

As shown in FIG. 16, first, the user operates the mobile phone device 1 to select a device to be remotely controlled, and transmits the selection information to the mobile phone gateway device 3 (step S7001). At this time, on the output unit 106 of the mobile phone device 1, a screen 700 (list of control devices) shown in FIG. If the button 701 is selected in the screen 700 of the screen 700, the lighting is selected).

Next, the mobile phone gateway device 3 transmits a request for obtaining information on the device (indoor device) selected in step S7001 to the home gateway device 6 in order to generate screen display data for controlling the selected device (step S7002 ). Then, the home gateway device 6 accesses the indoor device by referring to the device information database 66, acquires the current state, and transmits the information of the indoor device including the state to the mobile phone gateway device 3 (step S7003).

The mobile phone gateway device 3 generates screen display data for controlling the indoor device based on the information on the indoor device, and sends it to the mobile phone device 1 (step S7004). As a result, a screen 702 such as that shown in FIG. 12 is displayed on the output unit 106 of the mobile phone device 1 . In FIG. 12 , the state of the above-mentioned lighting is shown, and in this example, the above-mentioned lighting is in a state of being turned on (illumination is performed). When the return button 704 is selected on the screen 702 , the screen 700 is displayed on the output unit 106 of the mobile phone device 1 .

For example, if the user selects disconnection on the screen 702 and selects the execution button 703, the selection information (device control instruction) is sent to the mobile phone gateway device 3 (step S7005). Then, the mobile phone gateway device 3 reconfigures the device control instruction and sends it to the home gateway device 6 (step S7006).

The home gateway device 6 generates control communication data for the selected appliance based on the appliance control instruction, and transmits it to the selected appliance (indoor device 7) (step S7007). At this time, if the above-mentioned selected device is lighting, and the lighting is a device corresponding to ECHONET as described above, the above-mentioned control communication data is generated in a message format according to the ECHONET standard, and is sent to The indoor unit 7 mentioned above.

Next, the indoor device 7 controls itself (in this example, lighting off) according to the received control communication data (step S7008), and transmits the control result to the home gateway device 6 (step S7009). Then, the home gateway device 6 transmits the control result to the above-mentioned mobile phone gateway device 3 (step S7010), and the above-mentioned mobile phone gateway device 3 generates screen display data representing the control result and sends it to the above-mentioned mobile phone device 1 (step S7011) . As a result, a screen showing the result of the control is displayed on the output unit 106 of the mobile phone device 1 (step S7012), and the process ends.

The communication between the mobile phone gateway device 3 and the home gateway device 6 (step S7002, step S7003, step S7006, and step S7010) is encrypted by a common key in FIG. 15 . Thus, secure communication between the mobile phone gateway device 3 and the home gateway device 6 becomes possible.

In addition, in FIG. 16 , step S7001 , step S7005 , and step S7012 are processes executed by the browser unit 12 of the mobile phone device 1 . Step S7002 , step S7004 , step S7006 , and step S7011 are processes performed by the screen display information generation unit 33 of the mobile phone gateway device 3 . Step S7003 , step S7007 , and step S7010 are processes performed by the device management control unit 64 of the home gateway device 6 . Furthermore, steps S7008 to S7009 are processes executed by the control unit 72 of the indoor unit 7 .

Next, in step S7001, a case where the user selects a network camera as a device to be controlled (in the screen 700, selects the network camera and selects the execution button 701) will be described. Usually, since the network camera has a network server function, in step S7007, the home gateway device 6 performs network access to the network camera (indoor device 7). In step S7008, the network camera generates a camera image at that time as still image data, and in step S7009, the network camera transmits the still image data to the home gateway device 6 . In step S7010, the home gateway device 6 transmits the still image data to the mobile phone gateway device 3, and in step S7011, the mobile phone gateway device 3 generates screen display data including the still image data and sends it to the mobile phone gateway device 3. Telephone device 1 . As a result, the still image data is displayed on the output device 106 of the above-mentioned mobile phone device 1 (step S7012).

Next, in step S7001, a case where the user selects an HDD recorder as a device to be controlled (in the screen 700, selects the HDD recorder and selects the execution button 701) will be described. In step S7007, the home gateway device 6 transmits an image acquisition request to the HDD recorder (indoor device 7). In step S7008, the HDD video recorder reproduces the requested accumulated image on the mobile phone device 1, and performs appropriate image compression format conversion on the accumulated image so that it can be browsed. In step S7009, the HDD video recorder sends the converted image data to the home gateway device 6 . In step S7010, the above-mentioned home gateway device 6 transmits the image data to the above-mentioned mobile phone gateway device 3, and in step S7011, the above-mentioned mobile phone gateway device 3 transmits the above-mentioned image data to the above-mentioned mobile phone device 1, and keeps it in the above-mentioned mobile phone in the auxiliary storage unit 104 of the device 1. The mobile phone device 1 displays a selection screen of accumulated images on the output device 106, and when the user selects the image data, the image data is reproduced. The reproduced image is then displayed on the output device 106 of the mobile phone device 1 (step S7012).

Next, in the second method, the details of the processing when the access from the mobile phone device 1 to the home gateway device 6 via the mobile phone gateway device 3 is terminated will be described. The flow chart of the processing at this time is shown in Fig. 17 .

As shown in FIG. 17, first, the user operates the mobile phone device 1 to transmit logout information to the mobile phone gateway device 3 (step S8001). At this time, on the output unit 106 of the mobile phone device 1, a screen 700 (list of control devices) shown in FIG.

Next, the mobile phone gateway device 3 transmits a connection termination request for terminating the connection with the home gateway device 6 to the access management server device 4 (step S8002). The device identification information of the home gateway device 6 is included in the connection end request. Then, the access management server device 4 searches the device information database 44 according to the device identification information (step S8003), and if the registration information of the device identification information is found, the connection end request is sent to the home gateway device 6 indicated by the device identification information. (step S8004). At this time, the access management server device 4 reconfigures the connection termination request so as to include the device identification information of the mobile phone gateway device 3 , and transmits the connection termination request to the home gateway device 6 .

Next, the home gateway device 6 having received the above-mentioned connection termination request searches for the port number for data transfer (step S8005), and sends a router external port blocking request to the router device 5 (step S8006). At this time, the search for the port number for data transfer is performed on the authentication information database 65 shown in FIG. 18 . That is, in the present connection start process described in FIG. 5 , the open external port number set in the router 5 is searched, and in this example, the content of the external port number 203 of the login information 208 is acquired. Then, a router external port blocking request for the external port number is transmitted to the routing device 5 . Then, the routing device 5 performs external port block setting (step S8007). Thereby, unauthorized access from the outdoor device can be blocked.

Next, the home gateway device 6 performs connection termination processing with the mobile phone gateway device 3 (step S8008). Specifically, the matching login information is deleted from the authentication information database 65 shown in FIG. 18 . In this example, since the login information 208 matches, the login information 208 is deleted. Then, the home gateway device 6 generates return information including the result of whether or not the processing was completed normally, and transmits the return information to the access management server device 4 (step S8009). The device identification information of the mobile phone gateway device 3 is included in the return information. Then, the access management server device 4 transmits the return information to the mobile phone gateway device 3 indicated by the device identification information contained in the return information (step S8010).

Then, the above-mentioned mobile phone gateway device 3 performs connection termination processing (deletion of held information) with the above-mentioned home gateway device 6, generates screen display data indicating that the connection is completed, and transmits the above-mentioned screen display data to the above-mentioned mobile phone device 1 (step S8011). As a result, a screen indicating that the connection has been completed is displayed on the output unit 106 of the mobile phone device 1 (step S8012), and the process ends.

The communication between the mobile phone gateway device 3 and the home gateway device 6 (step S8002, step S8004, step S8009, and step S8010) is encrypted and communicated using the common key shared in FIG. 15 . Thus, secure communication between the mobile phone gateway device 3 and the home gateway device 6 is possible.

In addition, in FIG. 17 , step S8001 and step S8012 are processes executed by the browser unit of the mobile phone device 1 . Step S8002 and step S8011 are processes performed by the access management unit 32 of the mobile phone gateway device 3 . Steps S8005 to S8006 and steps S8008 to S8009 are processes executed by the access control unit 62 of the home gateway device 6 . Step S8003 to step S8004 and step S8010 are processes performed by the connection management unit 43 of the access management server device 4 . Furthermore, step S8007 is a process executed by the port conversion unit of the routing device 5 .

As described above, according to the present embodiment, the security can be improved by performing connection management with the mobile phone and the home gateway device via the mobile phone gateway device and the access management server device. When the indoor equipment is controlled from the mobile phone device, peer-to-peer communication between the mobile phone and the home gateway device is enabled. Furthermore, the access from the mobile phone can be authenticated by the home gateway device as authorized. Therefore, even in large-capacity data communication such as network data, still images, and images, it is possible to perform peer-to-peer communication capable of reducing the load on the access management server device while ensuring high security.

Furthermore, in this embodiment, the authentication information transmitted from the mobile phone gateway device is compared with the authentication information transmitted from the mobile phone device by the home gateway device to verify authorization. Therefore, even if the mobile phone owned by the user is changed or the types of outdoor devices increase, it is not necessary to update the authentication information in the home gateway device. That is, as described above, since the mobile phone gateway device is provided in the data center operated by the server operator, the authentication information can be updated on the server operator side without notifying the server operator of a change in the mobile phone device. Therefore, the user of the terminal using the home network does not need to update the authentication information registered in the home gateway device, for example.

Furthermore, by performing connection management of indoor devices by the home gateway device, when a user accesses the indoor devices using a mobile phone, usability can be improved even if the number of indoor devices connected to the home network (indoor system) increases.

Furthermore, even when the home gateway device cannot generate screen display information corresponding to the model of the outdoor device such as the mobile phone to access, by making the outdoor device such as the mobile phone communicate with the home gateway device via the external gateway device such as the mobile phone gateway device, Communication becomes possible, and it is possible to provide a good use environment that flexibly adapts to changes or new models of outdoor equipment owned by the user.

Industrial Applicability

The present invention can be applied to a system for controlling home appliances and/or house equipment connected to a home network from the outside using an outdoor device such as a mobile phone. For example, the present invention can be used for large-capacity data communication services such as controlling a DVD/HDD recorder indoors from the outdoors, and downloading contents accumulated therein to an outdoor device. Furthermore, in order to realize such services and the like, the present invention improves security by preventing unauthorized access, and is suitable for adapting to a wider variety of outdoor devices.

Claims (20)

1. one kind via network and outdoor location and the home gateway device that the exterior gateway device is connected, and it is characterized in that having:

Keep relating to the storage part of information of the device of regulation; With

The access control portion of the visit between control and the described outdoor location,

The information of the device that relates to described regulation that described access control portion will obtain from described storage part sends to described exterior gateway device,

Judge that at described exterior gateway device the information conforms that relates to described outdoor location that obtains from described outdoor location relates under the situation of information of device of described regulation, described access control portion does not carry out and described outdoor location control of communication via described exterior gateway device.

2. home gateway device according to claim 1 is characterized in that:

Also have picture display message generating unit,

Described image information generating unit relates in the information conforms that relates to described outdoor location under the situation of information of device of described regulation, the information that relates to described outdoor location that use obtains from described outdoor location generates the picture display message corresponding with described outdoor location.

3. home gateway device according to claim 2 is characterized in that:

Described picture display message generating unit relates in the information conforms that relates to described outdoor location under the situation of information of device of described regulation, the information that relates to described outdoor location that use sends from described outdoor location generates to show the data that corresponding descriptive language is described with the picture of described outdoor location.

4. home gateway device according to claim 3 is characterized in that:

Described descriptive language is an indicating language.

5. home gateway device according to claim 3 is characterized in that:

Described descriptive language is the descriptive language by the metalanguage definition.

6. home gateway device according to claim 2 is characterized in that:

Described picture display message generating unit relates in the information conforms that relates to described outdoor location under the situation of information of device of described regulation, the information that relates to described outdoor location that use obtains from described outdoor location generates the data of the description content of description of change language.

7. home gateway device according to claim 1 is characterized in that:

Described access control portion does not meet in the information that relates to described outdoor location under the situation of information of the device that relates to described regulation, via described exterior gateway device carry out with described outdoor location between communicate by letter.

8. home gateway device according to claim 2 is characterized in that:

The information that relates to the device of described regulation comprises the model information of outdoor location or the information of the browser that outdoor location has.

9. home gateway device according to claim 2 is characterized in that:

Also have the machine handing control part that is used to control via the indoor machine of described home gateway device and home-network linkups,

The described indoor machine of Control on Communication between described machine handing control part basis and the described outdoor location.

10. one kind via network and outdoor location, exterior gateway device and the home gateway device that the connection management device is connected, and it is characterized in that having:

Keep relating to the storage part of information of the device of regulation; With

The access control portion of the visit between control and the described outdoor location,

Described access control portion

In described exterior gateway device,, receive from described exterior gateway device via described connection management device and to connect indication information under the situation from first authentication success of the visit of described outdoor location,

Under the situation that receives described connection indication information, generate first authentication information,

Described first authentication information is sent to described outdoor location,

Relate under the situation of information of device of described regulation carrying out described first when authentication send to described exterior gateway device from described outdoor location the information conforms that relates to described outdoor location, use second authentication information that sends from described outdoor location to carry out second authentication.

11. home gateway device according to claim 10 is characterized in that:

Also have picture display message generating unit,

Described second authentication information sends with the information that relates to described outdoor location,

Described image information generating unit is used the information that relates to described outdoor location under the situation of described second authentication success, generate the picture display message corresponding with described outdoor location,

Described access control portion sends to described outdoor location with described picture display message.

12. home gateway device according to claim 11 is characterized in that:

The information that relates to the device of described regulation comprises the model information of outdoor location or the information of the browser that outdoor location has.

13. home gateway device according to claim 11 is characterized in that:

Also have under the situation of described second authentication success, according to the machine handing control part of the signal controlling that sends from described outdoor location via the indoor machine of described home gateway device and home-network linkups.

14. home gateway device according to claim 11 is characterized in that:

The token that described first authentication information that described access control portion generates generates when comprising the described connection indication information of each reception at random.

15. home gateway device according to claim 11 is characterized in that:

Send to described first authentication information of described outdoor location, the URL information of the described home gateway device that generates with described access control portion is sent to described outdoor location,

Described second authentication information generates under the selecteed situation of the link information of the URL of the described home gateway device of the display frame that is shown in described outdoor location.

16. home gateway device according to claim 11 is characterized in that:

Described outdoor location is a portable phone,

Described second authentication information comprises the identifying information of described portable phone,

Described identifying information relates to the information of the manufacturing numbering of described portable phone.

17. one kind via network and outdoor location and the home gateway device that the exterior gateway device is connected, and it is characterized in that having:

Keep relating to the storage part of information of the device of regulation; With

The access control portion of the visit between control and the described outdoor location,

The information of the device that relates to described regulation that described access control portion will obtain from described storage part sends to described exterior gateway device,

Judge that at described exterior gateway device the information conforms that relates to described outdoor location that obtains from described outdoor location relates under the situation of information of device of described regulation, described access control portion carry out and described outdoor location between the control of peer-to-peer communications.

18. home gateway device according to claim 17 is characterized in that:

Also have descriptive language information generating unit,

Described descriptive language information generating unit relates in the information conforms that relates to described outdoor location under the situation of information of device of described regulation, the information that relates to described outdoor location that use obtains from described outdoor location generates the corresponding descriptive language information of picture demonstration with described outdoor location.

19. home gateway device according to claim 18 is characterized in that:

Described outdoor location is a portable terminal device,

Described descriptive language information generating unit relates in the information conforms that relates to described outdoor location under the situation of information of device of described regulation, according to the information that relates to described outdoor location that obtains from described outdoor location, change also generates the description that relates to the label of CSD in the descriptive language information.

20. home gateway device according to claim 18 is characterized in that:

Described outdoor location is a portable terminal device,

Described descriptive language information generating unit relates in the information conforms that relates to described outdoor location under the situation of information of device of described regulation, according to the information that relates to described outdoor location that obtains from described outdoor location, change also generates the description that relates to the label of the display position of display object in the descriptive language information.

Images