Abstract:
A network management method and system and a computer that provides added security against hackers. A network management command is sent to the computer via short message service (SMS). The computer performs corresponding network configuration according to the network management command. Thus, a safe network management can be assured based on the secure capabilities of SMS.

Description:
FIELD OF THE INVENTION  
       [0001]     The invention relates to a method, system, and computer for performing network management via SMS (Short Message Service) to minimize vulnerability to computer hackers.  
       BACKGROUND  
       [0002]     Users employ various methods to access network resources such as the Internet. Indeed, some users have constructed small-scale network environments at home. Such users often desire to access the home-based resources from outside, freely and safely. They may always keep their computers at home connected to the Internet, and may have fixed public IP addresses. In such cases, methods such as ADSL, Ethernet, GPRS, PPP, and so forth, can be used. A common shortcoming of these methods is that the so-connected computers are liable to being attacked by hackers, since they are always exposed to the Internet environment.  
         [0003]     In order to prevent the occurrence of attacks by hackers, users may employ technology that combines Virtual Private Networks (VPN) and firewalls. With such a combination, computer resources are located behind firewalls and have no public IP addresses, and thus the danger of being successfully attacked by hackers is greatly reduced. But such a configuration needs a specialized network manager that must itself be vigorously defended against hackers, thus increasing total cost.  
         [0004]     Consequently, there is a need to ensure that the home-based computer resources can be accessed when needed, and that safety from attack by hackers is provided, all the while minimizing total costs.  
       SUMMARY  
       [0005]     An object of the invention is to provide network management, wherein the computer resources can be safely accessed from the outside.  
         [0006]     The invention encompasses a network management method, comprising: sending a network management command to an object via an SMS channel; and controlling the object according to the network management command.  
         [0007]     The invention encompasses a network management system, comprising: a computer resource and a remote user terminal, which each include: an SMS message interface, used for sending SMS messages to, or receiving SMS messages from, the counterpart; an SMS message converter, used for converting received SMS messages into network management events; a network management event distributor, used for distributing network management events; and a manager for executing network management according to distributed network management events.  
         [0008]     The invention encompasses a computer, comprising: an SMS message interface, used for receiving SMS messages; an SMS message converter, used for converting received SMS messages into network management events; a network management event distributor, used for distributing network management events; and a manager for executing network management according to distributed network management events.  
         [0009]     According to the invention, a safe network connection is provided, because the remote user terminal can “wake up” the home computer to connect to the Internet by sending an SMS message; thus the home computer does not need to be always connected to the Internet.  
         [0010]     Further according to the invention, even if the IP addresses of one or both of the connected parties is changed, notification can be provided by an SMS message so as to keep the connection potentially available.  
         [0011]     In addition, according to the invention, it is possible to dynamically execute various safe authorization controls on the home computer from a remote terminal by using SMS messages. 
     
    
     BRIEF DESCRIPTION OF THE DRAWINGS  
       [0012]      FIG. 1A  shows an exemplary schematic view of a network management system according to the invention;  
         [0013]      FIG. 1B  shows an exemplary embodiment of an SMS communication module interface according to the invention;  
         [0014]      FIG. 2  shows an exemplary functional block diagram of the network management system according to the invention;  
         [0015]      FIG. 3  shows an exemplary SMS message format according to the invention; and  
         [0016]      FIG. 4  shows an exemplary flow diagram of the network management method according to the invention.  
     
    
     DETAILED DESCRIPTION  
       [0017]     Short message service (SMS) may be employed for transmitting short-text messages. Standardized SMS provides encryption and protocols needed to guarantee the safety of the user&#39;s identification and the privacy of the transmitted data. Thus, short message service reduces the risk of forgery of a sender&#39;s identity and a message&#39;s contents.  
         [0018]     The invention utilizes SMS technology to perform network management.  FIG. 1A  shows an exemplary schematic view of a network management system according to the invention. In  FIG. 1A , a home computer  1  can be accessed from a remote user terminal  2  in a conventional way, using, for example, ADSL, Ethernet, GPRS, or PPP. In addition, both the home computer  1  and the remote user terminal  2  support the SMS protocol and can communicate with each other using SMS messages.  
         [0019]     In one embodiment of the invention, the home computer and the remote user terminal may be connected to mobile phones. In this embodiment, the SMS message communication between the home computer and the remote user terminal is implemented using the inherent function of receiving and sending SMS messages in the mobile phone.  
         [0020]     In another embodiment, the home computer and the remote user terminal may both have internal SMS communication modules. The interface of such a module  101  is shown in  FIG. 1B . The SMS communication module  101  provides an SMS communication interface which may conform to an industry standard for receiving and sending SMS messages, and which may utilize existing telecommunication equipment to send and receive SMS messages. The SMS communication module  101  may be connected to the home computer or the remote user terminal via another computer interface, which may conform to an interface standard such as PCI, USB, serial bus, and the like. The home computer or the remote user terminal transmits data to the SMS communication module and triggers the sending of SMS messages or presents SMS messages received by the SMS communication module via this computer interface.  
         [0021]     According to the invention, the home computer  1  need not always be connected to the Internet. Even if the home computer  1  is not connected to the Internet or the remote user terminal  2  does not know the IP address of the home computer  1 , the home computer  1  and the remote user terminal  2  according to the invention can still exchange SMS messages with each other via the SMS channel so as to perform network management. In other words, according to the invention the communication between the home computer  1  and the remote user terminal  2  and the corresponding network management are independent of the Internet.  
         [0022]     Next the process of the network management performed by the network communication system according to the invention will be described in detail with reference to  FIGS. 2 and 3 .  
         [0023]      FIG. 2  shows an exemplary functional block diagram of a network management system according to the invention. The home computer  1  may include an SMS message interface  201 ; an SMS message converter  205 ; a network management event distributor  210 ; a network connection manager  215 ; a firewall configuration manager  220 ; an authorization manager  225 ; a resource reservation manager  230 ; an Internet access manager  240 , and a user interface  235 . The structure of the remote user terminal  2  may correspond with that of the home computer  1 , thus its description will be omitted.  
         [0024]     The SMS message interface  201  receives an SMS message from the remote user terminal  2  or sends an SMS message to the remote user terminal  2  via the SMS channel. The SMS message converter  205  analyzes the SMS message received from the remote user terminal  2  by the SMS message interface  201  via the SMS channel, according to the SMS message format predetermined between the home computer  1  and the remote user terminal  2 , and converts the SMS message into the corresponding event according to the contents of the SMS message. Events may include instructions and their parameters for performing network management tasks.  
         [0025]     The exemplary SMS message format shown in  FIG. 3  may be employed. This format includes a two-byte flag; a one-byte SMS ID; a command list, and optionally a two-byte CRC. The flag is used to distinguish the SMS message according to the invention from other kinds of SMS messages having other functions. The SMS ID is used to recognize the identification number of the SMS message sent by a sender. The command list includes the instruction contents. The command list may include multiple commands. The particular format shown in  FIG. 3  is illustrative of the invention rather than limiting, of course, and other message formats may be used as well.  
         [0026]     The network management event distributor  210  distributes events generated by the SMS message converter  205  to the corresponding network connection manager  215 , the firewall configuration manager  220 , the authorization manager  225 , the Internet access manager  240 , or the resources reservation manager  230 . Specifically, the network management event distributor  210  analyzes the instruction in an event, and distributes a network connection event to the network connection manager  215  when the instruction is to do network connection; distributes a firewall configuration event to the firewall configuration manager  220  when the instruction is to configure the firewall rules; distributes an authorization setting event to the authorization manager  225  when the instruction is to set the authorizations; distributes a network resource reservation event to the resources reservation manager  230  when the instruction is to do the network resource reservation; and distributes an Internet management event to the Internet access manager  240  when the instruction is to access to or to disconnect from the Internet.  
         [0027]     The network connection manager  215  processes according to the instruction contents of the received event. Three cases arise in which the instruction contents are to establish a network connection with the remote user terminal  2 . In the first case, in which the home computer  1  has a fixed IP address, the network connection manager  215  extracts from the received event the address information sent by the remote user terminal  2 , which indicates the current network position of the remote user terminal  2  such as the IP address, the proxy address, or the NAT address of the remote user terminal  2 . The network connection manager  215  then generates a “return” event, which includes the IP address of the home computer  1 . The network management event distributor  210  sends this “return” event to the SMS message converter  205 , which in turn converts the “return” event into an SMS message and sends the SMS message back to the remote user terminal  2  via the SMS message interface  201 . Through the above processes, network connection information is exchanged between the home computer  1  and the remote user terminal  2  so that they can immediately establish a network connection via conventional connection protocol.  
         [0028]     In the second case, in which the home computer  1  has no fixed IP address and the remote user terminal  2  has a fixed IP address, the network connection manager  215  may directly instruct the CPU of the home computer  1  to execute the operation of accessing the remote user terminal  2  based on the IP address of the remote user terminal  2  extracted from the event. Of course, the processing in the first case can be executed in a way similar to that in the second case instead of sending the “return” SMS message back to the remote user terminal  2 .  
         [0029]     In the third case, when neither the home computer  1  nor the remote user terminal  2  has a fixed IP address, for example when both of them use NAT to determine the network addresses, either the remote user terminal  2  or the home computer  1  acquires the NAT mapped IP address of its counterpart. A network connection is established by the network connection manager of its counterpart. In the above three cases, if the network connection manager  215  of the home computer  1  can extract the IP address of its counterpart, it can directly establish a network connection with its counterpart. Otherwise, it will notify its counterpart of its own IP address via the SMS message and let its counterpart start to establish the connection.  
         [0030]     The firewall configuration manager  220  configures or updates the rules of the firewall in the home computer  1  according to instructions and parameters included in the firewall configuration event.  
         [0031]     The authorization manager  225  modifies the access authorization information of the home computer  1  according to instructions and parameters included in the authorization management event.  
         [0032]     The resource reservation manager  230  sets the resource reservation of the home computer  1  according to instructions and parameters included in the resource reservation event.  
         [0033]     When the content of the instruction is to connect to or to disconnect from the Internet, the Internet access manager  240  instructs the CPU of the home computer  1  to execute the operation of connection or disconnection.  
         [0034]     The user interface  235  sends information entered by the user to the corresponding manager, which in turn executes the operation of local network connection, local firewall configuration, local authorization management, local resource reservation, or local Internet access. And, if needed, the respective manager generates a corresponding event and sends it either via the network management event distributor  210  or directly (not shown in the figure) to the SMS message converter  205 . The SMS message converter  205  then converts the event into an SMS message and notifies the external remote user terminal  2  via the SMS message interface  201 . In addition, the user can also input the control information for the remote user terminal  2  such as network connection, firewall configuration, authorization management, resource reservation management, and Internet access via the user interface  235 . The respective manager then generates a corresponding event and sends it either via the network management event distributor  210  or directly (not shown in the figure) to the SMS message converter  205 . The SMS message converter  205  then converts the event into an SMS message and sends it to the external remote user terminal  2  via the SMS message interface  201  so as to implement the control of the remote user terminal  2 .  
         [0035]      FIG. 4  shows an exemplary operational flow diagram of the network management system. The SMS message interface  201  receives an SMS message (step  401 ). The SMS message converter  205  then converts the SMS message into a corresponding event (step  402 ). The network management event distributor  210  distributes the event to a corresponding specific manager (step  403 ). The manger executes the corresponding operation (step  404 ).  
         [0036]     Although the network management system and method according to the invention have been illustrated with reference to the home computer  1 , those skilled in the art will now recognize that similar processing can also be used to access the remote user terminal  2  from the home computer  1 .  
         [0037]     In addition, although the home computer  1  and the remote user terminal  2  are used in the exemplary embodiments described above, those skilled in the art will now recognize that any type of computer, network, or terminal equipment that employs SMS message transmission control information can be used as well according to the invention.