Method, gateway and system for transmitting data between a device in a public network and a device in an internal network
A gateway for connecting a public network to an internal network is provided. The gateway comprises a control unit for controlling transmission of incoming and/or outgoing data between a remote device in the public network and an internal device in the internal network; a public port connected to the public network; an internal port connected to the internal network; and a storage unit storing a list of public key identifiers and respectively associated internal network addresses of internal devices; wherein the control unit is adapted for identifying a destination of the incoming data, which are addressed to a public network address of the gateway, by determining an internal network address of the internal device based on public key information included in the incoming data and the list of public key identifiers and associated internal network addresses.
1. A gateway for connecting a public network to an internal network, the gateway comprising:
a control unit for controlling transmission of incoming and/or outgoing data between a remote device in the public network and an internal device in the internal network;
a public port connected to the public network and having at least one public network address; and
an internal port connected to the internal network; and
a storage unit storing a list of public key identifiers and respectively associated internal network addresses of internal devices,
wherein the control unit uses public key information included in an incoming data message sent to the public port and the list of public key identifiers stored in the storage unit and respectively associated internal network addresses of internal devices to determine a destination internal network address of a destination internal device, the control unit directing incoming data to the destination internal device with the determined destination internal network address.
2. The gateway according to claim 1 , wherein the public key information in the incoming data includes the public key identifier.
3. The gateway according to claim 1 , further comprising:
an encryption/decryption unit for decrypting the incoming data and/or encrypting the outgoing data.
4. The gateway according to claim 1 , further comprising:
an authentication unit for verifying the authenticity of transmitted data, the internal device, the remote device and/or used keys.
5. The gateway according to claim 1 , wherein the control unit is adapted to provide a connection path for a two-way communication between the remote device and the internal device.
6. The gateway according to claim 1 , further comprising:
an access control unit for determining whether the incoming or the outgoing data may be transmitted according to predefined access control rules.
7. The gateway according to claim 2 , further comprising:
an encryption/decryption unit for decrypting the incoming data and/or encrypting the outgoing data;
an authentication unit for verifying the authenticity of transmitted data, the internal device, the remote device and/or used keys; and
an access control unit for determining whether the incoming or the outgoing data may be transmitted according to predefined access control rules.
8. The gateway according to claim 2 , further comprising:
an authentication unit for verifying the authenticity of transmitted data, the internal device, the remote device and/or used keys.
9. The gateway according to claim 2 , wherein the control unit is adapted to provide a connection path for a two-way communication between the remote device and the internal device.
10. The gateway according to claim 2 , further comprising:
an access control unit for determining whether the incoming or the outgoing data may be transmitted according to predefined access control rules.
11. A system, comprising
a gateway for connecting a public network to an internal network, the gateway comprising:
a control unit for controlling transmission of incoming and/or outgoing data between a remote device in the public network and an internal device in the internal network;
a public port connected to the public network and having at least one public network address; and
an internal port connected to the internal network;
a storage unit storing a list of public key identifiers and respectively associated internal network addresses of internal devices, wherein the control unit uses public key information included in an incoming data message sent to the public port and the list of public key identifiers stored in the storage unit and respectively associated internal network addresses of internal devices to determine a destination internal network address of a destination internal device, the control unit directing incoming data to the destination internal device with the determined destination internal network address; and
a remote device addressing data intended for an internal device of the internal network of the gateway to the public network address of the gateway.
12. The system according to claim 11 , wherein the remote device stores a plurality of gateway addresses for the destination and selects the public network address of the gateway from the list of gateway addresses in accordance with predefined first gateway determination rules.
13. The system according to claim 11 , further comprising:
a public key information server providing the public network address of the destination's gateway as a destination address upon request.
14. The system according to claim 13 , wherein the public key information server stores a plurality of gateway addresses for at least one destination and selects the public network address of the gateway from the list of gateway addresses in accordance with second predefined rules.
15. A method for transmitting incoming and/or outgoing data between a remote device in a public network and an internal device in an internal network, the method performed in a gateway of the internal device comprising:
transmitting the data between the remote device and the gateway of the internal device using a public address of the gateway;
storing a list of public key identifiers and associated internal network addresses;
identifying a destination of the incoming data, which are addressed to the public network address of the gateway, by determining an internal network address of the internal device based on the public key information included in the incoming data and the stored list of public key identifiers and associated internal network addresses; and
forwarding the incoming data to the internal network address of the destination identified in said identifying step.
16. A system, comprising
a gateway for connecting a public network to an internal network, the gateway including:
a control unit for controlling transmission of incoming and/or outgoing data between a remote device in the public network and an internal device in the internal network,
a public port connected to the public network and having at least one public network address, and
an internal port connected to the internal network;
a storage unit storing a list of public key identifiers and respectively associated internal network addresses of internal devices, wherein the control unit uses public key information included in an incoming data message sent to the public port and the list of public key identifiers stored in the storage unit and respectively associated internal network addresses of internal devices to determine a destination internal network address of a destination internal device, the control unit directing incoming data to the destination internal device with the determined destination internal network address, the public key information in the incoming data including the public key identifier; and
a remote device addressing data intended for an internal device of the internal network of the gateway to the public network address of the gateway.
17. A system, comprising
a gateway for connecting a public network to an internal network, the gateway including:
a control unit for controlling transmission of incoming and/or outgoing data between a remote device in the public network and an internal device in the internal network,
a public port connected to the public network and having at least one public network address, and
an internal port connected to the internal network;
a storage unit storing a list of public key identifiers and respectively associated internal network addresses of internal devices, wherein the control unit uses public key information included in an incoming data message sent to the public port and the list of public key identifiers stored in the storage unit and respectively associated internal network addresses of internal devices to determine a destination internal network address of a destination internal device, the control unit directing incoming data to the destination internal device with the determined destination internal network address, the public key information in the incoming data including the public key identifier;
an access control unit for determining whether the incoming or the outgoing data may be transmitted according to predefined access control rules; and
a remote device addressing data intended for an internal device of the internal network of the gateway to the public network address of the gateway.
18. The system according to claim 17 , further comprising:
a public key information server providing the public network address of the destination's gateway as a destination address upon request.
19. The gateway according to claim 17 , wherein the public key information in the incoming data allows to determine the public key identifier.
20. A computer readable storage medium holding computer executable instructions for performing a process comprising the steps of:
transmitting the data between the remote device and the gateway of the internal device using a public address of the gateway;
storing a list of public key identifiers and associated internal network addresses;
identifying a destination of the incoming data, which are addressed to the public network address of the gateway, by determining an internal network address of the internal device based on the public key information included in the incoming data and the stored list of public key identifiers and associated internal network addresses; and
forwarding the incoming data to the internal network address of the destination identified in said identifying step.
21. A system for transmitting incoming and/or outgoing data between a remote device in a public network and an internal device in an internal network, comprising:
means for transmitting the data between the remote device and the gateway of the internal device using a public address of the gateway;
means for storing a list of public key identifiers and associated internal network addresses; and
means for identifying a destination of the incoming data, which are addressed to the public network address of the gateway, by determining an internal network address of the internal device based on the public key information included in the incoming data and the stored list of public key identifiers and associated internal network addresses; and
means for forwarding the incoming data to the internal network address of the destination identified in said identifying step.
22. The system of claim 21 , wherein said means for transmitting, said means for forwarding, said means for storing and said means for identifying comprise devices of a computer system.
23. The system of claim 21 , wherein said means for transmitting, said means for forwarding, said means for storing and said means for identifying comprise computer readable instructions recorded on a computer readable medium.