Remote control relay device, recording and playback apparatus, and method for updating control data

A remote control relay device is connected between a network and a controlled device. The controlled device is remotely controlled from an external device over the network. The remote control relay device includes a communication controller, a storage memory, a control memory and a write controller. The communication controller exchanges control data with the external device over the network. The storage memory stores control data. The control memory stores control data used for external device authentication. The write controller controls sending and receiving of control data by the communication controller, reading of control data stored in the storage memory, and writing of control data to the control memory. The write controller reads and writes control data from the storage memory to the control memory only in response to operations that are not executed over the network.

BACKGROUND OF THE INVENTION

1. Field of the Invention

The present invention relates to a remote control relay device for handling information specific to a user or equipment when operating a specific device from a remote location.

2. Description of Related Art

Web servers, routers, gateways, and other network devices are examples of equipment enabling two-way remote operation such as for changing settings by communicating with an external device in a remote location. These network devices are Web-enabled for accessing the Internet (World Wide Web (also “Web” below)) and can be controlled from an external device with a Web browser function using HTTP (Hypertext Transfer Protocol) or other protocol.

Web-enabled as used herein means a function enabling reading data from a device in a remote location (a “remote device”) or for operating that remote device.

A Web browser function means a function for displaying data read from a remote device over the network.

Web-enabled remotely-controlled devices are increasingly incorporated into a variety of products for recording and playing back various kinds of information. The IP (Internet protocol) address uniquely identifying the remotely-controlled device and external device, and an ID and password uniquely identifying the user are needed to control this remotely-controlled device from an external device over a network, and this information can be viewed and changed using a Web browser. See, for example, Japanese Laid-Open Patent Publication No. 2000-217167.

Public file recovery systems for replacing the content of a public file with the content of the same file stored internally when the content of the public file accessible via the network has been illicitly changed are also known. See, for example, Japanese Laid-Open Patent Publication No. 2000-222264.

A remotely-controlled device according to the prior art is described next below with reference toFIG. 11.FIG. 11is a schematic block diagram showing the configuration of a remotely-controlled device according to the prior art. A Web-enabled recording/playback device (referred to below as a “data player”) is used by way of example as the remotely controlled device. The remotely-controlled device60has a communication controller61, display memory63, data storage memory64, Web controller62, and power supply66.

The functions of these component parts are described next. The communication controller61communicates with an external device50that can display and manipulate a Web browser over a network. Data is buffered to the display memory63, and data is stored to the data storage memory64. The Web controller62controls communication controller61, display memory63, and data storage memory64, and communicates with the external device50and displays Web content over the network.

The external device50could be a Web-enabled cell phone or a personal computer with Web access, and has a communication controller51for communicating with the remotely-controlled device60over a network, and a Web control unit52able to display Web content.

FIG. 12is a flow chart of the operation of the Web controller62.

(2) In step S52various default settings of the remotely-controlled device60are initialized.

(3) In step S53data stored in the data storage memory64is copied to the display memory63.

(4) Step S55is a verification step for determining if the external device50or the user of the external device50is an authorized user.

(5) Step S56is a reference request detection step for detecting requests from the external device50to reference data.

(6) Step S57is a data transmission step for sending data in display memory63to the external device50when a data reference request from the external device50is detected.

(7) Step S58is a change request detection step for detecting a request from the external device50to change data.

(8) Step S59is a change-data step for changing data in the display memory63when there is a change-data request from the external device50.

(9) Step S60is a storage request detection step for detecting requests from the external device50to save data.

(10) Step S61is a data storage step for storing data in the display memory63to the data storage memory64when a data storage request is detected from the external device50.

Operation of this remotely-controlled device is further described below with reference toFIG. 12.

(a) First, in the power-on step S51, the remotely-controlled device is turned on.

(b) Next, in step S52various default settings required for operation of the remotely-controlled device60are set to specific initial values.

(c) Next, data stored in the data storage memory64is read and stored to the display memory63(S53).

(d) After the remotely-controlled device60is thus set up and then accessed from an external device50, step S55confirms if the protocol received from the external device50can be used with the remotely-controlled device60, and if it can then a user verification process is run to confirm whether the external device50or the external device50user is an authorized user recognized by the remotely-controlled device60(S55). This assures the security of data stored in the remotely-controlled device60.

Protocol verification and user authentication are done by reading control data from the data storage memory64to the communication controller61, and comparing this read control data with data such as the user ID and password received from the external device50.

This control data means data used to enable communication with the device attempting communication (access), i.e., data essential to the communication protocol. For example, this control data is typically a user ID, password, or other data unique to a specific user, and the IP address or other data unique to the device. Data other than this control data is differentiated herein as “display data.”

If the protocol from the external device50is determined incompatible (unusable) by the remotely-controlled device60in step S55, or if the external device50user cannot be authenticated, the user is unable to access and use the Web controller62of the remotely-controlled device60. Authenticated users can access and operate the Web controller62of the remotely-controlled device60.

Next, if verification and authentication are successful in step S55and the Web controller62can be used from the external device50, what the protocol from the external device50is requesting of the remotely-controlled device60is determined and the Web controller62operates according to the request. The external device50user can thus perform the following three operations with the remotely-controlled device60.

(e) First, data stored in the display memory63can be referenced. Requests from the external device50to reference data are passed through the communication controller61to the Web controller62. These requests are detected in the reference request detection step (S56). Then in the data transmission step (S57), the Web controller62controls reading the data requested by the external device50from the display memory63to the communication controller61, and sending the data from the communication controller61to the external device50.

(f) Second, data stored in the display memory63can be changed. Requests from the external device50to change data are passed through the communication controller61to the Web controller62. These requests are detected in the change request detection step (S58). The Web controller62then controls writing the changed data or new data to the display memory63through the communication controller61and Web controller62in step S59. The changed data or new data that is written may include control data.

(g) Third, data in the display memory63can be copied to the data storage memory64. Data storage requests from the external device50are passed through the communication controller61to the Web controller62. These requests are detected in the storage request detection step (S60). Next, in the data storage step (S61) data in the display memory63is copied to the data storage memory64by the Web controller62. Data stored at this time could also include control data.

(h) When operation by the user of the external device50ends, the remotely-controlled device60waits for a next access from the external device50, and the Web controller62stops operating if the remotely-controlled device60power is turned off.

A problem with this conventional system described above is that if an unauthorized user passes authentication, the unauthorized user can change data, including control data, in the data storage memory64by way of changing data in the display memory63of the remotely-controlled device60from the external device50. This means that a falsely authenticated unauthorized user can freely change control data in the data storage memory64before the authorized user becomes aware of the unauthorized access. Control data in the data storage memory64is used for authentication in the verification step S55. Therefore, if data in the data storage memory64is changed by an unauthorized user, an authorized user may fail authentication and become unable to operate the remotely-controlled device60from the external device50. This is an obvious security problem.

SUMMARY OF THE INVENTION

The present invention is therefore directed to assuring that authorized users can always access the remotely-controlled device even if an unauthorized user penetrates the remotely-controlled device over a network to tamper with the control data, such as the password.

To achieve this object a remote control relay device according to the present invention is connected between a network and a device that is remotely controlled from an external device over the network, and has a communication controller for exchanging control data with the external device over the network, storage memory for storing the control data, control memory for storing control data used for authenticating external devices, and a write controller for controlling sending and receiving control data by the communication controller, reading control data stored in the storage memory, and writing control data to the control data memory. The write controller reads and writes control data from the storage memory to the control memory only in response to operations that are not executed over the network.

The remote control relay device of this invention can therefore always assure access by authorized users from an external device even if an unauthorized user penetrates the system over the network.

DESCRIPTION OF THE PREFERRED EMBODIMENTS

Preferred embodiments of a remote control relay device, recording and playback apparatus, and remote control method according to the present invention are described below with reference to the accompanying figures. It should be noted that effectively identical parts are identified by the same reference numeral in the accompanying figures and below.

A remote control relay device according to a first embodiment of the present invention is described below with reference toFIG. 1andFIG. 3.

FIG. 1is a block diagram showing the configuration of a remote control system including a remote control relay device according to the present invention and a recording and playback apparatus.FIG. 3is a block diagram showing the configuration of this remote control relay device in detail.

As shown in these figures this remote control system includes an external device10such as a cell phone10aor a personal computer10b, a recording and playback apparatus30that is remotely operated from the external device10over a network16, and a remote control relay device20connected between the network16and recording and playback apparatus30.

The remote control relay device20is described first.

As shown inFIG. 3the remote control relay device20has a communication controller21, Web controller22, display memory23, control memory25, storage memory24, power supply26, and write command generator28.

The communication controller21is hardware or software for exchanging communication data related to the Web display with an external device10. The communication controller21sends and receives data using a medium, such as telephone lines, electromagnetic waves, or optical fiber, appropriate to the external device10according to determined protocol, such as transmission control protocol/Internet protocol(TCP/IP).

The Web controller22generates, changes, and stores the Web display data communicated with the external device10. The Web controller22also reads data from the display memory23, and can display the Web screen on the external device10by sending the data from the communication controller21over the network16to the external device10. Communication between the remote control relay device20and external device10is also possible by the communication controller21reading control data from the control memory25. The display memory23, control memory25, and storage memory24are all readable/writable storage means such as a hard disk drive, optical disc storage drive, or semiconductor memory. Preferably, the storage memory24may be non-volatile recording medium, such as EEPROM, flash memory.

The write command generator28is a circuit for, sending a write command. This write command generator28could be a button, lever, or other switch means. The Web controller22and write command generator28could also be combined as a single writing control unit29a.

The recording and playback apparatus30that is remotely controlled over the network16is described next. The recording and playback apparatus30is not connected directly to the network16, but is instead connected to the network16through the remote control relay device20. This recording and playback apparatus30has a Web-access function. More specifically, the recording and playback apparatus30can be programmed for timer recordings over the network16using the external device10, or the time recording program, and any other apparatus can be viewed and confirmed over the network.

It should be noted that while a recording and playback apparatus is used by way of example here as a remotely-controlled device, the invention shall obviously not be so limited. The remotely-controlled device could, for example, be various other electrical or electronic products, including lighting fixtures, air conditioning equipment, audio equipment, or video equipment.

The external device10has a communication controller11and a Web controller12. The external device10is Web-enabled and has a Web browser function for displaying and manipulating content through a Web browser.

The communication controller11is hardware or software for exchanging communication data relating to a Web display with the remote control relay device20. A Web display as used herein means a display screen presented on the external device10by the Web browser function. Web-enabled refers to a the ability to read data from a device in a remote location or operate the remote device over a network. The Web controller12is hardware or software for controlling the Web browser and displayed content.

Another recording and playback apparatus40is described below as an alternative example of a remote control relay device according to this first embodiment of the invention with reference toFIG. 2andFIG. 4.

FIG. 2is a block diagram showing the configuration of a remote control system including a recording and playback apparatus40with an internal remote control relay device32.FIG. 4is a block diagram showing the configuration of this recording and playback apparatus40in detail. It is noted that following can be also related to the alternative example.

The recording and playback apparatus40has an internal remote control relay device32with the same configuration and function as the remote control relay device20described above, and a recording and playback unit34containing the content recording and playback functions. Because this recording and playback apparatus40has the remote control relay device32internally disposed, it can be treated as a single product.

For simplicity two types of data are exchanged between the communication controller11of the external device10and the communication controller21of the remote control relay device20, control data and display data.

This control data means data used to enable communication with the device attempting communication (access), i.e., data essential to the communication protocol. For example, this control data is typically a user ID, password, or other data unique to a specific user, and the IP address or other data unique to the device. Data other than this control data is differentiated as “display data.” “Data” alone means both control data and display data.

The remote control relay method of this remote control relay device20is described next with reference toFIG. 7.FIG. 7is a flow chart of the operation of the Web controller22.

(1) Step S1is a power-on step for either turning the power on to or resetting the remote control relay device20.

(2) Step S2is an initialization step for setting the initial values for various data settings of the remote control relay device20.

(3) Step S3is a display memory storage step for storing data stored in the storage memory24to the display memory23.

(4) Step S4is the control memory storage step for saving data stored in the storage memory24to the control memory25according to an operation of the write command generator28.

(5) Step S5is a verification step for authenticating the external device10or user of the external device10according to the control data in control memory25.

(6) Step S6is a reference request detection step for detecting requests from the external device10to read reference data.

(7) Step S7is a data transmission step for sending data in display memory23to the external device10when a data reference request from the external device10is detected.

(8) Step S8is a change request detection step for detecting a request from the external device10to change data.

(9) Step S9is a change-data step for changing data in the display memory23when there is a change-data request from the external device10.

(10) Step S10is a storage request detection step for detecting requests from the external device10to save data.

(11) Step S11is a data storage step for storing data in the display memory23to the storage memory24when a data storage request is detected from the external device10.

Operation of this remote control relay device is described next with reference to the flow chart inFIG. 7.

(a) First, in the power-on step S1the remote control relay device20is turned on.

(b) Next, various default settings required for operation of the remote control relay device20are set to specific initial values in the initialization step (S2).

It should be noted that turning the power on refers both to the action of actually starting to supply power to the remote control relay device20from the power supply26, and to resetting the power supply by means of a reset circuit (not shown in the figure).

(c) Next, data stored to the storage memory24is read and written to the display memory23in the display memory storage step (S3).

(d) In order to rewrite the control data stored in the control memory25of the remote control relay device20configured as described above, a write command is asserted from the write command generator28to the Web controller22in an off-line mode, that is, not over the network. The write command generator28of the remote control relay device20is set up so that it cannot be operated over the network. More specifically, the write command generator28cannot be operated from an external device10via the network, and it can only be operated via commands applied directly thereto, i.e., not over the network. A pushbutton, for example, could be provided as the write command generator28of the remote control relay device20. The write command is then output only when the user directly presses this button on the remote control relay device20.

(e) Next, when the write command is input to the Web controller22, the Web controller22reads the control data stored in the storage memory24and saves the control data to the control memory25in the control memory storage step (S4). As a result, if the user has previously changed control data in the storage memory24via the network, those changes can be reflected in the authentication process, for example.

Furthermore, if the control data was illicitly changed by an unauthorized user that penetrated the system, the control data in the control memory25is secure and will not be rewritten because the authorized user has not directly operated the write command generator28. In addition, if the user wants to not rewrite the data in the control memory25, the authorized user simply does not perform this non-network operation (i.e., operating the write command generator28directly) and the control data in the control memory25will therefore not be rewritten.

Control then passes to the next step.

(f) Next, if the remote control relay device20has been accessed over the network from the external device10, the verification step determines if the protocol received from the external device10can be used by the remote control relay device20. This protocol check is done by the Web controller22reading the control data from the control memory25to the communication controller21and comparing the control data with the data received from the external device10.

(g) Whether the user of the external device10is an authorized user as set in the remote control relay device20is then determined. This user authentication process is done by the Web controller22reading control data from the control memory25to the communication controller21, and comparing the control data with the user ID, password, and other verification data received from the external device10.

Only control data stored in the control memory25is used for the protocol check and user verification processes described above. That is, control data is stored to the display memory23and storage memory24, but because this control data could be illicitly changed by an unauthorized user it is not used for protocol checking and user verification.

If the verification step (S5) determines that the protocol from the external device10cannot be used on the remote control relay device20, or if authentication of the user of the external device10fails, the user is prevented from operating the Web controller22of the remote control relay device20. User access to the Web controller22is permitted only when the protocol is confirmed usable by the remote control relay device20and the user authentication succeeds.

(h) When authentication succeeds in step S5and the Web controller22can be used, what the protocol from the external device10is requesting of the remote control relay device20is determined and the Web controller22operates according to the request. The external device10user can thus perform the following three operations using the remote control relay device20.

(i) First, data stored in the display memory23can be referenced. Requests from the external device10to reference data are passed through the communication controller21to the Web controller22. These requests are detected in the reference request detection step (S6). Then in the data transmission step (S7), the Web controller22reads the data from the display memory23to the communication controller21, and sends the data from the communication controller21to the external device10.

(j) Second, data stored in the display memory23can be changed. Requests from the external device10to change data are passed through the communication controller21to the Web controller22. These requests are detected in the change request detection step (S8).

This request to change data could be, for example, a request to change the user password sent from a menu on the cell phone10aas shown inFIG. 5. The Web controller22then controls writing the changed data or new data to the display memory23through the communication controller21and Web controller22in step S9. This could result in the current password being changed to a new password from a Change Password screen such as shown inFIG. 6.

(k) Third, data in the display memory23can be copied to the data storage memory24. Data storage requests from the external device10are passed through the communication controller21to the Web controller22. These requests are detected in the storage request detection step (S10). Next, in the data storage step (S11) data in the display memory23is copied to the data storage memory24by the Web controller22. An example of this is shown inFIG. 6where the user clicks an OK button in the Change Password screen on the cell phone10ato store the new password to the storage memory24.

(l) When operation by the user of the external device10ends, the remote control relay device20waits for a next access from the external device10, or the Web controller22stops operating if the remote control relay device20power is turned off.

A remote control relay device according to this first embodiment of the present invention thus has a write command generator28that cannot be operated using an external device10over a network. Because the content of the control memory25is not rewritten unless a write command is applied by the write command generator28to the Web controller22, writing the control memory25using an external device10over a network is rendered impossible.

This means that an unauthorized user not enabled by the authorized user to access the system cannot access the remote control relay device20over a network and illicitly write to the control memory25. The control data in the control memory25used for external device10authentication therefore cannot be rewritten from an external device10unless specifically intended by the authorized user. The authorized user can therefore be assured of access to the external device10even if the system is accessed by an unauthorized user because tampering with the control data is not possible.

When the control data is changed the user could also be notified that the control data was changed the next time the system responds to access from an external device. A change in control memory25content could also be reported automatically to a preregistered contact, such as by calling a preregistered telephone number.

A remote control relay device according to a second embodiment of this invention is described next with reference toFIG. 8.FIG. 8is a block diagram showing the configuration of this remote control relay device. The remote control relay device20in this embodiment differs from that in the above first embodiment in that it has a power supply detection unit27in place of the write command generator28. This power supply detection unit27is a circuit for detecting a rise in the power supply voltage and outputting a write command. The Web controller22and power supply detection unit27could also be combined as a single writing control unit29b.

A recording and playback apparatus40according to another example of the remote control relay device in this second embodiment is shown inFIG. 9.FIG. 9is a block diagram showing the configuration of the recording and playback apparatus40in detail. It is noted that following can be also related to the another example.

This recording and playback apparatus40has an internal remote control relay device32with the same configuration and function as the remote control relay device20shown inFIG. 8, and a recording and playback unit34containing the content recording and playback functions. Because this recording and playback apparatus40has the remote control relay device32internally disposed, it can be treated as a single product.

The operation of a remote control system including a remote control relay device20according to this embodiment of the invention is described next with reference to the flow chart inFIG. 10.

(1) Step S1is a power-on step for either turning the power on to or resetting the remote control relay device20.

(2) Step S2is an initialization step for setting the initial values for various data settings of the remote control relay device20.

(3) Step S3is a display memory storage step for storing data stored in the storage memory24to the display memory23.

(4) Step S4is the control memory storage step for saving data stored in the storage memory24to the control memory25.

(5) Step S5is a verification step for authenticating the external device10or user of the external device10according to the control data in control memory25.

(6) Step S6is a reference request detection step for detecting requests from the external device10to read reference data.

(7) Step S7is a data transmission step for sending data in display memory23to the external device10when a data reference request from the external device10is detected.

(8) Step S8is a change request detection step for detecting a request from the external device10to change data.

(9) Step S9is a change-data step for changing data in the display memory23when there is a change-data request from the external device10.

(10) Step S10is a storage request detection step for detecting requests from the external device10to save data.

(11) Step S11is a data storage step for storing data in the display memory23to the storage memory24when a data storage request is detected from the external device10.

Operation of this remote control relay device is described next with reference to the flow chart inFIG. 10.

(a) First, in the power-on step S1the remote control relay device20is turned on.

(b) Next, various default settings required for operation of the remote control relay device20are set to specific initial values in the initialization step (S2).

It should be noted that turning the power on refers both to the action of actually starting to supply power to the remote control relay device20from the power supply26, and to resetting the power supply by means of a reset circuit (not shown in the figure). Note that in this embodiment the power supply26and power supply detection unit27cannot be operated from an external device10via the network. In other words, the power supply26and power supply detection unit27cannot be operated on-line, and can only be operated off-line.

(c) When power supply to the remote control relay device20starts or the power supply is reset, the power supply detection unit27detects the start of power supply to the remote control relay device20and outputs a write command to the Web controller22.

(d) When the write command is applied thereto the Web controller22saves the data stored in the storage memory24to the display memory23in the display memory storage step (S3), and then saves the data stored in the storage memory24to the control memory25in the control memory storage step (S4).

(e) When the remote control relay device20is set up as described above and then accessed by an external device10, control moves to the verification step S5. The verification step S5determines if the protocol received from the external device10can be used by the remote control relay device20, and then determines if the external device10or the user of the external device10is an authorized user as set in the remote control relay device20.

This protocol check and user authentication are done by the Web controller22reading control data from the control memory25to the communication controller21and comparing the read control data with the data (user ID and password, for example) received from the external device10.

That is, the control data is stored to the display memory23and storage memory24, but for protocol and user verification purposes only data stored in the display memory23and control memory25is used.

If the verification step (S5) determines that the protocol from the external device10cannot be used on the remote control relay device20, or if authentication of the user of the external device10fails, the user is prevented from operating the Web controller22of the remote control relay device20. User access to the Web controller22is permitted only when authentication succeeds.

(f) If authentication succeeds in the verification step S5and using the Web controller22is allowed, what the protocol from the external device10is requesting of the remote control relay device20is determined and the Web controller22operates according to the request. The external device10user can thus perform the following three operations using the remote control relay device20.

(g) First, data stored in the display memory23can be read. Requests from the external device10to read data are passed through the communication controller21to the Web controller22. These requests are detected in the reference request detection step (S6). Then in the data transmission step (S7), the Web controller22reads the data from the display memory23to the communication controller21, and sends the data from the communication controller21to the external device10.

(h) Second, data stored in the display memory23can be changed Requests from the external device10to change data are passed through the communication controller21to the Web controller22. These requests are detected in the change request detection step (S8). The Web controller22then controls writing the changed data or new data to the display memory23through the communication controller21and Web controller22in step S9.

(i) Third, data in the display memory23can be copied to the data storage memory24. Data storage requests from the external device10are passed through the communication controller21to the Web controller22These requests are detected in the storage request detection step (S10). Next, in the data storage step (S11) data in the display memory23is copied to the data storage memory24by the Web controller22.

(j) When operation by the user of the external device10ends, the remote control relay device20waits for a next access from the external device10, or the Web controller22stops operating if the remote control relay device20power is turned off.

As described above, this remote control relay device of the invention has a power supply detection unit27. The control memory25can be written simultaneously to turning the remote control relay device20power on, thereby simplifying the remote control relay device20startup process. If the control memory25is volatile storage, such as DRAM (dynamic random access memory), the control memory25must be written when the remote control relay device20starts up. User convenience is thus improved by writing data to control memory25when the power is supplied to the remote control relay device20.

A remote control relay device according to the present invention features a write command generator that cannot be operated by an external device over a network. Furthermore, control data changed by the user of an external device cannot be written to control memory unless a write command is applied to the Web controller from the write command generator. It is therefore not possible to change the control data used for authentication in control memory by accessing the system over a network with an external device. Therefore, even if the system is accessed by an unauthorized user over a network, access by authorized users from an external device is always assured.

The present disclosure relates to subject matter contained in priority Japanese Patent Application No. 2002-87853, filed on Mar. 27, 2002, the contents of which is herein expressly incorporated by reference in its entirety.