Abstract: The exemplary embodiments of this invention provides a method and apparatus that features synchronizing of data objects in a client device with a server in a system since a last synchronization between the client device and the server by obtaining a list of added or modified data objects since the last synchronization, updating a cached object list on the client device with the list of added or modified data objects, obtaining a sorted list of existing data objects from the server, and detecting deleted data objects based on the comparison between the updated cached object list and the sorted object list. In particular, the synchronizing may include a control point periodically synchronizing the data objects with a content directory service (CDS) in a Universal Plug and Play (UPnP) device architecture (UDA).

Abstract: Methods, apparatuses and modules for creation of a generic public key infrastructure by use of established trust, wherein trust between a client and a registration authority is established, and an enrolled certificate is furnished in a secure manner to the client by use of the established trust. The present invention also address correspondingly configured servers and/or terminals, client and/or registration authorities and/or certificate authority entities, as well as device security, security-aware control points and security console units, provided with such modules and functions enabling the aspects of the method/s to be carried out. Respective computer programs and circuit arrangements for carrying out the aspects of the methods and/or for operating hardware to carry out the aspects of the above methods are also provided.

Abstract: A method, a terminal, and a server are provided to enable to remotely and securely grant, by an owner of a server, access to the server for a third party. A mechanism is defined to establish a trust relationship between a mobile device and a home gateway while in a home network and later to use that trust relationship when granting access to the home network (via remote access through the home gateway) to other devices.

Abstract: A network entity for providing QoS during remote access to a PnP network includes a QoS manager for receiving in-band device capabilities of a PnP-enabled in-band correspondent and a PnP-enabled out-of-band remote node, the remote node being in communication with the PnP network over a secure tunnel. As presented, the in-band device capabilities of the correspondent node are at least partially based on an in-band network interface of the correspondent node. The in-band device capabilities of the remote node, however, comprise capabilities having been mapped from out-of-band device capabilities, where those out-of-band device capabilities are at least partially based on an out-of-band network interface of the remote node. The QoS manager is further adapted to configure the correspondent and remote nodes for a desired in-band QoS based on the QoS policy and respective device capabilities.

Abstract: A system and method for enabling a UPnP device to provide services on behalf of another UPnP device. According to the present invention, all services requested from the original serving devices are redirected to the shadow device, while the original device has no knowledge of this redirection. With the present invention, a remote UPnP device requesting a service has no knowledge that the service is being provided by a shadow device.

Abstract: The use of ATOM/RSS feeds as a change log for web syndication. According to the present invention, whenever the SystemUpdateID changes, the CDS logs the change as a new entry in the ATOM feed. The SystemUpdateID is checked by a control point whenever it joins the network. If the SystemUpdateID is different, the control point promptly fetches the log, thereby eliminating the need to browse the entire CDS. When all of the items have been synchronized, the control point updates the time of last synchronization to reflect the current time. The control point then invokes other UPnP methods as necessary or desired.

Abstract: For enabling a remote access to a local network via a remote access device of the local network, a mobile device of the local network assembles and provides configuration settings for the remote access. The remote access device receives the configuration settings from the mobile device and enables a remote access to the local network via the remote access device using these configuration settings.

Abstract: A system for selectively granting access rights within a network. When a requesting device learns that a device is a secure device and is owned by a Security Console, the requesting device calls a listowners action to the secure device, which respond by transmitting a public key hash to the requesting device. The requesting device then multicasts a message including the public key hash. Security Consoles receiving the multicast message then determine whether they recognize the public key hash. If a Security Console recognizes the public key hash, then it responds to the multicast message and subsequently provides the requesting device with access rights to the secure device.

Abstract: An architecture where Web Syndication mechanisms such as RSS/Atom feeds can be used to discover remote UPnP devices for environments where the standard UPnP discovery mechanism (e.g. SSDP) does not work due to bearer-induced limitations or policy restrictions along the path. The present invention can be used to enable remote access to UPnP Networks. The present invention allows for the extension of usage of UPnP protocols and services beyond the physical boundaries of the home network. The present invention does not involve the use of multicast messages, which are problematic over uncontrolled networks such as the Internet. The present invention also has a low level of complexity; as SSDP is the only portion of the UPnP stack is altered.

Abstract: A Content Directory Service (CDS) security service specifying, in a user friendly manner, which users of a media server or other UPnP device own which content. The security service also permits the owners of content to control who is permitted to read the content. A CDS account manager is used to define user accounts and associated rights, such as validity periods and default rights. The CDS account manager is used by a security console which owns the media server. A CDS content manager is used to manipulate the rights to objects. The CDS content manager is used by a registered security aware control point (i.e., a control point associated with a user account) and can be used to change read and write access lists on the object.

Abstract: The invention relates to a method of arranging communication in a local area networking system comprising a first device, a second device and an intermediate node for arranging data transmission between the first device and the second device. The second device is arranged to multicast and/or broadcast messages to devices in the system. The transmission of multicast and/or broadcast messages to the first device is prevented by the interworking means.

Abstract: A mobile device is coupled to an ad-hoc, peer-to-peer local area network via a public network. A secure data connection is created between the mobile device and an access point of the local area network so that the mobile device operates in an address space of the local network. A proxy for the mobile device is operated on the local network. The proxy maintains one or more state variables related to operation of the mobile device on the local network. The proxy simulates a reduced power mode of the mobile device on the local network for purposes of shaping traffic over the secure data connection and provides the state variables to entities of the local network on behalf of the mobile device.

Abstract: Network file systems are mounted to a client arrangement via a local, ad hoc, peer-to-peer network. The client arrangement is coupled to the network, and one or more network file protocols that are compatible with the client arrangement are determined. Using XML-based discovery protocols of the network, descriptors of the one or more network file protocols are sent to a file server coupled to the network. A descriptor of at least one network file protocol compatible with the file server are received from the file server. The compatible file protocol is selected from the one or more network protocols. A network file system provided by the file server is mounted to the client arrangement using the compatible network file protocol.

Abstract: This invention describes a method for expanding universal plug and play capabilities in a power constrained environment thus facilitating communication between two terminals with universal plug and play (UPnP) application capabilities, wherein one of the terminals is in a sleeping mode. The present invention can be applied (but not be limited) to mobile terminals, wireless devices, portable devices, mobile communication devices, mobile phones, etc. The invention describes a mechanism in which the UPnP application dynamically instructs the TCP/IP stack to tune-up its parameters so that it can tolerate longer delays and timeouts, due to the fact that it operates in a power constrained UPnP environment.

Abstract: This invention relates to a server-site method, a client-site method, computer program products, a client, a server, a module and a system for remoting a user interface of an application between a server that executes said application and at least one client on which a representation of said user interface is to be rendered, wherein said representation of said user interface is generated at said server under consideration of a user interface description that is specific for a device platform of said at least one client; and wherein said representation of said user interface is transferred to said at least one client. Said representation of said user interface may for instance be a memory model representation or a frame buffer representation.

Abstract: A system and method for creating a virtual private network through a VPN gateway configuration service. The VPN gateway configuration service inherits UPnP zero-configuration characteristics and also provides an interface for configuring the VPN gateway that enables the configuration of any VPN gateway device, regardless of manufacturer. Additionally, the device control protocol defined by the VPN gateway configuration service can provide client provisioning, as well as enabling the configuration of gateway-to-gateway virtual private networks.

Abstract: This invention relates to a server-site method, a client-site method, computer program products, a client, a server, a module and a system for remoting a user interface of an application between a server that executes said application and at least one client on which a representation of the user interface is to be rendered, wherein the representation of the user interface is generated at the server under consideration of a user interface description that is specific for a device platform of the at least one client; and wherein the representation of the user interface is transferred to the at least one client. The representation of the user interface may for instance be a memory model representation or a frame buffer representation.

Abstract: A method and system for distinguishing between devices of different types (e.g., mobile and stationary devices) in a wireless local area network (WLAN) in order to provide additional services to one or the other. The method includes obtaining a device type for the terminal, and providing specific services to the terminal if the terminal is a device of a certain type.

Abstract: A method by which access to services of a network are controlled, including a step in which a client device presents proof of identity to a service security module attached to the network and providing security against unauthorized access to the service.

Abstract: A system, method, electronic device, module, and computer code product for communicating service information between an electronic device and a remote control point using an out-of-band discovery mechanism. An electronic device includes a memory unit, a processor operatively connected to the memory unit, and a data communication link for enabling communication within a network. The memory unit includes computer code for using an out-of-band discovery mechanism to provide service information to a remote control point through the data communication link.