PDF of AU patent 685383 (Prov. 199737515) 1.8Mb

This invention relates to a communication connection assembly and method.

The invention has particular but not exclusive application to a communication connection assembly for and method of facilitating interconnection between a relatively localised communication network of for example, PCs and network terminals, and a relatively wider area communication network, such as the Internet for example.

For illustrative purposes the present invention will be described with reference to connecting a PC or a local area network of PCs to an Internet service provider.

The following acronyms, abbreviations and terms are used throughout the specification:-

IP - Internet Protocol

UDP/TCP - Unacknowledged Datagram Protocol/ Transmission Control Protocol

ICMP - Internet Control Message Protocol

GSM - Group Special Mobile (Digital Mobile Phone)

SSL - Secure Socket Layer

CD-ROM - Compact Disk - Read Only Memory

DVD - Digital Video Disk

ISP - Internet Service Provider

PC - Personal Computer

EFT - Electronic Funds Transfer

e-cash - (digital) Electronic Cash

NT - Microsoft Windows NT

OTS - Off-the-shelf (as in hardware or software)

SMTP - Simple Mail Transfer Protocol (for Email)

ADSL - Asymmetric Digital Subscriber Loop

HTTP - Hypertext Transfer Protocol (for world-wide web)

DNS - Domain Name Services

XNTP - Extended Network Time Protocol

NNTP - Network News Transfer Protocol

FTP - File Transfer Protocol

SMB - Used by NT/DOS/WINDOWS for file and print service

NFS - Network file system

IPX/SPX - Novell's file protocol

imap, pop - client side Email Protocol

firewire - a bus from Apple

USB - Universal Serial Bus

SCSI - Small Computer System Interconnect

RTP - Real Time Protocol

RTPC - Real Time Control Protocol

IRC - Internet Relay Chat

RS-422 - IEEE standard bus - serial multidrop with differential line drivers

ROM - Read Only Memory

PABX - Private Automatic Branch Exchange

Currently interconnection with the Internet can involve the provision of hardware, service and server management. Hardware typically includes a router, external modem, telephone (Telco) line, firewall, Unix or NT host running IP protocols and services, and an Ethernet hub. Services required typically include Telco line access and ISP access contracts. Management requirements typically include installation, configuration, management and upgrades of the router, firewall and host software as well as system administration and security management of the firewall and server host(s).

Known host replacements provide simple or multiple IP services including SMTP, NNTP and HTTP in a single assembly. File servers providing NFS or SMB or IPX/SPX are known, as are print servers and terminal servers.

Known systems such as Microsoft Windows and Apple Macintosh are typically supplied with only the operating system and basic client network access software installed. Additional software may have to be loaded. PCs are not supplied pre-configured and must be configured by users.

Whilst it is known that Ethernet cards have a unique 48 bit address which may be co-opted, especially if it is built into the motherboard, PCs per se do not have a unique machine identifier as standard.

Access to the Internet is typically sold as an after market product with the user normally having to install, configure and manage it. Many regard the installation, configuration, maintenance and system administration of PCs as difficult skilled work and businesses typically employ desktop experts to maintain their PCs.

Typical servers currently available include Microsoft Windows NT or Unix hosts for mid-range systems.

Midrange Unix hosts come with unique machine identifiers which can be used to licence software. There is however no standard procedure when installing, configuring, maintaining and administering these servers and firewalls which requires skolled expertise. Designing networks and server provisions and planning service changes is a complex expert activity.

The present invention aims to provide an alternative to known communication interconnection assemblies and methods.

This invention in one aspect resides broadly in a communication connection assembly for facilitating interconnection between a relatively localised communication network and a relatively wider area communication network, the communication connection assembly including:-

all hardware, software, service and management facilities required to operatively effect said interconnection;

wherein said communication connection assembly comprises at least one integrated unit interconnectable with another integrated unit or with a localised communication network by non-expert connection means.

As used herein the expression "integrated unit" is to be given a broad meaning. The expression refers to all arrangements in which the facilities are integrated and housed in a unitary module or housing.

As used herein the expression "non-expert connection means" is to be given a broad meaning. The expression includes all arrangements for interconnecting modules which do not require expert knowledge and skills. Examples of non-expert connecting means include plug-in and pluggable connectors, infra-red couplings, wire-less couplings and other such connectors which do not require system planning or design to effect.

In a preferred embodiment the communication connection assembly includes assembly identification means adapted to uniquely identify said communication connection assembly. The assembly may also include local network identification means adapted to uniquely identify the localised communication network or its owner.

It is preferred that the communication connection assembly includes an expansion bus for facilitating the incorporation of additional hardware, software, service and management facilities subsequent to initial installation.

As used herein the expression "expansion bus" is to be given a broad meaning. The expression includes any system of connectors, wiring, voltage levels, protocols and commands which provide relatively fast, inexpensive and simplified interconnection externally of integrated units. Examples of industry standard expansion buses include Firewire, USB, SCSI, RS-422 and Ethernet.

In another aspect this invention resides broadly in a method of operatively interconnecting a relatively localised communication network and a relatively wider area communication network, the method including:-

providing an integrated communication connection assembly including therein all hardware, software, service and management facilities required to operatively effect the interconnection, and assembly identification means adapted to uniquely identify the communication connection assembly;

configuring the communication connection assembly to uniquely link the identity of the communication connection assembly and the identity of the localised communication network or its owner;

connecting the integrated communication connection assembly to the localised communication network and to the wider area communication network by non-expert connection means.

In order that this invention may be more easily understood and put into practical effect, reference will now be made to the accompanying drawings which illustrate a preferred embodiment of the invention, wherein:-

FIG 1 is a block diagram of the hardware configuration of the netserver of the present invention; FIGS 2 and 3 are logical block diagrams of the netserver of the present invention, and

FIG 4 is a block diagram of a another hardware configuration of the present invention in which there is more than one integrated unit.

As used herein the expression "netserver" means a communication connection assembly for facilitating interconnection between a relatively localised communication network and a relatively wider area communication network.

As can be seen in FIG 1, netserver 10 includes CPU 14, memory 15, disk 16, CD-ROM drive (or optionally DVD) 17 and power supply 18. These hardware components, together with all software and service and management facilities necessary to effect an operative connection between the networks are integrated and housed within a single module or casing 11. An external expansion bus 19 is provided to allow for the ready attachment of additional devices such as audio, video, telephony etc.

Netserver 10 has input port 12 for connection to the local network and output port 13 for connection to the external network. Input port 12 may typically comprise 10 or 100 Mb twisted pair Ethernet and output port 13 which provides the external network interface may typically be a PC-CARD modem or PC-CARD cable modem or ADSL or fibre optic interface.

Netserver 10 has a unique identifier 40 in the form of hardware components such as a ROM which is unalterable and is set at the time of manufacture in manner similar to mobile phones and ethernet cards. Identifier 40 uniquely identifies netserver 10 which also includes a network identifier 41 in the form of a programmable removable module similar to the removable SIM personality module of GSM digital mobile phones and which uniquely identifies the localised network to which the netserver is to be connected or the owner of that network.

As can be seen in FIG 2 which is a logical block diagram of the netserver 20 of the present invention, netserver 20 comprises external network services 22 connected by an external line 26 to an ISP 21, an internal interconnection layer 23, and local servers 24 which are accessed via local network 27 by local network devices 25. The interconnection layer 23 establishes connections between local devices and the external network and other local devices and local servers. Protocol layer 28 provides handling of the network protocols for both the external and local networks and usually interfaces directly with the hardware.

External network services 22, internal interconnection layer 23, local servers and functions 24 and protocol layer 28 are housed within a single integrated unit 29.

The interconnection functions can transfer packets between the network devices ie routing, can restrict access to sites or content by user or to terminal by censorship classification ie content filtering, and can provide basic firewall functions of allowing or disallowing services on the basis of source and packet filtering.

In larger installations, one or more of these interconnect layers may be turned off and the services performed by an external device as described with reference to FIG 4 or connected on either the local or external network.

FIG 3 exemplifies the functions, protocols, connections etc typically incorporated in the protocol layer 28, interconnection layer 23, external service connections 22 and local servers 24. Thus the protocols included in protocol layer 28 typically include ICMP, UDP, TCP and possibly RTP. The functions included in interconnection layer 23 typically include Routing, basic Firewall, and Content Filtering. The local servers and functions 24 typically include Software Upgrade, Authentication/Identification and Licence Administration; File Server access via NFS, SMB or SMB; Web Server and Web Cache; E-mail access via pop, imap or SMTP and E-mail storage; News via NNTP; and DNS services. The external service connections 22 typically include FTP, SSL, HTTP, HTTPS, SMTP, XNTP and DNS.

As can be seen in FIG 4, there may be more than one integrated unit. Netserver 31 has two integrated units 32 and 33 connected by expansion bus 34. Integrated unit 32 includes all protocols, functions servers etc in netserver 20 illustrated in FIGS 2 and 3, with the exception of a firewall. Firewall 35 has its own dedicated integrated unit 33 and is a higher level firewall more suited to a business application than a basic firewall suitable for domestic applications.

It will be understood the firewall per se may provide the connection to the external network.

The netserver of the present invention simplifies basic connection to the Internet by providing a communication connection assembly having at least one integrated unit and which includes all the hardware, software, service and management facilities to connect a PC or a number of PCs or network terminals to a wider internet with the only additional requirement being a link to an ISP.

The netserver also provides an expansion capability to allow extra facilities, services, hardware or peripherals to be attached. New technologies and Internet services, such as EFT, e-cash, Digital Video Disk (DVD), and Real Time Audio/Video can be added via an expansion bus, as can internal replacement or additional components and software upgrades.

Each netserver has a unique unalterable identity and a transferable "personality" in a manner equivalent to GSM mobile phones.

Software is initially installed during manufacture and subsequently new or additional software can be installed over the Internet or via CD-ROM. Upgrades of embedded software are typically user-requested and loaded from the Internet or CD-ROM via authenticated secure transactions.

The netserver of the present invention is configured by the merchant or authorised dealer via authenticated secure transactions with service provision contracts with an ISP normally being incorporated with the initial purchase. As is the case with mobile phones and ethernet cards, netservers without a network connection cannot be used.

The need for a user to manage the netserver is limited with management being provided by authenticated access to web pages. Access Control, User Identification, Authentication and Authorisation is provided through standard Internet protocols and managed by authenticated web pages.

Content-filtering and Access Barring, eg by a censor classification for restricted access by children or the barring of access to games and erotica during business hours, can also be provided. Typical of such functions is "Net-nanny".

Additional protocols, services and hardware can be included in the netserver of the present invention. These include RTP and RTCP protocols; services such as Real Time Audio/Video, Internet Telephony and PABX, IRC and Multicast; and hardware such as AM/FM and video tuner, VCR or Audio input, 10/100 Mb network interfaces, Audio PreAmp, Remote Control, House and environment control, Alarm system interface, telephone interface, fax and scanner attachment, and printer(s).

Thus the present invention includes such additional protocols, services and hardware to comprise an integrated unit interconnectable with another integrated unit or with a localised communication network by non-expert connection means.

It will be realised that a significant aspect of the present invention is that the netserver is sold completely ready for operation and can be installed (except for an ISP connection), operated, upgraded and expanded by essentially inexperienced operators and users. The non-expert user of the present invention needs no detailed knowledge of the internal design, configuration or operation of the various components of the system. No planning and design is needed for installation or new attachments and little or minimal configuration is required.

This is achieved in the netserver of the present invention by establishing a system of non-expert connections between integrated units wherein the mode of connection is self-evident and substantially without options thereby ensuring that relatively error free interconnections are made.

Non-expert user involvement is further limited by the provision of a control interface via the local services, which for example may be effected through a set of web pages which are at least password protected and preferably strongly authenticated. This control interface assists the non-expert user in looking after the following tasks or functions which substantially comprise the extent of user involvement:-

- user initiated software upgrades or installation

- adding or deleting users

- defining or modifying user details or capabilities

- service functions and configuration of the netserver

- server configuration and accessibility, eg web, ftp, e-mail

- adding, deleting, modifying licences and access for digital objects.

The control interface sets up and modifies a database of user and terminal information for services provided such as:-

- e-mail and news: user names and nicknames, the ability to send or receive messages

- ftp and file server: user name and access rights to files, fileserver

- web: user name and access to sites or types of content

- configuration: name, identification/authentication and capabilities.

Specific functions, such as netserver configuration, may be limited to a particular terminal as well as the authorised user.

It will be appreciated that the present invention differs from known arrangements of inter-network connection in a number of ways. These include the following:-

. The netserver of the present invention provides all the hardware, software, services and management for basic Internet access in a single integrated unit.

. The netserver of the present invention is manufactured as a fully functional unit with all software loaded and local network interfaces installed.

. The merchant selling the netserver of the present invention configures it for the purchaser's site at the time of sale - in manner similar to that in which mobile telephones are customised when sold.

. Similarly as with mobile telephones, new netservers are normally sold together with a network connection.

. The physical installation of the netserver of the present invention (except for the external link to an ISP) is done by a non-expert user with no greater complexity than, for example, installing a stereo system.

. The netserver of the present invention is purchased as a turn-key product completely ready for operation and is thus fully functional as soon as it is connected to a power supply and to the network (PCs) terminals.

. Management of the netserver of the present invention is much simplified, with little or no management normally needed apart from standard housekeeping activities such as excess file deletion, back-ups, archiving etc.

. Software upgrades can be incorporated from the Internet or from CD-ROMs via secure authenticated transactions.

. The addition or removal of external devices is performed by non-expert users in a manner similar to adding or changing components in a stereo sound system.

The netserver of the present invention has a number of advantages in comparison with known arrangements of internetwork connection. These include the following:-

. As in the manner of mobile phone purchase, one single merchant sells a complete solution ie the hardware, software, service and support in one single unit.

. The netserver of the present invention is supplied fully configured and apart from an ISP connection nothing extra is required. Thus no configuration or management by a user is required and users can be non-expert. Users need have no detailed or specialist knowledge, experience or training to install and use the netserver of the present invention.

. The netserver of the present invention can provide either a complete basic Internet access and server solution, or optionally, a netserver suitable for small businesses and the like which may contain discrete elements at a greater-than-basic level in functions such as Firewall for example, with a higher quality Firewall included in the overall assembly as a separate integrated unit connected either via the network or via the expansion bus

. Upgrades and changes to the external and local network is facilitated by the netserver of the present invention which interfaces with third-party hardware.

It will of course be realised that whilst the above has been given by way of an illustrative example of this invention, all such and other modifications and variations hereto, as would be apparent to persons skilled in the art, are deemed to fall within the broad scope and ambit of this invention as is herein set forth.

1. A communication connection assembly for facilitating interconnection between a relatively localised digital data communication network and a relatively wider area digital data communication network, said communication connection assembly including:-

hardware, software, service and management facilities for operatively effecting said interconnection, and

at least one integrated unit characterised as being interconnectable with another integrated unit or with a localised digital data communication network by non-expert connection means.

2. A communication connection assembly as claimed in claim 1, and including:-

assembly identification means adapted to uniquely identify said communication connection assembly, and

local network identification means adapted to uniquely identify said localised communication network or its owner.

3. A communication connection assembly as claimed in claim 1, and including an expansion bus for facilitating the incorporation of additional hardware, software, service and management facilities subsequent to initial installation.

DATED this EIGHTH day of OCTOBER 1997.

by

Page Last Updated 07-Apr-98